ceec512 ipa-restore must stop tracking PKINIT cert in the preparation phase

1 file Authored by frenaud 7 years ago, Committed by mbabinsk 7 years ago,
    ipa-restore must stop tracking PKINIT cert in the preparation phase
    
    ipa-restore calls certmonger to stop tracking the PKI certs, HTTP and DS certs.
    It must also stop tracking the newly introduced PKINIT cert (stored in
    /var/kerberos/krb5kdc/kdc.crt).
    
    Otherwise the restore operation ends up with PKINIT cert tracked twice and
    uninstallation fails.
    
    https://fedorahosted.org/freeipa/ticket/6570
    
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>