Add nsds5ReplicaStripAttrs to replica agreements

Generalize the fix_replica_memberof update plugin to allow updating more
replication attributes.

Add nsds5ReplicaStripAttrs to replication agreements on update and
replica install.

https://fedorahosted.org/freeipa/ticket/2534

ipaserver/install/replication.py

@@ -51,6 +51,13 @@ TOTAL_EXCLUDES = ('entryusn',
 # List of attributes that need to be excluded from normal replication.
 EXCLUDES = ('memberof', 'idnssoaserial') + TOTAL_EXCLUDES
 
+# List of attributes that are not updated on empty replication
+STRIP_ATTRS = ('modifiersName',
+               'modifyTimestamp',
+               'internalModifiersName',
+               'internalModifyTimestamp')
+
+
 def replica_conn_check(master_host, host_name, realm, check_ca,
                        admin_password=None):
     """
@@ -519,6 +526,8 @@ class ReplicationManager(object):
             # that we will have to set the memberof fixup task
             self.need_memberof_fixup = True
 
+        entry.setValues('nsds5ReplicaStripAttrs', " ".join(STRIP_ATTRS))
+
         entry = a_conn.waitForEntry(entry)
 
     def needs_memberof_fixup(self):