The fallback flag in nsdispatch prevents the fallback implementation of
getgroupmembership() from invoking the correct backend in the compat case.
Replace it with a nesting depth counter so it only blocks one level (the
first is the group -> group_compat translation, the second is the actual
backend).  This is one of two bugs that break getgrouplist() in the compat
case, the second being that the backend's own getgroupmembership() method
is ignored.  Unfortunately, that is not easily fixable without a redesign
of our nss implementation (which is also needed to implement the +@group
syntax in /etc/passwd).

PR:		190055
MFC after:	1 week


git-svn-id: svn+ssh://svn.freebsd.org/base/head@275020 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
libvers and libsl are internal libraries


git-svn-id: svn+ssh://svn.freebsd.org/base/head@275021 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Convert kerberos to LIBADD and reduce overlinking of the kerberos binaries and
libraries


git-svn-id: svn+ssh://svn.freebsd.org/base/head@275022 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f