freeipa-server-trust-ad has been added to the package list for adtrust for
Ubuntu.

result_ipaclient_test.dnso has been used instead of
result_ipaclient_test.dnsok in the assignment of dnsok.

The check for the existence of get_custodia_instance in custodiainstance
is not sufficient for the use od create_replica in CustodiaInstance. A new
check for create_replica in CustodiaInstance has been added.

In the test of options.zonemgr the value has been be checked uninitialized.

Fallback for older releases has been added to use '/usr/bin/getent' if
paths.GETENT is not defined.

six.moves.configparser does not always provide RawConfigParser.

The documentation of the module paramaters have been updated. The parameter
list has been updated and all parameters are providing a description and
the required argument has been updated to reflect current setting in the
modules.

These are set in the prepare step and used in the ds_init_info fuction.

These are set by ca.install_check, but flake8 does not know about this.

These functions are not used and therefore these functions have been
removed.

All module_utils are now providing the __all__ structure. Alse the imports
in the modules have been updated to only import freeipa sturctures from
module_utils.

These are white space and line length changes to calm down pylint and flake8.

Use and generation of dirsrv_pkcs12_info, http_pkcs12_info and
pkinit_pkcs12_info has been fixed in:

- ipaserver_setup_ds
- ipaserver_setup_http
- ipaserver_test

The variables dirsrv_cert_name, dirsrv_pin, http_cert_name, http_pin,
pkinit_cert_name and pkinit_pin have not been initialized properly.

The parameters ip_addresses, domain and realm have not been properly set
for the setup of dns if _setup_dns as not enabled.

This setting can not be set for replica deployments, but needs to be
initilized.

Some errors have been printed to the error log only and fail_json only got
an empty string as error message. This made the causes of the errors hard
to get.

The variables dirsrv_cert_name, dirsrv_pin, http_cert_name, http_pin,
pkinit_cert_name and pkinit_pin have not been initialized properly.

These two varibles in the dns binding are initialized in the installation
check in the install_check parts of ipareplica_prepare and used later on
in the dns configuration in ipareplica_setup_dns.

There is a new setting for the ipareplica role:

ipareplica_pki_config_override

The description of ipaclient_on_master in the ipaclient README was
providing the information that the flag is also used for relicas. This
is not correct and has been removed.

dnsok has been used unitialized in the compatilbility code without sssd.

All module and module_utils scripts have been adapted to be able to only
import the symbols that are really needed and used.

Fixed wrong path to CheckedIPAddress class

If members are added to or removed from a not existing group, an
error is printed.