privs, additive/substractive rules, and rule continuation.  Existing
rules that use 'defaultaccess none' should be 100% compatible.  Rules
that rely other defaultaccess settings will require addition of
explicit clauses granting the access.
Needs additional testing and tuning of logs

Set defaultaccess to 'read' in distribution slapd.conf and add warnings
Set schemacheck to 'on' in distribution slapd.conf and add warnings

(and allowing 'attribute' for backwards compatibility).
manuals and *.schema to be updated as time permits.

Add openldap.schema (currently empty except for a few comments) to
hold OpenLDAP specific schema items (such as for cn=monitor).

from Booker Bense <bbense@networking.stanford.edu>.

avoid clashes with Kth Kerberos.

  export so we don't clobber anything the user already has set

  with the shared libraries instead of static, defaults to no
* build/lib-shared.mk: if LINK_BINS_DYNAMIC is set we create a symlink to
  the .so and .so.# file along with the .a and .la files
* build/lib.mk: make sure the above links get removed on clean target
* build/top.mk: add define for LINK_BINS_DYNAMIC
* tests/scripts/defines.sh: add export for LD_LIBRARY_PATH so that tests will
  run without requiring installation of libraries when we use --enable-dynamic
  (LD_LIBRARY_PATH is always set, since it can't really hurt).

schemes are supported.  This should facilate server rootDSE
advertisement of supported schemes, etc..

Remove Kerberos project.  Looks like K4 is working again.