(which was axed log ago)

- op->o_tmpmfunc setup

These calls belong in an ldap_destroy() library function.

Other pointers may have different representation.

Also don't lock op->o_conn->c_mutex.  It is already locked by slapd/abandon.c.

Use etest {...} | dtest {...} to test.

Remove TLS hard as an ldap.conf option as being not a over-writable
default.  The appropriate way to request ldaps:// is use an ldaps://
URI.  A rewrite to only sent hard for the default URIs but ignored
if the application provides it own URI would be acceptable.

search does not return error when base entry is not found