Before kinit, try to sync time with the NTP servers of the domain we are joining
    
    When running ipa-client-install on a system whose clock is not in sync
    with the master, kinit fails and enrollment is aborted. Manual checking
    of current time at the master and adjusting on the client-to-be is then
    needed.
    
    The patch tries to fetch SRV records for NTP servers of the domain we aim
    to join and runs ntpdate to get time synchronized. If no SRV records are
    found, sync with IPA server itself.  If that fails, warn that time might
    be not in sync with KDC.
    
    https://fedorahosted.org/freeipa/ticket/1773