New version of IPA auth and password migration
    
    The current version modified some global structures to be able to use
    Kerberos and LDAP authentication during the IPA password migration. This
    new version only uses tevent requests.
    
    Additionally the ipaMigrationEnabled attribute is read from the IPA
    server to see if password migration is allowed or not.