(1) fixed ldapserver issues for centos 8; (2) add shib.conf to shibboleth; (3) removed certificate role