Trac Ticket 396 - Account Usability Control Not Working [Bug 835238]

https://fedorahosted.org/389/ticket/396

Fix Description: Commit 003812911f56619f0db58ba627037644fb0f68fb
broke the feature.  This patch is backing off the change so that
get_entry accepts NULL pblock, which is necessary for the
Account Usability plugin.
Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error

Bug Description:  Under certain circumstances, a replica can be removed, and readded,
                  but the master replica still holds its old kerberos credentials in
                  a cache(ccache).  Until the mater replica is restarted, replication
                  will not resume.

Fix Description:  If a sasl bind fails, ands it a GSSAPI, and the errror is 49, clear
                  out the ccache.

                  I also noticed that when this situation arises we report errors when
                  trying to update the referrals in the repl agreement to this replica.
                  The error is 20(type or value exists), and it will log at least one of
                  these messages per update.  The error should not be written to the
                  error log, as it's not a problem that needs reporting.

https://fedorahosted.org/389/ticket/366

reviewed by: richm(Thanks!)
Ticket 378 - unhashed#user#password visible after changing password

declare is_type_forbidden in deref.c
(cherry picked from commit 4bf9444a082f25f289a973128c243583831cc848)
Ticket 399 - slapi_ldap_bind() doesn't check bind results

Bug Description:  There are two issues here.  One, we were not calling ldap_parse_result()
                  for SIMPLE binds.  Two, we were overwriting the error code, with the
                  function result code.

Fix Description:  Always call ldap_parse_result, and use a separate error code variable to
                  preserve the actual result code from the bind operation.

https://fedorahosted.org/389/ticket/399

Reviewed by: nhosoi(Thanks Noriko!)
Ticket #405 - referint modrdn not working if case is different

https://fedorahosted.org/389/ticket/405
Resolves: Ticket #405
Bug Description: referint modrdn not working if case is different
Reviewed by: nhosoi (Thanks!)
Branch: master
Fix Description: Pass the Slapi_DN to _update_all_per_mod() and
_update_one_per_mod().  Use the case normalized dn (ndn) to compare against
the case normalized member value.
Platforms tested: RHEL6 x86_64
Flag Day: no
Doc impact: no
(cherry picked from commit 8ef08f85fb29ffe4c17ed900378882e8eb127bc4)
Trac Ticket #402 - nhashed#user#password in entry extension

https://fedorahosted.org/389/ticket/402

Fix description: This patch adds the method to use entry
extension to stash the unhashed password in addition to the
existing one which uses the ordinary attribute.

It introduces the definition "USE_OLD_UNHASHED" in configure.ac
to keep the old method to use the attribute.

Once all the plugins' migration is done, the old method can be
disabled by removing the definition.  We could also remove the
code in "#if defined(USE_OLD_UNHASHED)" then.

The first proposal was reviewed and commented by nkinder.
(Regarding the comments, see also the trac ticket.  Thanks
a lot, Nathan!) This second patch includes the fixes pointed
out by him.