Support SSL / TLS connections to LDAP servers

Secure connections to LDAP require a client-side certificate which is
used to confirm that the LDAP server really is who we expect it to
be. This patch adds support for --ldap_ca_certificate to tell LDAP where
that file is located.

Tested with both ldaps:// to port 636, and ldap://-over-TLS to port
389 (the latter with --ldap_tls).

Change-Id: I69e2a7c267bd471124ae9ccfd6fffca5d3d4f123
Reviewed-on: http://gerrit.ent.cloudera.com:8080/2401
Reviewed-by: Henry Robinson <henry@cloudera.com>
Tested-by: jenkins
IMPALA-977: Make AsyncTimeCounter exist in the averaged profile.

Change-Id: Ia7d5afd8aed1577385eba1647766dec84ded842d
Reviewed-on: http://gerrit.ent.cloudera.com:8080/2441
Reviewed-by: Lenni Kuff <lskuff@cloudera.com>
Tested-by: Nong Li <nong@cloudera.com>
Revert "IMPALA-977: Make AsyncTimeCounter exist in the averaged profile."

This reverts commit 3fad0c60e78051c238c50893bf4329aa40960281.

Change-Id: Ifebf83c9e2d8291a61947e0de6cb37aba3085b3b
Reviewed-on: http://gerrit.ent.cloudera.com:8080/2445
Reviewed-by: Nong Li <nong@cloudera.com>
Tested-by: Nong Li <nong@cloudera.com>
IMPALA-977: Make AsyncTimeCounter exist in the averaged profile.

Change-Id: Ia7d5afd8aef1577385eba1647766dec84ded842d
Reviewed-on: http://gerrit.ent.cloudera.com:8080/2446
Reviewed-by: Nong Li <nong@cloudera.com>
Tested-by: jenkins