LDAP_OPT_REFERRALS should default to zero