these are the two patches for the IPA password migration for master.
Because master already contains the sync sysdb patches it is not easy to
rebase the first patch from the sssd-1-2 branch to master so I rewrote
it. The second patch is mainly the same with a substitution of an async
sysdb call with his sync version.