Is there any reason we don't use ldap_err2string() to get readable errormessages from LDAP, instead something like "error code 49"? It'salready used in some places, so it's apparently OK to use. Proposedpatch attached.