dirsync interaction with extended-dn control (azure ad connect fix)

From https://bugzilla.samba.org/show_bug.cgi?id=14153:

Azure AD connect reports

discovery errors:

reference-value-not-ldap-conformant

for attributes member and manager.

There's a problem with exteded DNs, fix is close to come.