14d84da pkinit: make sure to have proper dictionary for Kerberos instance on upgrade

1 file Authored by abbra 7 years ago, Committed by mbasti 7 years ago,
    pkinit: make sure to have proper dictionary for Kerberos instance on upgrade
    
    When running PKINIT upgrade we need to make sure full substitution
    dictionary is in place or otherwise executing LDAP updates will fail to
    find proper objects because $SUFFIX, $DOMAIN, and other variables
    will not be substituted.
    
    Fixes https://fedorahosted.org/freeipa/ticket/6670
    
    Reviewed-By: Simo Sorce <ssorce@redhat.com>