krb5_ldap_policydn_to_name
if ((st = krb5_ldap_policydn_to_name (context, policydn, &tktpolname)) != 0)
if ((st = krb5_ldap_policydn_to_name (context, pwdpolicydn, &polname)) != 0)
krb5_ldap_policydn_to_name (krb5_context, char *, char **);
ret = krb5_ldap_policydn_to_name (context, list[i], &(*policy)[i]);