ipaserver: Add support for 4.7 (4.6.90-pre2)

With IPA 4.7 bigger changes have been introduced

Changes:
- Use of timeconf and chrony instead of ntpconf and ntpd.
- New IPAChangeConf (not used in ipaserver modules)
- New check_ldap_conf form ipaclient.install.client
- custodia instance needed for ca and kra
- no_ntp defaults to yes for client installation part
- A new option ntp_pool has been introduced (set to None).

roles/ipaserver/library/ipaserver_setup_ds.py

@@ -151,7 +151,7 @@ def main():
                                ca_subject=options.ca_subject,
                                hbac_allow=not options.no_hbac_allow,
                                setup_pkinit=not options.no_pkinit)
-            if not options.dirsrv_cert_files:
+            if not options.dirsrv_cert_files and NUM_VERSION < 40690:
                 ntpinstance.ntp_ldap_enable(options.host_name, ds.suffix,
                                             options.realm_name)