remove hdb ldap create declarations

The hdb_ldap_create and hdb_ldapi_create prototypes use the "static"
keyword, but the functions themselves are not implemented as static.

Heimdal's buildsystem dynamically adds function declarations to
hdb-protos.h based on the actual function implementations. Those
declarations in hdb-protos.h are not declared as static.

Since the build system generates the declarations dynamically, just
remove them from hdb-ldap.c.
Limit the libraries pulled in when dynamic linking.

See also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=745543
Fix some typos.
Merge pull request #84 from jelmer/fix-typos

Fix some typos in hx509_err.et.
Merge pull request #83 from jelmer/pc-limit-libs

Limit the libraries pulled in when dynamic linking.
Merge pull request #80 from ktdreyer/ldap-declaration

build failure with Fedora regarding hdb_ldap_create and hdb_ldapi_create
Fix some typos.
Merge pull request #85 from jelmer/fix-typos

Fix some typos.
Remove use of krb4 settings in example krb5.conf.
kdc.8: Remove references to kerberos 4.
Various manpages: Remove references to Kerberos 4.
Merge pull request #88 from jelmer/rm-krb4-references

Remove rereferences to Kerberos 4.
test_fx: enable weak crypto

Now that test_fx checks 1DES keys, we need to call allow_weak_crypto on
the test's context.

Without this fix, "make check" was failing with the following error:

  lt-test_fx: krb5_crypto_init: Encryption type des-cbc-crc not
  supported
Merge pull request #91 from ktdreyer/test-fx-weak-crypto

test_fx: enable weak crypto
Use thread-safe errno on Solaris
Update .gitignore to ignore all test binaries and output.
Merge pull request #94 from jelmer/ignore-test-output

Update .gitignore to ignore all test binaries and output.
kinit: get_switched_ccache

Provide a new internal function called get_switched() to encapsulate
the algorithm for selecting a credential cache when the selected
ccache type supports switching.  There is no change in behavior for
UNIX which always calls krb5_cc_new_unique().  However, on Windows
alternate behavior is provided when the ccache type is API or MSLSA.

For the API ccache the default ccache name is stored in the Windows
registry which is shared across all logon sessions belonging to a
user.  For users that are members of the Administrators group this
includes both the UAC restricted and elevated sessions sharing the
same desktop.  It is very disconcerting when the elevated session obtains
credentials for the same client principal as the restricted session
and then all apps in the restricted session lose access to their
credential cache.   For Windows, the API credential caches are named
after the principal that is stored within them.  It provides for a
better end user experience.

For the MSLSA ccache tickets belonging to multiple principals are
all stored within the MSLSA ccache.  As a result, all attempts to
switch ccache names default back to the one and only one name.

Change-Id: I7865cd044cff01ff38ab107ec0961e42788fa073
roken: Windows ELOOP definition

Microsoft VC 2010 defines ELOOP as 114

Change-Id: Iba6cfd83e4a9ea1d43ed8aff7893d557648fc7e5
klist: fix spelling in comments