directory: make search public
entry serves minimally from cache
id-dn-mapping