Review ofhttp://k5wiki.kerberos.org/wiki/Projects/PAC_and_principal_APIs ending January 10

[ghudson@MIT.EDU]

I have edited the project proposal to reflect the discussion here
(renaming the one flag and adding comments to the others) and added an
approval.

One fine point: Luke wrote:
> KRB5_PRINCIPAL_PARSE_NO_REALM omits the realm in the parsed principal.

In both Luke's code and in Heimdal, PARSE_NO_REALM causes an error to
occur if the principal string contains a realm.  Thus:

#define KRB5_PRINCIPAL_PARSE_NO_REALM      1 /* Error if realm is present */
#define KRB5_PRINCIPAL_PARSE_REQUIRE_REALM 2 /* Error if realm is not present */
#define KRB5_PRINCIPAL_PARSE_ENTERPRISE    4 /* Create single-component enterprise principle */