krb5_ldap_get_string
if ((st=krb5_ldap_get_string(ld, ent, "krbcontainerreference",
if ((st=krb5_ldap_get_string(ld, ent, "krbticketpolicyreference",
if ((st=krb5_ldap_get_string(ld, ent, "krbticketpolicyreference", &policydn,
if ((st=krb5_ldap_get_string(ld, ent, "krbpwdpolicyreference", &pwdpolicydn,
if ((st=krb5_ldap_get_string(ld, ent, "logindisabled", &is_login_disabled,
krb5_ldap_get_string(LDAP *, LDAPMessage *, char *, char **, krb5_boolean *);
st = krb5_ldap_get_string(ld, ent, "cn", &policy, &attr_present);