Adjust defaults when using IPA
    
    We want the PAM login enabled instead of `form`, and we can set some
    reasonable defaults for the default attribute mapping, knowing which
    attributes are available in IPA.
    
    Signed-off-by: Aurélien Bompard <aurelien@bompard.org>