openldap: prefer using ldap_err2string() over sstrerror()