Ticket 47653 - Need a way to allow users to create entries assigned to themselves

Bug Description:  There are cases where users need to be able to create, edit and delete
                  their own entries.  Using an ACI with the "userattr" keyword does not
                  work with ADD operations(to prevent a security hole).  This prevents IPA's
                  OTP plugin from performing some necessary operations.

Fix Description:  Added a new config attribute "nsslapd-access-userattr-strict".  The default
                  is "on" or strict.  For the IPA case, it would need to be set to "off" in
                  order to allow the desired behavior.

https://fedorahosted.org/389/ticket/47653

Reviewed by: nhosoi(Thanks!)
(cherry picked from commit a9cd4e78f1fd1af5de06aca46c8c10ed70bbe4e1)
Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs

Bug description: If given value of nsslapd-allowed-to-delete-attrs are
all invalid attributes, e.g.,
  nsslapd-allowed-to-delete-attrs: invalid0 invalid1
they were logged as invalid, but accidentally set to nsslapd-allowed-
to-delete-attrs.

Fix description: This patch checks the validation result and if there
is no valid attributes given to nsslapd-allowed-to-delete-attrs, it
issues a message in the error log:
  nsslapd-allowed-to-delete-attrs: Given attributes are all invalid.
  No effects.
and it returns an error.  The modify operation fails with "DSA is
unwilling to perform".

https://fedorahosted.org/389/ticket/447

Reviewed by rmeggins@redhat.com (Thank you, Rich!)
(cherry picked from commit 31cd7a838aef30d80be6efe519cc2e821811c645)
Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"

This reverts commit a9cd4e78f1fd1af5de06aca46c8c10ed70bbe4e1.

Description: It turned out this patch does not satisfy the IPA's needs
and has a possibility to introduce a security issue.
(cherry picked from commit c25c08f52b2877333b65c1a0d8c94b51797748ba)