fixes #6445 - Configure external authentication via FreeIPA.

With these changes, ```foreman-installer --foreman-enable-ipa=true``` will configure external authentication using FreeIPA per http://theforeman.org/manuals/1.5/index.html#5.7ExternalAuthentication, provided the machine where Foreman is being installer (or reconfigured) is IPA-enrolled and HTTP/foreman-fqdn service exists in the FreeIPA server.
Maybe this whole selinux block should be wrapped in an if block (```$::selinux``` returns ```'true'``` if it's permissive or enforcing). I doubt platforms where selinux is disabled like your execs.