ipa: add split_ipa_anchor() This call extracts the domain and the UUID part from an IPA override anchor. Related to https://fedorahosted.org/sssd/ticket/2481 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

Move domain_to_basedn outside IPA subtree The utility function will be reused to guess search base from the base DN of AD trusted domains.

Use realm for basedn instead of IPA domain https://fedorahosted.org/sssd/ticket/807

Fix LDAP search paths for IPA HBAC - use domain_to_basedn() to construct LDAP search paths for IPA HBAC - move domain_to_basedn() to a separate file to simplify the build of a test