Merge Luke's users/lhoward/lockout2 branch to trunk.  Implements
account lockout policies for preauth-using principals using existing
principal metadata fields and new policy fields.  The kadmin API
version is bumped from 2 to 3 to compatibly extend the policy_ent_rec
structure.


https://github.com/krb5/krb5/commit/8d31a9d396f5bea88def4db395ad12dca2ac2e9f
Commit By: ghudson
Revision: 23038
Changed Files:
U   trunk/src/include/iprop.h
U   trunk/src/include/iprop_hdr.h
U   trunk/src/include/kdb.h
U   trunk/src/kadmin/cli/kadmin.c
U   trunk/src/kadmin/dbutil/dump.c
U   trunk/src/kadmin/dbutil/kadm5_create.c
U   trunk/src/kadmin/dbutil/kdb5_util.M
U   trunk/src/kadmin/dbutil/kdb5_util.c
U   trunk/src/kadmin/server/ipropd_svc.c
U   trunk/src/kadmin/server/ovsec_kadmd.c
U   trunk/src/kadmin/server/server_stubs.c
U   trunk/src/kadmin/testing/scripts/init_db
U   trunk/src/kadmin/testing/scripts/start_servers_local
U   trunk/src/kadmin/testing/tcl/util.t
U   trunk/src/kadmin/testing/util/tcl_kadm5.c
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/extern.c
U   trunk/src/kdc/main.c
U   trunk/src/lib/kadm5/admin.h
U   trunk/src/lib/kadm5/admin_internal.h
U   trunk/src/lib/kadm5/clnt/client_init.c
U   trunk/src/lib/kadm5/kadm_rpc_xdr.c
U   trunk/src/lib/kadm5/server_internal.h
U   trunk/src/lib/kadm5/srv/server_init.c
U   trunk/src/lib/kadm5/srv/server_kdb.c
U   trunk/src/lib/kadm5/srv/svr_policy.c
U   trunk/src/lib/kadm5/srv/svr_principal.c
U   trunk/src/lib/kadm5/unit-test/api.2/mod-principal-v2.exp
A   trunk/src/lib/kadm5/unit-test/api.3/
U   trunk/src/lib/kadm5/unit-test/config/unix.exp
U   trunk/src/lib/kadm5/unit-test/destroy-test.c
U   trunk/src/lib/kadm5/unit-test/handle-test.c
U   trunk/src/lib/kadm5/unit-test/init-test.c
U   trunk/src/lib/kadm5/unit-test/iter-test.c
U   trunk/src/lib/kadm5/unit-test/lib/lib.t
U   trunk/src/lib/kadm5/unit-test/randkey-test.c
U   trunk/src/lib/kadm5/unit-test/setkey-test.c
U   trunk/src/lib/kdb/iprop.x
U   trunk/src/lib/kdb/kdb_convert.c
U   trunk/src/plugins/kdb/db2/Makefile.in
U   trunk/src/plugins/kdb/db2/db2_exp.c
U   trunk/src/plugins/kdb/db2/kdb_db2.c
U   trunk/src/plugins/kdb/db2/kdb_db2.h
A   trunk/src/plugins/kdb/db2/kdb_ext.c
A   trunk/src/plugins/kdb/db2/lockout.c
U   trunk/src/plugins/kdb/db2/pol_xdr.c
U   trunk/src/plugins/kdb/db2/policy_db.h
U   trunk/src/plugins/kdb/ldap/ldap_exp.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/Makefile.in
A   trunk/src/plugins/kdb/ldap/libkdb_ldap/kdb_ext.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.h
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.h
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_service_rights.c
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/libkdb_ldap.exports
A   trunk/src/plugins/kdb/ldap/libkdb_ldap/lockout.c
U   trunk/src/slave/kpropd.c
U   trunk/src/slave/kslave_update