r2891: call rootDSE only with LDAP_SEARCH_SCOPE_BASE