Lookup user DN in pam_authz if it was not provided
Fix compare checking in pam_authz

and proxies them to a remote server.

Note in manual that res parameter should be freed regardless of return value
of ldap_search_ext_s (or friends).