upgrade: Enable and start oddjobd if adtrust is available

If ipa-adtrust-install has already been run on the system,
enable and start the oddjobd service.

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

install/updates/90-post_upgrade_plugins.update

@@ -18,3 +18,4 @@ plugin: update_managed_post
 plugin: update_managed_permissions
 plugin: update_idrange_baserid
 plugin: update_passync_privilege_update
+plugin: update_oddjobd_for_adtrust

ipaserver/install/plugins/adtrust.py

@@ -19,8 +19,11 @@
 
 from ipalib import api, errors
 from ipalib import Updater
+from ipaplatform.paths import paths
 from ipapython.dn import DN
 from ipapython.ipa_log_manager import *
+from ipapython import sysrestore
+from ipaserver.install import installutils
 
 DEFAULT_ID_RANGE_SIZE = 200000
 
@@ -161,5 +164,26 @@ class update_default_trust_view(Updater):
 
         return False, [update]
 
+
+class update_oddjobd_for_adtrust(Updater):
+    """
+    Enables and starts oddjobd daemon if ipa-adtrust-install has been run
+    on this system.
+    """
+
+    def execute(self, **options):
+        adtrust_is_enabled = self.api.Command['adtrust_is_enabled']()['result']
+
+        if adtrust_is_enabled:
+            self.log.debug('Try to enable and start oddjobd')
+            sstore = sysrestore.StateFile(paths.SYSRESTORE)
+            installutils.enable_and_start_oddjobd(sstore)
+        else:
+            self.log.debug('ADTrust not configured on this server, do not '
+                           'start and enable oddjobd')
+
+        return False, []
+
 api.register(update_default_range)
 api.register(update_default_trust_view)
+api.register(update_oddjobd_for_adtrust)