Imported Debian patch 4.7.2-3

debian/freeipa-client.postinst

@@ -1,14 +1,12 @@
 #!/bin/sh
 set -e
 
+LOGFILE=/var/log/ipaclient-upgrade.log
+
 if [ "$1" = configure ]; then
-    if [ ! -e /etc/pki/nssdb ]; then
-        tmp=$(mktemp) || exit
-        printf "\n" > $tmp
-        mkdir -p /etc/pki/nssdb
-        certutil -N -d /etc/pki/nssdb -f $tmp
-        chmod 644 /etc/pki/nssdb/*
-        rm $tmp
+    if [ -f /etc/ipa/nssdb/cert8.db ]; then
+        python2 -c 'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()' \
+        > $LOGFILE 2>&1
     fi
 fi