Move sudo related data all under cn=sudo

Fixes: https://fedorahosted.org/freeipa/ticket/773

install/share/bootstrap-template.ldif

@@ -82,30 +82,36 @@ objectClass: top
 objectClass: nsContainer
 cn: hbacservicegroups
 
-dn: cn=sudocmds,cn=accounts,$SUFFIX
+dn: cn=sudo,$SUFFIX
+changetype: add
+objectClass: top
+objectClass: nsContainer
+cn: sudo
+
+dn: cn=sudocmds,cn=sudo,$SUFFIX
 changetype: add
 objectClass: top
 objectClass: nsContainer
 cn: sudocmds
 
-dn: cn=sudocmdgroups,cn=accounts,$SUFFIX
+dn: cn=sudocmdgroups,cn=sudo,$SUFFIX
 changetype: add
 objectClass: top
 objectClass: nsContainer
 cn: sudocmdgroups
 
+dn: cn=sudorules,cn=sudo,$SUFFIX
+changetype: add
+objectClass: top
+objectClass: nsContainer
+cn: sudorules
+
 dn: cn=hbac,$SUFFIX
 changetype: add
 objectClass: top
 objectClass: nsContainer
 cn: hbac
 
-dn: cn=sudorules,$SUFFIX
-changetype: add
-objectClass: top
-objectClass: nsContainer
-cn: sudorules
-
 dn: cn=etc,$SUFFIX
 changetype: add
 objectClass: nsContainer

install/share/schema_compat.uldif

@@ -67,7 +67,7 @@ add:objectClass: top
 add:objectClass: extensibleObject
 add:cn: sudoers
 add:schema-compat-container-group: 'ou=SUDOers, $SUFFIX'
-add:schema-compat-search-base: 'cn=sudorules, $SUFFIX'
+add:schema-compat-search-base: 'cn=sudorules, cn=sudo, $SUFFIX'
 add:schema-compat-search-filter: (&(objectclass=ipaSudoRule)(!(compatVisible=FALSE))(!(ipaEnabledFlag=FALSE)))
 add:schema-compat-entry-rdn: cn=%{cn}
 add:schema-compat-entry-attribute: objectclass=sudoRole