[SSSD] [PATCHES] Couple enhancements of HBAC code

[Jan Zelený]

Hi,
I'm sending two patches with enhancements related to IPA HBAC code. I stumbled 
upon these while doing the SELinux work because I'm planning to re-use some 
parts of the HBAC code.

#081:
Comment ipa_host_search_base in man pages - nothing special about this one

#082:
Add support for multiple host search bases in HBAC code. I recall we discussed 
this one several weeks ago and the conclusion was that we wanted the support 
but it wasn't the number one topic at that moment.

The only limitation in my implementation is related to multiple search bases 
in combination with dereference code. Basically, if ipa_support_srchost = 
false and there is a filter given in host search base, I ignore it. I believe 
something similar is already in other parts of SSSD using deref. Correct me if 
I'm wrong.

I'd like to ask you for quick review, since my SELinux work depends on this.

Thanks
Jan