Fix ldap with with openstack

[Arif Ali]

With stsstack-bundles currently the --ldap uses the ldap-test-fixture which has groups configured such that it only has posixGroups and keystone with group configuration works effectively with groupOfNames objectclass

Tested this as a reproducer for a customer, and my scripts to get this working effectively is listed in [1]

[1] https://git.launchpad.net/~arif-ali/+git/stsstack-scripts/tree/generate_bundles/ldap

Once the model is created and then setup_ldap.sh is run, the basic 2 users will be allowed to login

Alternatively, some of the changes could be made in [2], so that it works for anyone that is using the ldap-test-fixture charm

[2] https://github.com/openstack-charmers/charm-ldap-test-fixture

There are then further scripts, which potentially go into the tools folder for further ldap testing

[Edward Hope-Morley (hopem)]

moved to https://github.com/canonical/stsstack-bundles/issues/5