Make the LDAP debug option a configurable setting

The LDAP OPT_DEBUG_LEVEL is very useful for debugging LDAP
problems with Keystone. This change makes it easier to set
and find. The default will be to have it disabled.

DocImpact

Change-Id: I342fe2eea752bd8632074600386f0173e7328132
Escape values in LDAP search filters

LDAP search filter strings need to have special characters escaped
in order to be valid. There were some places where filter strings
were constructed where the value was not escaped.

Change-Id: Ib7870bc92d3af9066bb15e863cac4abd06f00768
Related-Bug: #1302106
Add detailed federation configuration docs

Add documentation on how to configure federation in keystone

Co-Authored-By: Steve Martinelli <stevemar@ca.ibm.com>

DocImpact
Closes-Bug: #1311693
Change-Id: Ia7e5a67d762921a81ef4a7d16c682e5db1c3ba6c
Merge "Escape values in LDAP search filters"
Merge "Add detailed federation configuration docs"
Merge "Make the LDAP debug option a configurable setting"