the default context is initialized before the config file is read,
so the locations are not know at context initialization.

taken care of.  The second, however, on remove_old_locks is unclear.

Init the TLS environment if necessary.  Lots of things needed here,
in particular, preparing properly the default context.

use TLS right away or not on that connection.

Only bind on TLS port if explicitly requested with -T, otherwise all
kind of conflicts happen when running tests.

Bind and listen on TLS port too

Extend slapd_args with TLS info

Include $(TLS_LIBS)

	Fix broken ACL macros.
	Fix o_dn/o_ndn == NULL vs "".

of a bind request and, upon failure, are left "anonymous."

Rework ACL code to hide access testing within macros to facilate additions
and eventual redesign.

Addition of #ifdef SLAPD_ACLAUTH to conditional include EXPERIMENTAL
"auth" access controls.  Adds ACL_AUTH "auth" access level (above none,
below "compare").  bind requires anonymous access at this level or above access
to "entry"/"userPassword"/"krbName".  This allows administrators to restrict
which entries can be bound to.  (This will likely become default behavior
after testing has completed).

Added configuration support for "digest-realm <realm>" configure directive.
Added connection state and bind_in_progress fields to cn=monitor connection
attribute.

if multiple step SASL binds are in progress.

Modify ldap_result to assert returned error is not an one reserved
for API use.
Modify frontend LDAP operation routines to return an error code.
The returned value will be used to determine if an unsolicited notification
should be sent to the client.
Need to review returned error codes.  Namely some LDAP_PROTOCOL_ERROR
will like need to be changed (as they will cause unsolicited notifications).

Update error strings and cldap misuse of server error.

Add place holder for handling LDAPv3 extended operations (coming soon).

changed significantly.

specific which methods may be used.  This will facilate development
of a slapd config directive "passwordMethod ..." to specify which
methods should be allowed.