If case_sensitive was set 'true' for AD
backend, we ignore it and continue with AD
default (false). However we still set confdb
to whatever was set in sssd.conf for the
responders. We should store to confdb
the value that is used by the backend.

Also fixes some misleading DEBUG messages
in that code area.

Reviewed-by: Pavel Reichl <preichl@redhat.com>

With this new parameter the directory where Kerberos configuration
snippets are created can be specified.

Fixes https://fedorahosted.org/sssd/ticket/2473

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

The end of dnf update is not an operation failure it is just
a usefull debug message.

Reviewed-by: Michal Židek <mzidek@redhat.com>

This reverts commit b5242c146cc0ca96e2b898a74fb060efda15bc77.

Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

This reverts commit dfb2960ab251f609466fa660449703835c97f99a.

Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

All our child processes duplicated the same code that set up the
debugging all around. Instead of adding yet another copy for the
selinux_child, add a common utility function.

Reviewed-by: Michal Židek <mzidek@redhat.com>

We had struct io and the associated destructor copied twice in the code
already and need it again in the SELinux provider. Instead of adding
another copy, move the code to a shared subtree under util/

Reviewed-by: Michal Židek <mzidek@redhat.com>

Reviewed-by: Pavel Reichl <preichl@redhat.com>

We used to only generate the [capaths] section on the IPA server itself,
when running in a trusted setup. But we also found out that the capaths
are often required to make SSO fully work, so it's better to always
generate them.

Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>