search group ws: add "group_filter_attrs" to allow filtering on diploma "displayName" instead of "description" (where description includes the "ou")

in the future, need to add the ability to choose the returned "meta" attrs for groups.
"meta" attrs: ou, name, displayName, description (nb: the redundency between the attrs is normal since no supann exists for them)
autocompleteUser.js: if wantedAttr is missing, return "unknown" instead of displayName

(if item.value is missing item.label is used)
add supannActivite-all to get text+key + remove text manipulation of "section CNU"

(text manipulation can now be done using supannActivite-all since key is available)
searchUser: add attrs supannEntiteAffectation-all & supannParrainDN-all (migration issue: need running genTables)
searchUser: add attrs supannEtuInscription & supannEtuInscription-all
searchUser: add attrs roomNumber up1FloorNumber telephoneNumber facsimileTelephoneNumber supannAutreTelephone mobile
modify LDAP configuration: one variable $LDAP_CONNECT instead of many

rationale: needed to have multiple config

migration issue: adapt config-auth.inc.php to look like:

$LDAP_CONNECT =
  array(
	'HOST' => 'ldap.univ.fr ldap2.univ.fr',
	'BIND_DN' => 'cn=xxx,ou=admin,dc=univ,dc=fr',
	'BIND_PASSWORD' => 'xxx',
	);
searchUserCAS: implement multiple levels of rights (esp. multiple LDAP bind)

example of configuration in config-auth.inc.php:

$LDAP_CONNECT_LEVEL2 =
      array(
        'HOST' => 'ldap.univ-paris1.fr ldap2.univ.fr,
        'BIND_DN' => 'cn=xxx,ou=admin,dc=univ,dc=fr',
        'BIND_PASSWORD' => 'xxx',
        );

$LDAP_CONNECT_LEVEL1 = $LDAP_CONNECT_LEVEL2;

$LEVEL1_FILTER = "(supannEntiteAffectation=XX*)";
$LEVEL2_FILTER = "(supannEntiteAffectation=XXX)";
cleanup: searchPeople: prepare for introducing more attrRestrictions based on user level
searchUserCAS: if $allowExtendedInfo > 1, do not remove employeeType
searchUserCAS: if $allowExtendedInfo = 1, anonymize mailForwardingAddress
searchUser: ensure user with (uid=foo) is returned before user with (sn=foo)
code cleanup: integrate the filter (eduPersonAffiliation=*) in $restriction
searchUser: if token is a number, also search on supannEmpId (usually requires $allowExtendedInfo > 0)
searchUserCAS: if $allowExtendedInfo > 0 and "allowInvalidAccounts" param, also search invalid users
searchUser on empty/missing token means everybody
add searchUserTrusted which can return an unlimited number of results
searchUser*: add filter_member_of_group (with this filter, searchUsersTrusted can do everything "groupUsers" do)
searchUser: add attr description
searchUser: add filter_description and filter_not_description