12236 getmembers_DN doesn't properly handle errors from __ns_ldap_dn2uid
12240 nss_ldap does not properly look up group members by distinguished name

*** 18,27 ****
--- 18,28 ----
   *
   * CDDL HEADER END
   */
  /*
   * Copyright (c) 2001, 2010, Oracle and/or its affiliates. All rights reserved.
+  * Copyright 2020 Joyent, Inc.
   */
  
  #include <stdlib.h>
  #include <strings.h>
  #include <ctype.h>
*** 293,303 ****
          }
          return (NS_HASH_RC_SUCCESS);
  }
  
  
! static void
  __ns_ldap_freeASearchDesc(ns_ldap_search_desc_t *ptr)
  {
          if (ptr == NULL)
                  return;
          if (ptr->basedn)
--- 294,304 ----
          }
          return (NS_HASH_RC_SUCCESS);
  }
  
  
! void
  __ns_ldap_freeASearchDesc(ns_ldap_search_desc_t *ptr)
  {
          if (ptr == NULL)
                  return;
          if (ptr->basedn)