domain-scoping

Implement domain-scoping functionality for v3 auth API

Change-Id: Id5e935735a43fefee10a36d9d691578871ba7fcb
Fix id_to_dn for creating objects

Only do the lookup if the scope is not ONELEVEL
For ONELEVEL, there is no point in paying the price of the lookup.

If the object is not found for scoped queries, return the top level
DN so the object can be created.

Bug 1131265

Change-Id: I1ca41bf87c3bdea30fbdf607b19192f37dd0bfd6
Tests for domain-scoped tokens

- Fixes bug 1131292: catalog returned with unscoped tokens
- Fixes bug 1131294: X-Subject-Token not returned on token validation

Change-Id: I1808613f276354e2a37cf8c154b55509a2888d89
Merge "Tests for domain-scoped tokens" into milestone-proposed
ports should be ints in config (bug 1137696)

Change-Id: I26c0481f1f8987f310e3c3710be49d541418e3fd