switch keystone to use LDAP backend
add description for admin tenancy since ldap requires it
remove unused default groups
keep phpldapadmin pointed at local ldap
cleaning up ldap server
only initialize the local ldap once at creation time
disable anonymous bind to ldap