Also fix up the example for replacing the memberOf overlay

Broken in 2c0499ae adding nesting

Just skip normalization if there's no equality rule. We accept
DNs without equality rules already.

We should probably just check in dnNormalize instead, and catch
this everywhere DNs are received. It might make us reject some
DNs that are already in use, though (e.g. received from other
directory servers that don't do schema checking).

if the entryCSN is older. Previous patch breaks if writes are
received out of order, e.g. during a refresh.

Howard Chu authored Sep 30, 2020 and Quanah Gibson-Mount committed Sep 30, 2020

This check is only needed for ops received without a CSN in their cookie.
This only occurs when the ops completed out of order on the provider.