On Thu, Jan 4, 2018 at 7:01 PM, lejeczek via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

[knip]

Joining realm failed: libcurl failed to execute the HTTP POST transaction, explaining:  Unable to communicate securely with peer: requested domain name does not match the server's certificate.

that's your problem right there, your server certificate does not match the server dnsname.

Why are you not using autodiscovery and forcing to use this server?

--
Groeten,
natxo