Ticket #47602 - Make ldbm_back_seq independently support transactions

Description: If ldbm_back_seq is called as a child of transaction, it
fails to access the on-going transaction data.  This patch picks up
the parent transaction if any, and it calls dblayer_read_txn_begin with
the parent transaction.  If the read transaction is aborted by DEADLOCK,
it retries.

https://fedorahosted.org/389/ticket/47602

Reviewed by mreynolds@redhat.com (Thank you, Mark!!)
Ticket 47704 - invalid sizelimits in aci group evaluation

Bug Description:  aci group evaluation fails because of sizelimit exceeded
			but it is exceeded because it is -1476887876 or another
			negative integer becasue operation parameter are a union
			based on operation types and so for otehr than search
			the value is dependent on the operation params

Fix Description:   treat any negative integer like -1 (unlimited). A better fix
			would be to introduce a specific configuration param or
			to abondon the limit in group evaluation at all. But this
			could introduce backward compatibility problems and
			will be handled in ticket 47703 for newer versions

https://fedorahosted.org/389/ticket/47704

Reviewed by: Rich, thanks
Ticket #47642 - Windows Sync group issues

Bug Description: When an entry is moved on AD, and the entry is
a member of a group, the value of the member in the group is
automatically updated.  But Windows Sync Control request only
returns the renamed entry; it does not return the group having
the member in it even though the value is updated.  This is
because an AD group stores DNT (Distinguish Name Tag -- ID in
integer) instead of the dn itself.  Since the rename operation
does not change DNT, the group entry on AD has no change, either.

On the DS side, the group entry stores the full DN which needs
to be adjusted to the renamed DN to complete the synchronization
with AD.

Fix Description: Once rename operation is received from AD,
windows_update_local_entry searches groups having a member value
matches the pre-renamed dn on DS, and replaces the old dn with the
renamed one.

Thanks to tbordaz@redhat.com for pointing out the possibility of
NULL dereference.  The problem is fixed, as well.

Thanks to rmeggins@redhat.com for suggesting to escape the search
filter value.  It was added.

https://fedorahosted.org/389/ticket/47642
Ticket #47701 - Make retro changelog trim interval programmable

Description:  Currently, retro changelog trim interval is hardcoded
with 5 minutes.
  #define CHANGELOGDB_TRIM_INTERVAL 300*1000 /* 5 minutes

Better have a control on the interval based upon the DS usage --
e.g., if there is no updates, we don't need to call changelog_trim
via retrocl_housekeeping every 5 minutes.

https://fedorahosted.org/389/ticket/47701

Reviewed by rmeggins@redhat.com (Thank you, Rich!)
Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart

Bug Description:  Setting up SASL requires aserver restart to take effect.

Fix Description:  The restart was required so that the KRB5 config and keytab
                  environment variables would be loaded.  To allow this without
                  a restart, a new task was created to reload the sysconfig file,
                  or any file with the new environment variables/values.  The
                  task entry can also specify if the changes should be logged
                  to the error log.

https://fedorahosted.org/389/ticket/47453

Reviewed by: rmeggins(Thanks!)
Ticket #47701 - Make retro changelog trim interval programmable

Description: Fixing 3 syntax errors introduced by commit
bb4f0c428f9e53bccb875a552f5cae1ee6f733be
Ticket #47700 - Unresolved external symbol references break loading of the ACL plugin

Description of problem by nalin@redhat.com:
Various functions in the directory server are declared with extern "C"
linkage, causing the compiler to emit references to an unmangled symbol
name, but because their definitions don't match the declarations, and
the definitions are compiled using the C++ compiler, the implementations
are emitted as mangled symbols.

Fix description: Using ld option "-z defs", cleaned all the undefined
references.

https://fedorahosted.org/389/ticket/47700

Reviewed by rmeggins@redhat.com (Thank you, Rich!!)
Ticket #47709 - package issue in 389-ds-base

Description: Following the package guideline, moving pytyon binaries
to the architecture aware location and libns-dshttpd.so* from 389-ds-base
to 389-ds-base-libs.

https://fedorahosted.org/389/ticket/47709

Reviewed by rmeggins@redhat.com (Thank you, Rich!!)
Ticket #47709 - package issue in 389-ds-base

Description: Automatically generated files: Makefile.in, configure
Ticket #47709 - package issue in 389-ds-base

Description: Added arch aware python dir; moved libns-dshttpd.so* to
             devel and libs package.