DirectoryString (permits UTF-8, has more comparison methods),
change to caseExactMatch and caseExactSubstringsMatch accordingly,
add ORDERING caseExactOrderingMatch comparison operator (to be able
to do <= and >= matches on strings in the LDAP search filter)