<long trace of ipa-client-install --password=' --domain  --realm --server --hostname=xxxx --debug>
,,,,,
Configured /etc/krb5.conf for IPA realm YYY
Starting external process
args=keyctl search @s user ipa_session_cookie:host/xxx@YYY
Process finished, return code=1
stdout=
stderr=keyctl_search: Required key not available

Starting external process
args=/usr/bin/certutil -d /tmp/tmpl7C_lX -N -f /tmp/tmpL9Jnj9
Process finished, return code=0
stdout=
stderr=
Starting external process
args=/usr/bin/certutil -d /tmp/tmpl7C_lX -A -n CA certificate 1 -t C,,
Process finished, return code=0
stdout=
stderr=
Starting external process
args=keyctl search @s user ipa_session_cookie:host/xxx@YYY
Process finished, return code=1
stdout=
stderr=keyctl_search: Required key not available

failed to find session_cookie in persistent storage for principal 'host/xxx@YYY'
trying https://theoipa.ph.man.ac.uk/ipa/json
Created connection context.rpcclient_47349328
Forwarding 'schema' to json server 'https://ipa.xxxx/ipa/json'
Destroyed connection context.rpcclient_47349328
Traceback (most recent call last):
<long traceback>