[freeipa PR#2847][opened] pkinit setup: fix regression on master install

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/2847
Author: flo-renaud
 Title: #2847: pkinit setup: fix regression on master install
Action: opened

PR body:
"""
## pkinit setup: fix regression on master install
The commit 7785210 intended to fix ipa-pkinit-manage enable on a replica without any CA
but introduced a regression: ipa-server-install fails to configure pkinit with the fix.

This commit provides a proper fix without the regression: pkinit needs to contact Dogtag
directly only in case there is no CA instance yet (for ex. because we are installing the
first master).

Fixes: https://pagure.io/freeipa/issue/7795

## test: add non-reg test checking pkinit after server install
Add a test with the following scenario:
ipa-server-install (with ca and pkinit enabled)
check that pkinit is properly enabled:
ipa-pkinit-manage status must return "enabled"
the KDC cert must be signed by IPA CA

Related to: https://pagure.io/freeipa/issue/7795

"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2847/head:pr2847
git checkout pr2847

[freeipa PR#2847][closed] pkinit setup: fix regression on master install

[fcami]

   URL: https://github.com/freeipa/freeipa/pull/2847
Author: flo-renaud
 Title: #2847: pkinit setup: fix regression on master install
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2847/head:pr2847
git checkout pr2847