Enrollment for a host in an IPA domain

This will create a host service principal and may create a host entry (for
admins).  A keytab will be generated, by default in /etc/krb5.keytab
If no kerberos credentails are available then enrollment over LDAPS is used
if a password is provided.

This change requires that openldap be used as our C LDAP client. It is much
easier to do SSL using openldap than mozldap (no certdb required). Otherwise
we'd have to write a slew of extra code to create a temporary cert database,
import the CA cert, ...

ipa-client/ipa-install/ipa-client-install

@@ -225,6 +225,7 @@ def main():
         defopts = [{'name':'basedn', 'type':'option', 'value':cli_basedn},
                    {'name':'realm', 'type':'option', 'value':cli_realm},
                    {'name':'domain', 'type':'option', 'value':cli_domain},
+                   {'name':'server', 'type':'option', 'value':cli_server},
                    {'name':'xmlrpc_uri', 'type':'option', 'value':'https://%s/ipa/xml' % cli_server}]
 
         opts.append({'name':'global', 'type':'section', 'value':defopts})