basic support for ldap 2.4 and its cn=config format