URL: https://github.com/freeipa/freeipa/pull/5212 Author: mreynolds389 Title: #5212: New validation efforts in 389-ds-base require that the backend entry for Action: opened

PR body: """ a database be created before the mapping tree entry. This enforces that the mapping tree entry (the suffix) actually belongs to an existing backend.

For IPA we simply need to reverse the order of the backend vs mapping tree creation in cainstance.py -> __create_ds_db()

Fixes: https://pagure.io/freeipa/issue/8558 """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5212/head:pr5212 git checkout pr5212