Added keystone server support for the user_member_attribute config option.

This allows you to specify a user attribute to use in role/tenant searches instead of the default DN search.

Implements: blueprint ldap-posixgroup-support