Do not require description in UI.

Description attribute is not required in LDAP schema so there is no reason to
require it in UI. Modified tests to reflect this change.

https://fedorahosted.org/freeipa/ticket/4387

Reviewed-By: Martin Kosek <mkosek@redhat.com>
Allow specifying signing algorithm of the IPA CA cert in ipa-server-install.

This is especially useful for external CA install, as the algorithm is also
used for the CSR signature.

https://fedorahosted.org/freeipa/ticket/4447

Reviewed-By: Martin Kosek <mkosek@redhat.com>
baseldap: Properly handle the case of renaming object to the same name

When renaming a object to the same name, errors.EmptyModList is raised.
This is not properly handled, and can cause other modifications in the
LDAPUpdate command to be ignored.

https://fedorahosted.org/freeipa/ticket/4548

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
baseldap: Fix undefined variable reference in LDAPAddReverseMember and LDAPRemoveReverseMember
idviews: Add necessary schema for the ID views

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Create container for ID views under cn=accounts

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Add ipaAssignedIDVIew reference to the host object

Part of: https://fedorahosted.org/freeipa/ticket/3979
ipalib: Remove redundant and star imports from host plugin

Also fixes incorrect error catching for UnicodeDecodeError.

Part of: https://fedorahosted.org/freeipa/ticket/3979
ipalib: PEP8 fixes for host plugin

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Create basic idview plugin structure

Part of: https://fedorahosted.org/freeipa/ticket/3979
idvies: Add managed permissions for idview and idoverride objects

Part of: https://fedorahosted.org/freeipa/ticket/3979
hostgroup: Add helper that returns all members of a hostgroup

Part of: https://fedorahosted.org/freeipa/ticket/3979
hostgroup: Remove redundant and star imports

Part of: https://fedorahosted.org/freeipa/ticket/3979
hostgroup: Selected PEP8 fixes for the hostgroup plugin

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Add ipa idview-apply and idview-unapply commands

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Extend idview-show command to display assigned idoverrides and hosts

Part of: https://fedorahosted.org/freeipa/ticket/3979
trusts: Add conversion from SID to object name

Since SID is often used as a unique identifier for AD objects, we need to convert
a SID to actual object name in the AD.

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Support specifying object names instead of raw anchors only

Improve usability of the ID overrides by allowing user to specify the common name of
the object he wishes to override. This is subsequently converted to the ipaOverrideAnchor,
which serves as a stable reference for the object.

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Split the idoverride object into iduseroverride and idgroupoverride

To be able to better deal with the conflicting user / group names, we split the
idoverride objects in the two types. This simplifies the implementation greatly,
as we no longer need to set proper objectclasses on each idoverride-mod operation.

Part of: https://fedorahosted.org/freeipa/ticket/3979
idviews: Split the idoverride commands into iduseroverride and idgroupoverride

Part of: https://fedorahosted.org/freeipa/ticket/3979