r13508: some ASN.1 element in LDAP are optional,