add Ubuntu block, based on Debian
try to allow ssl without ssl_cert
parameterize nss_initgroups_ignoreusers in ldap.conf
forgot a comma
Merge remote-tracking branch 'rfugina/master' into testing