good - reading more around the error log section you specified a principal problem in this
testbed emerges:
it tries to run '/usr/bin/nsupdate -g /etc/ipa/.dns_update.txt'
Could not update DNS SSHFP records.
the zone is not delegated hence it couldn't update it.
Is there a way to run FreeIPA without a delegated zone? That is put the kerberos i.a. SVC,
TXT records in one statically without updates afterwards?