Use /usr/bin/python2

Part of the effort to port FreeIPA to Arch Linux,
where Python 3 is the default.

FreeIPA hasn't been ported to Python 3, so the code must be modified to
run /usr/bin/python2

https://fedorahosted.org/freeipa/ticket/3438

Updated by pviktori@redhat.com
Increase Java stack size on s390 platforms

As reported in https://bugzilla.redhat.com/show_bug.cgi?id=1040576,
the default stack trace needs to be also increased on s390 platforms
to prevent rhino segfault.
cli.print_attribute: Convert values to strings

When output_for_cli was called directly, rather than for values
received through XML or JSON API, joining multiple values failed
on non-strings such as DN objects.

Convert output to strings before printing it out.
Use new registration API in the privilege plugin
Allow anonymous and all permissions

Disallow adding permissions with non-default bindtype to privileges

Ticket: https://fedorahosted.org/freeipa/ticket/4032
Design: http://www.freeipa.org/page/V3/Anonymous_and_All_permissions
PKI service restart after CA renewal failed

Fix both the service restart procedure and registration of old
pki-cad well known service name.

This patch was adapted from original patch of Jan Cholasta 178 to
fix ticket 4092.

https://fedorahosted.org/freeipa/ticket/4092
Revert restart scripts file permissions change

Previous commit accidentally added executable permission to
restart_pkicad and stop_pkicad.
Enable building in C99 mode

C99 is supported on all compilers we target and
provides some useful features, including:
  * Standard struct initializers
  * Compound literals
  * For-loop declarations
  * Standard bool type
  * Variable arrays (use with caution)
  * Too many others to mention...
Add rpmbuild/ to .gitignore
Add libotp internal library for slapi plugins
Add OTP last token plugin

This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.

Thanks to Mark Reynolds for helping me with this patch.
Add OTP sync plugin

This plugin adds an extended operation for synchronizing tokens. This
operation is availalbe both with and without bind. In the latter case,
the first factor is required. This operation can also be performed
on a per-token or per-user level. In the latter case, we will attempt
to find the token automatically.

Thanks to Mark Reynolds for helping me with this patch.
Migrate ipa-pwd-extop to use libotp
Update ACIs to permit users to add/delete their own tokens
Add HOTP token support