cri_models: add a way to select a Kerberos principal as the primary one
Every user should have a primary Kerberos principal, the one indicated in LDAP's userPassword
attribute.
Every user should have a primary Kerberos principal, the one indicated in LDAP's userPassword
attribute.