fixes #5214 - pin ancestry for Ruby 1.8 compatibility
fixes #5222 - Log ldap attributes in debug-level logging
fixes #1902 - audit changes to lookup keys and values/overrides
fixes #5224 - Don't update a user with blank LDAP attribute values