re-implement LDAP

- Every possible ldap config option is now an attribute
 - All attributes are set to empty strings in the attributes file
 - the template loops through ldap attributes and puts set attributes
   into keystone.conf

Introducing PAM Support
 - Basic entry into supporting PAM as an auth mechanism.