pam-krb5 3.0

I finally merged Douglas Engert's patch to do PKINIT with the latest Heimdal release candidates, and then decided to do a major code reorganization and knock off the rest of my to-do list. One item did creep back in (the option parsing code is very repetitive and would be easier to verify if it were rewritten with macros), but my module now supports every interesting option of the Sourceforge PAM module except for the ones related to AFS and Kerberos v4.

Also new in this version are much better password changing prompts (and ones that we can even customize to give nice Stanford-specific prompts), better honoring of PAM_SILENT, and support for expose_account to give better password prompts when desired.

Lots of code has changed in this version, so please test well and be cautious about deploying in production.

You can get the latest version from the pam-krb5 distribution page.