krb5_ldap_readpassword
if ((st=krb5_ldap_readpassword(context, ldap_context, &password)) != 0) {
krb5_ldap_readpassword(krb5_context, krb5_ldap_context *, unsigned char **);