check for NULL dn in URL; set error code before seding extended response (partially addresses ITS#4968)