ldap-search-entries and a possibly bad default