IPA: Drop unused ifdef HAVE_SELINUX_LOGIN_DIR Macros ALL_SERVICES and selogin_path were conditionally defined in case of existing selinux login directory at configure time (defined macro AVE_SELINUX_LOGIN_DIR) However, these macros were unused for quite a long 2.5 year and last usage was removed in commit 9c47c8c59b5c9078f342f82367cd0ad7857acef8 "IPA: Use set_seuser instead of writing selinux login file" Reviewed-by: Pavel Březina <pbrezina@redhat.com>

DP: Switch to new interface Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

Fix broken build with selinux. Header file selinux/selinux.h was removed in commit 245cc346 from file ipa_selinux.c, because it breaks build without selinux. But new error was introduced. This patch fixes compilation with selinux and include header file selinux/selinux.h only if both macros exist HAVE_SELINUX and HAVE_SELINUX_LOGIN_DIR. Now ipa_selinux.c should be correctly built with and without selinux.

Reuse cached SELinux mappings. Reuse cached SELinux maps when they are requested within time interval (in this patch it is hardcoded to be 5 seconds). https://fedorahosted.org/sssd/ticket/1744

Move SELinux processing to provider. The SELinux processing was distributed between provider and pam responder which resulted in hard to maintain code. This patch moves the logic to provider. IT ALSO REQUIRES CHANGE IN THE SELINUX POLICY, because the provider also writes the content of selinux login file to disk (which was done by responder before). https://fedorahosted.org/sssd/ticket/1743

Renamed session provider to selinux provider