Enable keystone groups searching in LDAP
Enable keystone groups searching in LDAP

When using LDAP as a keystone identity backend it is useful to allow
keystone to look up groups in LDAP so that LDAP groups can be given
automatic project assignments, negating any need for an administrator to
give assignments to individual LDAP users. This patch adds the necessary
settings to the keystone proposal to allow keystone to be aware of
groups in LDAP. It changes the user_id_attribute to 'uid' because that
is the attribute LDAP itself uses to determine group membership, but
this change means that the old 'hybrid' method will use 'uid' rather
than 'suseid' as the keystone user ID. We also add a smoke check to make
sure that keystone can find groups and understands group membership as
defined in LDAP.

vmoravec/automation,SUSE-Cloud/automation,gosipyan/automation,gosipyan/automation,aspiers/automation,aspiers/automation,gosipyan/automation,SUSE-Cloud/automation,SUSE-Cloud/automation,vmoravec/automation,vmoravec/automation,SUSE-Cloud/automation,vmoravec/automation,aspiers/automation,gosipyan/automation,aspiers/automation