7086183
Do not use ldapi in certificate renewal scripts. This prevents SELinux denials when accessing the ldapi socket. Reviewed-By: Rob Crittenden <rcritten@redhat.com>