Title: #320: add missing attribute to ipaca replica during CA topology update
@mbasti-rh also this PR solves a bit different issue that the others
https://github.com/freeipa/freeipa/pull/319) and that is that the upgrade path
for CA replicas was broken. It supplements the two PR so that everything is set
up correctly also for o=ipaca suffix, not only the domain one.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code