Do actually stop pki_cad in stop_pkicad instead of starting it.

https://fedorahosted.org/freeipa/ticket/3554
Filter groups by type (POSIX, non-POSIX, external)

Added flag for each groups type: --posix, --nonposix, --external to group-find command.

Group types:
* non-POSIX: not posix, not external
* POSIX: with objectclass posixgroup
* external: with objectclass ipaexternalgroup

https://fedorahosted.org/freeipa/ticket/3483
Fix two failing tests due to missing krb ticket flags
Fix trustconfig-mod primary group error

As find_entry_by_attr no longer adds $SUFFIX to searched base DN,
trustconfig-mod could not find POSIX group to when validating the
new ipantfallbackprimarygroup value. This patch fixes this
regression.
Global trust config page

https://fedorahosted.org/freeipa/ticket/3333
Don't show trusts pages when trust is not configured

When trust is not configured trust-config page is raising an error. Trusts search page won't find anything either -> no use for the pages -> hiding.

https://fedorahosted.org/freeipa/ticket/3333
Fix regression in group type selection in group adder dialog

Refactoring of radio widget (04325fbb4c64ee4aef6d8c9adf0ff95b8b653101) caused that value is no longer supplied to value_change handler.