Added fallback for non-administrators.
Fixed the ldap-chfn --full-name option to update givenName and sn
attributes, too.
Allowed distinguished names (DNs) to be passes to administration tools,
too.