s3:libads/ldap.c: if the client belongs to no site at all any dc is the closest