Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using "Chain on Update"
Bug Description: For a chained bind request we do not check password
policy, in particular if the password must be reset.
Fix Description: For a chained bind request check if the password must
be reset. This is the only password policy setting that
must be applied on the connection itself. All other
password policy is still enforced correctly.
https://pagure.io/389-ds-base/issue/49751
Reviewed by: spichugi, tbordaz, and lkrispen(Thanks!!!)