Password history in LDAP KDB plugin

This is yet another older Solaris fix, we would like to contribute upstream. It enables using password history in policies with LDAP KDB plugin.

The fix is equivalent to patch submitted in Ticket #5889, modulo a modification for new krb5_update_tl_kadm_data() API and explicit parenthesis for mask operations.