Sync with HEAD (need to update CHANGES)

configure.in

contrib/slapd-modules/acl/posixgroup.c

doc/drafts/draft-behera-ldap-password-policy-xx.txt

doc/man/man5/slapd.access.5

doc/man/man5/slapo-dynlist.5

doc/man/man5/slapo-ppolicy.5

doc/man/man5/slapo-retcode.5

include/ldap.h

include/ldap_pvt_thread.h

libraries/libldap/cyrus.c

libraries/libldap/result.c

libraries/libldap_r/tpool.c

libraries/liblutil/passwd.c

servers/slapd/aci.c

servers/slapd/acl.c

servers/slapd/aclparse.c

servers/slapd/ad.c

servers/slapd/attr.c

servers/slapd/back-bdb/init.c

servers/slapd/back-bdb/search.c