krb5_ldap_policydn_to_name
ret = krb5_ldap_policydn_to_name(context, policydn, &tktpolname);
ret = krb5_ldap_policydn_to_name(context, pwdpolicydn, &polname);
krb5_ldap_policydn_to_name (krb5_context, const char *, char **);
ret = krb5_ldap_policydn_to_name (context, list[i], &(*policy)[j]);