Ticket #548 - CI test: added test cases for ticket 548
    
    Description: RFE: Allow AD password sync to update shadowLastChange
    
    1) Use DEFAULT_SUFFIX_ESCAPED for the escaped DEFAULT_SUFFIX.
    2) Check USER1's shadow values are adjusted by changing the password
       policy.  First, the default values.  Next, Global password policy
       then fine-grained password policy is added.
    3) Checks changes to the global pw policy are reflected on pw change
    3) Checks changes to the subtree pw policy are reflected on pw change
    
    Author: nhosoi, wibrown
    
    Review: nhosoi, wibrown