Pull in a variety of bug fixes from HEAD including

	critical client control handling
	tls cert checking
	sasl/tls ref handling
	empty dn handling
Also removed ufn search (normally I would have left it
in but the merge was easier this way).