Use ldb_dn_from_ldb_val to avoid possible over-run of the value.