Fedora 14 moved the kerberos binaries from /usr/kerberos/[s]bin to
/usr/[s]bin. Pass PATH to the environment in ipautil.run() so we can
work universally across distributions.

Bug 650725

476652

This was causing replica creation and installation to fail.

596446

In krb5 1.7 and later, the stash file (/var/kerberos/krb5kdc/.k5.$REALM
on Fedora) is created in the regular keytab format instead of the older
less-portable one.  Based from comments and code in kt_file.c, here's a
change to try to recognize that case (the file starts with a magic
number) and read the master key from Python.

The KDC will still read either format, so I left the bits that set
things up on replicas alone (advice appreciated).  The patch works as
expected on my 64-bit box, both on RHEL5 (krb5 1.6.1 with a traditional
stash file) and on Raw Hide (krb5 1.7 with a keytab).

Backported from IPA v2 patch submitted by Nalin Dahyabhai <nalin@redhat.com>

By default the DS installs an aci that grants read access to ldap:///all
and we need ldap:///anyone

This is needed for Solaris to be able to see users.

389-ds changed changed its schema related to schema to be more
RFC-complaint, making the schema attributes operational so we need
to explicitly request the ones we want.

Resolves BZ #544927

Also add copyright

519414