Updated to upstream 3.0.0 GA
    
    - Set minimum for samba to 4.0.0-153.
    - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so
      plugin to /dev/null since they cannot be used when trusts are configured
    - Restrict krb5-server to 1.10.
    - Update minimum for 389-ds-base to 1.3.0
    - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca
    - Add Requires on zip for generating FF browser extension