Many thanks to all.
This means I have a loooooooooooot of work ahead of me.
I am using ansible for the installation and for the moment I don't use the freeipa
modules.
I will try with a p12 file and see if there is any improvement, if not, I will fall back
to ipa-client install.