ldap mapping support

[jtriley]

This adds support for LDAP mappings:

http://docs.opennebula.org/4.12/administration/authentication/ldap.html#group-mapping

The following settings were added which are one-to-one with the LDAP conf:

$oned_ldap_mapping_generate
$oned_ldap_mapping_timeout
$oned_ldap_mapping_filename
$oned_ldap_mapping_key
$oned_ldap_mapping_default

Added the following puppet/hiera config to manually define the group mappings :mapping_generate: is set to false:

$oned_ldap_mappings - hash of group DN to group IDs (used when :mapping_generate: false)

[rwaffen]

hi, the tests for ldap seem to fail... would you please have a look at them?

[jtriley]

@rwaffen All set now. Test failure was due to setting string 'undef' as default for oned_ldap_mappings. Changed the default to the real undef since this variable isn't used in the ldap_auth template and isn't susceptible to scope.lookupvar issues (ie http://docs.puppetlabs.com/guides/templating.html#testing-for-undefined-variables)