Hi Jakub,
When i install a VM with Centos 7.3 and only install ipa-client4.4 (without --enablenis)
it boots without any problem. So somewhere the workaround makes something different.
When i look at the /var/log/message the first error/time-out looks like:
Jun 1 13:01:49 ad02 systemd: Reached target Basic System.
Jun 1 13:01:49 ad02 systemd: Starting Basic System.
Jun 1 13:01:49 ad02 systemd: Starting Dump dmesg to /var/log/dmesg...
Jun 1 13:01:49 ad02 systemd: Started D-Bus System Message Bus.
Jun 1 13:01:50 ad02 lvm: 2 logical volume(s) in volume group "cl" now active
Jun 1 13:02:14 ad02 systemd: Failed to register match for Disconnected message:
Connection timed out
Jun 1 13:02:39 ad02 systemd: Failed to register match for Disconnected message:
Connection timed out
Jun 1 13:02:39 ad02 systemd: Starting D-Bus System Message Bus...
Jun 1 13:02:39 ad02 systemd: Starting GSSAPI Proxy Daemon...
I already reported [1] that SSO to VM does not work with Centos7.3 and IPA. Some PAM stack
suggestions where already mentioned, but did not work either.
Regards,
Paul
[1]
https://bugzilla.redhat.com/show_bug.cgi?id=1449514