fixes #6445 - Configure external authentication via FreeIPA.

With these changes, ```foreman-installer --foreman-enable-ipa=true``` will configure external authentication using FreeIPA per http://theforeman.org/manuals/1.5/index.html#5.7ExternalAuthentication, provided the machine where Foreman is being installer (or reconfigured) is IPA-enrolled and HTTP/foreman-fqdn service exists in the FreeIPA server.
Would it be possible to only set httpd in permissive instead?