Populate indirect members when showing a group object.

This is done by creating a new attribute, memberindirect, to hold this
indirect membership.

The new function get_members() can return all members or just indirect or
direct. We are only using it to retrieve indirect members currently.

This also:
* Moves all member display attributes into baseldap.py to reduce duplication
* Adds netgroup nesting
* Use a unique object name in hbacsvc and hbacsvcgroup

ticket 296

ipalib/plugins/hbacsvc.py

@@ -51,10 +51,10 @@ class hbacsvc(LDAPObject):
     HBAC Service object.
     """
     container_dn = api.env.container_hbacservice
-    object_name = 'service'
-    object_name_plural = 'services'
+    object_name = 'hbacsvc'
+    object_name_plural = 'hbacsvcs'
     object_class = [ 'ipaobject', 'ipahbacservice' ]
-    default_attributes = ['cn', 'description']
+    default_attributes = ['cn', 'description', 'memberindirect',]
     uuid_attribute = 'ipauniqueid'
 
     label = _('Services')