Sudorule RunAsUser should work with external groups

https://fedorahosted.org/freeipa/ticket/4600

Reviewed-By: Tomas Babej <tbabej@redhat.com>
test_forced_client_reenrollment: Don't check for host certificates

Since ticket 4449 we no longer generate host certificates by defailt.
Checdk that they are not present.

https://fedorahosted.org/freeipa/ticket/4601
backup/restore: Add files from /etc/ipa/nssdb

Add files from /etc/ipa/nssdb (IPA_NSSDB_DIR), which now used
instead of /etc/pki/nssdb (NSS_DB_DIR).
The old location is still supported.

https://fedorahosted.org/freeipa/ticket/4597

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
webui-ci: adjust dnszone-add test to recent DNS changes

'idnssoamname', 'ip_address' and 'force' fields were removed from DNS zone adder dialog in #4149

https://fedorahosted.org/freeipa/ticket/4604

Reviewed-By: Martin Kosek <mkosek@redhat.com>
Add Gabe Alford and Thierry Bordaz to .mailmap
Add additional backup & restore tests

https://fedorahosted.org/freeipa/ticket/3893
[TMP] CA-less integrtion test: Fix error messages
sudo integration test: Remove the local user test

SSSD does not support sudo rules for local users;
these should be added in a local sudoers file.

https://fedorahosted.org/freeipa/ticket/4608