I don't get much what is reason to write nil if `nss_base_passwd == base_dn`. Maybe some comment can help here.