s4:dirsync: fix interaction of dirsync and extended_dn controls