Extend ldap_create_control() to supporting creating such.

(Enum _members_ have type int, but the enum's _type_ can be compatible
with some other char/integer type which can represent its members.)

use ldap_find_control to find it. Added ldap_passwordpolicy_err2text().