Ticket #617 - Possible to add invalid ACI value

Fix description: The fix enables the syntax check for ACI
even when '(' is not present

https://fedorahosted.org/389/ticket/617

Reviewed by nhosoi.
Ticket 47382 - Add a warning message when a connection hits the max number of threads

Bug Description:  Currently there is no way to tell when a connection is at max threads.

Fix Description:  Update cn=monitor, "cn=snmp,cn=monitor", snmp, etc to report on
                  the number of current active threads that are in a max thread state.
                  Report the number of times any connection has hit max threads.  For
                  cn=monitor, extend the "connection" attribute to include three more
                  elements:

                         "1:2:3"

			 1 = Connection max threads state:  1 is in max threads, 0 is not
			 2 = The number of times this thread has hit max threads
			 3 = The number of operations attempted that were blocked
			     by max threads.

                         connection: 66:20130724195333Z:1:1:-:cn=directory manager:0:1:3

https://fedorahosted.org/389/ticket/47382

Reviewed by: richm(Thanks!)
Ticket #521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change

Bug description: modrdn on AD is synchronized to DS, but the
other way does not get synchronized.

Fix description:
1) process_replay_rename (windows_protocol_util.c): If newparent
   was NULL, the rename operation was skipped. This patch sets
   the original parent dn to the newparent.
2) process_replay_rename (windows_protocol_util.c): AD does not
   accept deleteoldrdn == 0 (Old RDN must be deleted).  If
   deleteoldrdn is 0, it is replaced with 1 before sending the
   request to AD.
3) is_subject_of_agreement_remote (windows_protocol_util.c):
   When checking if the entry was in the subtree defined in the
   agreement or not, it returned true only if the entry is a
   direct child of the agreement subtree top. This patch returns
   true if the entry is the further descendent of the subtree.
4) This patch adds more NULL reference checks.
5) When the given dn is already normalized, sets it to Slapi_DN
   as a normlized dn.  It saves an unnecessary dn normalization.
6) Logs in windows sync specific code are prefixed with
   "NSMMReplicationPlugin - windows sync".

Reviewed by Mark and Rich (Thank you!!)

https://fedorahosted.org/389/ticket/521
Ticket 47449 - deadlock after adding and deleting entries

Bug Description:  If multiple clients are each doing their own add/delete of the same entries,
                  the server will deadlock very quickly.

Fix Description:  The server was not signaling an error when it failed to lock the parent
                  entry lock.  I've checked add/mod/modrdn functions as well, and they do correctly
                  unlock the cache entry(this includes the old/new superior for modrdn).

https://fedorahosted.org/389/ticket/47449

Reviewed by: richm(Thanks!)
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold

Bug Description:  If you directory try and set the threshold to -2,
                  the server allows it, but it should be rejected.

Fix Description:  Use a signed int when parsing the value.

https://fedorahosted.org/389/ticket/47427

Reviewed by: richm(Thanks!)