Related to #1114

Implementation for FreeIPA part is ready. Waiting for bind-dyndb-ldap features that the patch depends on to be completed. Pushing to July milestone.

Moving to the next milestone - changes to bind-dyndb-ldap are not done yet.

Will be resolved with documentation fix in ticket #1709.

A complete resolution of this ticket would require a full persistent search feature of bind-dyndb-ldap proposed in #649.

After fix of current zone-only persistent search in bind-dyndb-ldap, this attribute is refreshed immediately when DNS is configured with persistent search (#826).

If persistent search feature is not feasible, please refer to information in the doc (updated in #1709). If psearch is off, one has to wait for bind-dyndb-ldap cache to expire (the doc specifies how to control it).