can be passed a pointer to the berval to be used for the return value. If
this is NULL, it will allocate a new one.

allocating a copy.

especially for anonymous clients, might be even more reasonable.

be liberal in what we accept.

honor the ber_len field to allow to exploit ldap_bv2[r]dn to handle DNs embedded in longer strings ...