Update the slapd image base to use Debian 11 or bullseye
and update default build arguments.

Update voperson.ldif to latest draft 2.0.0 release to pick up
the voPersonToken attribute used by COmanage Registry 4.0.0.

Update base for slapd base to Debian 10.10.

Update the base Debian image used for the slapd images.

Add the voposixaccount LDIF to the slapd base image.

Update the voPerson LDIF to version draft-2.0.0 since
COmanage Registry 3.3.0 requires it.

Update the base image Debian tag to 10.5 for the slapd
base image.

If the environment variable OLC_ROOT_DN_PASSWORD is set but OLC_ROOT_DN
(usually a hash) is not and is set to the Dockerfile default of
'password', then take OLC_ROOT_DN from OLC_ROOT_DN_PASSWORD.

If the environment variable OLC_ROOT_DN_PASSWORD is set but OLC_ROOT_DN
(usually a hash) is not, then take OLC_ROOT_DN from
OLC_ROOT_DN_PASSWORD.

Update the base image for comanage-registry-slapd-base to use
debian:10.3.

Refactored the Dockerfiles and related
tooling to leverage Docker multi-stage build
functionality. Also updated base containers
to pick up later releases of Apache HTTP Server,
PHP, Shibboleth SP, and mod_auth_openidc.

Add the ca-certificates package to the slapd base image so that any
clients or client libraries that need to call out, such as syncrepl
clients, can properly check server TLS certificates and do
ldaps://.

Added a default maximum open file descriptors set with
ulimit -n for the slapd process. See
https://github.com/moby/moby/issues/8231
for a discussion of how this helps decrease the memory
used by slapd when running inside a container.

Add logic to perform a chown openldap:openldap on the directory
files from the Debian distribution so that slapd always may start
even when the numeric uid has changed, for example when /etc/passwd
is mounted in. This was previously done for the directory files being
used (database with n 2) but not for those that are not being
used (database with n 1).

Added logic to set the owner and permissions for the slapd TLS
certificate, privkey, and CA cert files so that they are explicitly
owned by openldap with the correct permissions.

If the deployer maps in or copies in a different /etc/passwd file that
assigns the openldap user a different UID change the ownership of
/var/run/slapd so that it has the correct owner.

Fixed logic preventing slapd entrypoint script from running to
completion when no schema files are injected into /schema.

If LDAP_DEBUG is set then the entrypoint script for the slapd images
will invoke 'set -x' and send all output to stdout.

Text in injected LDIF files of the form %%SOME_VARIABLE%% will be
replaced with the value from the environment variable SOME_VARIABLE
before the LDIF is executed. The form %%_SOME_VARIABLE_FILE%% will be
replaced with the contents of the file pointed to by the environment
variable SOME_VARIABLE.

Better processing of injected LDIF files to be executed using either
SASL external mechanism or the root DN.

Better processing of schema files for the slapd base image.

Added logic to process LDIF files at startup time.

Added logic to the COmanage LDAP utils bash library to support the
deployment of a slapd proxy.

As part of refactor of slapd moved the entrypoint script from
slapd-base to slapd and created Dockerfile for slapd to put it
into plase.

As part of refactor of the slapd images move
comanage-registry-slapd to comanage-registry-slapd-base.