Stop and uninstall ipa_kpasswd on upgrade, fix dbmodules in krb5.conf

The ipa_kpasswd service was deprecated in 2.2, replaced by kadmin. On
upgrade it will be left running by the previous installation, we need
to stop it and uninstall the service.

The dbmodules section needs to reflect that we're now using the new
IPA kdb backend instead of the standard MIT ldap backend.

https://fedorahosted.org/freeipa/ticket/2341

freeipa.spec.in

@@ -440,6 +440,19 @@ if [ "$1" -ge "1" ]; then
 %endif
 fi
 
+%pre server
+# Stop ipa_kpasswd if it exists before upgrading so we don't have a
+# zombie process when we're done.
+if [ -e /usr/sbin/ipa_kpasswd ]; then
+%if 0%{?fedora} >= 16
+# Use systemd scheme
+    /bin/systemctl stop ipa_kpasswd.service >/dev/null 2>&1 || :
+%else
+# Use SystemV scheme only before F16
+    /sbin/service ipa_kpasswd stop >/dev/null 2>&1 || :
+%endif
+fi
+
 %pre server-selinux
 if [ -s /etc/selinux/config ]; then
        . %{_sysconfdir}/selinux/config