Description of problem:
This bug was found by Niru as part of "IPA May 2012 - Test Day - IPA Host OTP".

Version-Release number of selected component (if applicable):
ipa-server-2.2.0-16.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. ipa host-mod --password=Secert123 vm172.gsslab.pnq.redhat.com
ipa: ERROR: invalid 'password': Password cannot be set on enrolled host.

2. ipa host-mod --random vm172.gsslab.pnq.redhat.com
-------------------------------------------
Modified host "vm172.gsslab.pnq.redhat.com"
-------------------------------------------
  Host name: vm172.gsslab.pnq.redhat.com
  Random password: !1pV>?iGP/K6
  Principal name: host/vm172.gsslab.pnq.redhat.com@IDM.LAB.BOS.REDHAT.COM
  Password: True
  Keytab: False
  Managed by: vm172.gsslab.pnq.redhat.com


Actual results: password set successfully


Expected results: --random should ERROR out stating "Password cannot be set on
enrolled host."


Additional info: