LDAP Server: Test Functions and other token parsing functions don't deal with failing binary fields gracefully

After upgrading from a previous 1.0 beta to beta 10 and then to the latest dev release (7.x-1.0-beta10+19-dev (2012-Jun-05)), I ran into an issue with setting up ldap authorization on a new site. On a site where the module had been upgraded but the configuration had not been re-saved since an earlier beta, ldap authorization works just fine.

I tracked down the differences in configuration between sites to two database entries in the ldap_authorization table:
1.) derive_from_entry_user_ldap_attr (old site: NULL, new site: uid)
2.) derive_from_entry_entries_attr (old site: NULL, new site: dn)

I played around with each setting via MySQL update queries. Setting derive_from_entry_user_ldap_attr to NULL made my new site work. Any other attribute I tried (uid, dn, cn) and authorization failed.

Below are a typical user and a typical group in my environment:

[root@web ~]# ldapsearch -x -H -b "uid=mphillips,cn=users,dc=ciw,dc=edu" -LLL dn uid cn
dn: uid=mphillips,cn=users,dc=ciw,dc=edu
uid: mphillips
uid: mphillips@gl.ciw.edu
uid: m.phillips@gl.ciw.edu
cn: Morgan Phillips Hoople

[root@web ~]# ldapsearch -x -H -b "cn=glwebmgrs,cn=groups,dc=ciw,dc=edu" -LLL dn memberUid cn
dn: cn=glwebmgrs,cn=groups,dc=ciw,dc=edu
cn: glwebmgrs
memberUid: ghuntress
memberUid: smysen
memberUid: mphillips
memberUid: dappleby
memberUid: gqian

Below is the ldap_authorization table that works (after doing `update ldap_authorization set derive_from_entry_user_ldap_attr=NULL;`):

mysql> select * from ldap_authorization;
+--------------------------+--------+---------------+--------------------------------+--------+-------------------------+----------------+---------------------+------------------+-----------------------+---------------------------------+-------------------------+-------------------+--------------------------+---------------------------+--------------------------------+------------------------+------------------------------+----------------------------------+----------------------------------+-----------------------------------------------------------------------------------------------------------+------------+---------------+----------------+-------------------------+------------------+--------------------------+
| numeric_consumer_conf_id | sid | consumer_type | consumer_module | status | only_ldap_authenticated | derive_from_dn | derive_from_dn_attr | derive_from_attr | derive_from_attr_attr | derive_from_attr_use_first_attr | derive_from_attr_nested | derive_from_entry | derive_from_entry_nested | derive_from_entry_entries | derive_from_entry_entries_attr | derive_from_entry_attr | derive_from_entry_search_all | derive_from_entry_use_first_attr | derive_from_entry_user_ldap_attr | mappings | use_filter | synch_to_ldap | synch_on_logon | revoke_ldap_provisioned | create_consumers | regrant_ldap_provisioned |
+--------------------------+--------+---------------+--------------------------------+--------+-------------------------+----------------+---------------------+------------------+-----------------------+---------------------------------+-------------------------+-------------------+--------------------------+---------------------------+--------------------------------+------------------------+------------------------------+----------------------------------+----------------------------------+-----------------------------------------------------------------------------------------------------------+------------+---------------+----------------+-------------------------+------------------+--------------------------+
| 5 | CIW_OD | drupal_role | ldap_authorization_drupal_role | 1 | 1 | 0 | | 0 | | 0 | 0 | 1 | 0 | cn=groups,dc=ciw,dc=edu | dn | memberUid | 0 | 0 | NULL | glsysadmins|GL System Administrators
glwebadmins|GL Website Administrators
glwebmgrs|GL Website Managers
| 1 | 0 | 1 | 1 | 1 | 1 |
+--------------------------+--------+---------------+--------------------------------+--------+-------------------------+----------------+---------------------+------------------+-----------------------+---------------------------------+-------------------------+-------------------+--------------------------+---------------------------+--------------------------------+------------------------+------------------------------+----------------------------------+----------------------------------+-----------------------------------------------------------------------------------------------------------+------------+---------------+----------------+-------------------------+------------------+--------------------------+
1 row in set (0.00 sec)