(1) fixed ldapserver issues for centos 8; (2) add shib.conf to shibboleth; (3) removed certificate role

1) make karaage work without ppolicy
2) make ldapserver not deply a ppolicy
3) remove variable includes from the roles (pass with --extra-vars on
the command line)

1) make karaage work without ppolicy
2) make ldapserver not deply a ppolicy
3) remove variable includes from the roles (pass with --extra-vars on
the command line)

some fixes to the certificates to allow the role to be resued and removing a default value for the ldap domain