only implemented for generalizedTime syntax.

ITS#2588: use subany to help long subinitial/subfinal matches

consistently check return value of BindParam*; rework macros to ease parameter binding; always add data length to string values (may need to specialize for integers)

opattr on replicated entries.

exposes register_certificate_map_function(), as better to return an error
if a plugin is compiled to use it and slapd is not built with HAVE_TLS
than failing with an unresolved symbol

alternate X.509 peer normalization function