dn is returned by default from all LDAP queries.