https://bugzilla.redhat.com/show_bug.cgi?id=1885874
--- Comment #2 from Avi Kivity avi.kivity@gmail.com --- Update: a reinstall+re-enroll of the client system (e.g. regformatting everything) did not fix the problem.
Removing the host entry from the ipa server and re-enrolling fixed it. So it looks like bad data from the server gets the client very confused.