What was the IPA version you used? It might be not related, but when i upgraded sssd to
1.15.2-5 ssh doesn't work for me neither on the FreeIPA server, nor on the clients.
What's more strange, getent passwd for AD users doesn't work for the clients,
although it works for the server.