Make LDAPDirectory log while ignoring entries with semantic consistency issue of LDAP or Active Directory server instead of failing

For instance if there are two users registered with the same sAMAccountName at different positions in the tree, report the DNs of the offending entries in the logs but make it still possible to use other users to login and browse the directory content even with queries that would have matched the inconsistent entries.

Also Active Directory sometimes throw NameErr: DSID-031522C9, problem 2001 when performing queries on entries that have semantic issues. In that case make Nuxeo log the error and return an empty result sets but still make it possible to perform queries on entries that don't have this issue.

Here is a tech support forum entry at microsoft.com that explains how the Active Directory admin can fix this error:

http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/11d820cd-e7ee-43a7-a006-a2a77953d13d