installers: restart DS after KDC is configured

This is required to enable password extension plugin right away so that
services configured later can use it to request keytabs via ipa-getkeytab.

https://fedorahosted.org/freeipa/ticket/6405

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

ipaserver/install/server/install.py

@@ -803,6 +803,10 @@ def install(installer):
                             setup_pkinit=not options.no_pkinit,
                             subject_base=options.subject)
 
+    # restart DS to enable ipa-pwd-extop plugin
+    print("Restarting directory server to enable password extension plugin")
+    ds.restart()
+
     if setup_ca:
         ca.install_step_1(False, None, options)
 

ipaserver/install/server/replicainstall.py

@@ -1376,6 +1376,10 @@ def install(installer):
         setup_pkinit=not options.no_pkinit,
         promote=promote)
 
+    # restart DS to enable ipa-pwd-extop plugin
+    print("Restarting directory server to enable password extension plugin")
+    ds.restart()
+
     install_http(
         config,
         auto_redirect=not options.no_ui_redirect,