Many thanks to all. This means I have a loooooooooooot of work ahead of me. I am using ansible for the installation and for the moment I don't use the freeipa modules. I will try with a p12 file and see if there is any improvement, if not, I will fall back to ipa-client install.