idmap_rfc2307: "ldap_next_entry" needs the previous entry, not the start