(legacy) it feels kind of duplicate, but to avoid too much changes on how it works now let's keep the behavior approx. the same. (part 2)

Had to merge and squash and edit punctuation:

" :" to ":", " ?" to "?" to retain original document style

PHP Fatal error:  Call to undefined function system_hosts_generate() in /usr/local/etc/inc/interfaces.inc on line 3129

(legacy) fix PHP Fatal error:  Call to undefined function create_gateway_quality_rrd() in /usr/local/etc/inc/gwlb.inc on line 330

setup_gateways_monitor needs rrd.inc

(legacy) fix PHP Fatal error:  Call to undefined function lock() in /usr/local/etc/inc/system.inc on line 125

traceback missing library issue, search function where lock() is used in line 125 (system_resolvconf_generate), then check use and add
missing library,

grep -r system_resolvconf_generate * | sed 's/:/ /g' | awk '{print $1;}' | sort -u

(proxy) add option to ignore subnets from getting into the access log (https://github.com/opnsense/core/issues/287)

(legacy/ldap) allow local users to be created with random password, solves errors in log when linking groups and leaves the possibility open to allow shell login using ldap in a later stage (currently not supported)

ldap: add describtion (full name) during import of a user

When a user needs to use the web configurator, import the the user from the remote ldap server using "import users" on system_usermanager.php
For backward compatibility purposes ldap_backed still can authenticate without a local user, although the web config isn't usable then.
(this always costs an extra query to determine the distinguished name of the user)
We may need to consider if "authenticate only" should be a bit more explicit to the user, or choose to always import users into OPNsense....