Bug 1597809

Description of problem:
during the application_console part of ipa authentication setup, cloudforms reports it is unable to reach the ipa server but setting it up with rhel7 tools works entirely.

Version-Release number of selected component (if applicable):
5.9.2

How reproducible:
all the time in customer environment

Steps to Reproduce:
1.set up a rhel7 based IPA setup
2.edit configuration as documented in https://access.redhat.com/solutions/2751431
3.configure ntp
4.use appliance_console to enable IPA

Actual results:
IPA Server Parameters:

Enter the IPA Server Hostname: ipa-02.sample.network
Enter the IPA Server Domain: |sample.network| 
Enter the IPA Server Realm: |SAMPLE.NETWORK| 
Enter the IPA Server Principal: |admin| otheradmin
Enter the IPA Server Principal Password: ***********

External Authentication (httpd) Configuration:
IPA Server Details:
  Hostname:       ipa-02.sample.network
  Domain:         sample.network
  Realm:          SAMPLE.NETWORK
  Naming Context: dc=sample,dc=network
  Principal:      otheradmin

Proceed? (Y/N): Y
Checking connectivity to ipa-02.sample.network ... 
Failed.
Could not connect to ipa-02.sample.network,
the IPA Server must be reachable by name.

Expected results:
able to connect to the IPA server or better error message

Additional info:
using the base rhel7 tools doesn't result in a connectivity error :

[root@mcloudforms01 vmdb]# /usr/sbin/ipa-client-install --mkhomedir --hostname=$(hostname -s).sample.network
WARNING: ntpd time&date synchronization service will not be configured as
conflicting service (chronyd) is enabled
Use --force-ntpd option to disable it and force configuration of ntpd

Discovery was successful!
Client hostname: cloudforms01.sample.network
Realm: SAMPLE.NETWORK
DNS Domain: sample.network
IPA Server: ipa-02.sample.network
BaseDN: dc=sample,dc=network

Continue to configure the system with these values? [no]: yes
Skipping synchronizing time with NTP server.
User authorized to enroll computers: mara
Password for otheradmin: 
Successfully retrieved CA cert
    Subject:     CN=Certificate Authority,O=SAMPLE.NETWORK
    Issuer:      CN=Certificate Authority,O=SAMPLE.NETWORK
    Valid From:  2016-10-26 10:50:46
    Valid Until: 2036-10-26 11:50:46

Enrolled in IPA realm SAMPLE.NETWORK
Created /etc/ipa/default.conf
New SSSD config will be created
Configured sudoers in /etc/nsswitch.conf
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm SAMPLE.NETWORK
trying https://ipa02.sample.network/ipa/json
[try 1]: Forwarding 'schema' to json server 'https://ipa02.sample.network/ipa/json'
trying https://ipa02.sample.network/ipa/session/json
[try 1]: Forwarding 'ping' to json server 'https://ipa02.sample.network/ipa/session/json'
[try 1]: Forwarding 'ca_is_enabled' to json server 'https://ipa02.sample.network/ipa/session/json'
Systemwide CA database updated.
Hostname (cloudforms01.sample.network) does not have A/AAAA record.
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
[try 1]: Forwarding 'host_mod' to json server 'https://ipa02.sample.network/ipa/session/json'
SSSD enabled
Configured /etc/openldap/ldap.conf
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config
Configuring dibs.network as NIS domain.
Client configuration complete.
The ipa-client-install command was successful