LDAP_SCOPE_ONELEVEL
LDAP_SEARCH(ldap_context->lrparams->realmdn, LDAP_SCOPE_ONELEVEL, "(objectclass=krbpwdpolicy)", password_policy_attributes);
LDAP_SCOPE_ONELEVEL,
(rparams->search_scope == LDAP_SCOPE_ONELEVEL
(rparams->search_scope == LDAP_SCOPE_ONELEVEL
lu->scope = LDAP_SCOPE_ONELEVEL;