Fix LDAP search paths for IPA HBAC

- use domain_to_basedn() to construct LDAP search paths for IPA HBAC
- move domain_to_basedn() to a separate file to simplify the build of
  a test

1 files changed, 1 insertions, 0 deletions

diff --git a/src/providers/ipa/ipa_access.h b/src/providers/ipa/ipa_access.h
index bd221c574..e3ba5c30c 100644
--- a/src/providers/ipa/ipa_access.h
+++ b/src/providers/ipa/ipa_access.h
@@ -59,6 +59,7 @@ struct hbac_ctx {
     size_t groups_count;
     const char **groups;
     bool offline;
+    char *ldap_basedn;
 };
 
 void ipa_access_handler(struct be_req *be_req);