Minor bugs found while testing stuff.

- wrong import in certs.py makes ipa-replica-manage fail
- close the fs after the stash file is written so that the file is updated
  immediately and not when the fd is garbage collected

ipa-server/ipaserver/certs.py

@@ -21,9 +21,9 @@ import os, stat, subprocess, re
 import sha
 import errno
 import tempfile
+import shutil
 
 from ipa import sysrestore
-from ipa import shutil
 from ipa import ipautil
 
 CA_SERIALNO="/var/lib/ipa/ca_serialno"

ipa-server/ipaserver/krbinstance.py

@@ -330,6 +330,7 @@ class KrbInstance(service.Service):
         try:
             fd = open("/var/kerberos/krb5kdc/.k5."+self.realm, "w")
             fd.write(s)
+            fd.close()
         except os.error, e:
             logging.critical("failed to write stash file")
             raise e