Improve Authentication Containers examples.

* The first example was wrong (cf. ldap_backed() in auth.inc which
  looks for a DC= part to determine a full DN.
* The second example now show the realtive DNs.
Don't gettext() the example strings.

They must not be translated.
local_sync_accounts: provides empty STDIN to pw userdel command

The /usr/sbin/pw command may wait for user input. For example,
if there is a manual crontab settings for :foobar account, then
when this account is requested to be deleted, the command will
ask if user wants to delete crontab settings for the account.

Because the command waits for user input, the boot process will
hang at the "Synchronizing user settings..." step, unless user
presses any key.

To avoid this problem, we use the /bin/echo command to give
empty input for /usr/bin/pw command. This is an alternative of
typing "no" or "n".

This is a not the best way. Maybe closing STDIN is good. Or
force users to change account settings from webUI.

See also #852 (pull request). Renato Botelho points out that
"pw userdel" will call "crontab -u %user -r" that is interative.
"pw groupdel" will never be interative, though.
Merge pull request #854 from icyfork/provides_empty_STDIN_to_pw_command

local_sync_accounts: provides empty STDIN to pw userdel command
Remove unused variables and fix automatic nat to alias-address
Tidy up the "Helper Icons"

The "Helper Icons" at the top right of some service pages at present
produces 30+ HTML errors/warnings, this is due to the table cell being
wrapped in a span statement then in a div statement, table cells can
only be part of a table row then within a table statement.

- remove the table cell definitions from /etc/inc/service-utils.inc
- add the table cell definition from /etc/inc/service-utils.inc to
/usr/local/www/status_services.php and add some logic to determine if
the service is running which will then determine which class statement
to use and pad the icon with a space
- apply the same table cell definition and logic as above to
/usr/local/www/widgets/widgets/services_status.widget.php
Tidy up "interface_statistics.widget.php"

Remove padding surrounding the main table, makes the widget have the
same "look and feel" as the other widgets.
Split automatic to nat hosts fill into a function to be able to call it from other place, ticket #2416
Show advanced outbound rules and inform user what are being used and what are being ignored. It should fix #2416
Merge pull request #856 from ExolonDX/branch_02

Tidy up "interface_statistics.widget.php"
Revert "local_sync_accounts: provides empty STDIN to pw userdel command"

This reverts commit c6b156bfa537754d079868653ef3561eb1330d8c.
Provide a more safe way to avoid pw userdel being interactive because of a crontab existance
Move automatic rules to a separate table, ticket #2416
Added support for City Network to Dynamic DNS.

City Network is a Swedish web hosting company.
They provide a dynamic DNS service for their customers.
This service uses the dyndns2 protocol.
Merge pull request #855 from ExolonDX/branch_01

Tidy up the "Helper Icons"
Many fixes on privileges, ticket #3216:

- Rename some privileges:
   page-diag-system-activity => page-diagnostics-system-activity
   page-interfacess-groups => page-interfaces-groups
   page-interfacess-lagg => page-interfaces-lagg
   page-interfacess-qinq => page-interfaces-qinq
- Write an upgrade function to replace above privileges by the new name
- Remove unused privilege page-diagnostics-logs-wireless
- Remove duplicated privileges
- Fix limiter-info, pf-info and system-pftop that were using wrong name
- Add privs for edit pages (interfaces_groups, interfaces_lagg,
  interfaces_qinq and services-igmpproxy)
- Fix ID for acptiveportal allowedhostnames and editallowedhostnames
- Fix some wrong matches
Make sure automatic rules are created even if mode is not set, ticket #2416
Add subnet to 0.0.0.0 otherwise it's not added to table, ticket #2416
Add an option to return outbound NAT automatic to nat hosts with description, ticket #2416
Add gettext() to recently added strings