s4-join: show a reasonable error on DsAddEntry() failing