It was discovered that duplicating files in two subpackages is not
permitted by Fedora packaging guidelines[1]. This patch moves the PAC
responder to a new sssd-common-pac subpackage that both the sssd-ipa
and sssd-ad subpackages will require.

[1] https://fedoraproject.org/wiki/Packaging:Guidelines?rd=Packaging/Guidelines#DuplicateFiles

Now that we use the libkrb5 defaults for the default ccname template
we do not need the patch that changes the man pages defaults nor the
configure options to change sssd defaults anymore.

Related:
https://fedorahosted.org/sssd/ticket/2036

There was an inconsistency with how the warnings were specified and
how they were consumed by the macros. The result was that warnings were
hidden.

The NSS responder recently started using libsss_idmap in the getbysid
functions. The bug itself was spotted by one of our automated QA tools.

This will ensure that we aren't pulling in extra samba4
dependencies for the Kerberos provider.

The PAC responder is now used by both IPA and AD providers.

There are no longer any Fedora platforms running SSSD with SYSV
init scripts. We don't need the upgrade logic any more.

* Include localized pam_sss manpages in sssd-client
* Call ldconfig after libsss_nss_idmap is installed or removed

https://fedorahosted.org/sssd/ticket/1510

This patch splits the previously monolithic sssd package into sssd-common
that contains the deamon and the responders and per-provider packages
such as sssd-ldap or sssd-ipa.

This split would benefit two parties:
1) security auditors who are often trying to find the smallest package
   set including dependencies needed for the package to function.
   They would be able to i.e. install sssd-ldap and not bother
   about sssd-ipa or sssd-ad pulling in more dependencies.
2) 3rd party programs such as realmd or authconfig
   that would only be able to require or install on demand the
   needed packages.