Created attachment 1138970 [details]
IPA-client-uninstall console output

Description of problem:
ipa-client-install --uninstall command when run on non-atomic host fails to un-enroll client from IPA server when migrated to container.

Version-Release number of selected component (if applicable):
ipa-server: ipa-server-4.2.0-15.el7_2.10.x86_64
ipa-client: ipa-client-4.2.0-15.el7_2.10.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Setup IPA server and Client with version 7.2up3.
2. Install Atomic package on client system and start the docker service. (use appropritae repos/ subscription manager)
3. Configure docker configuration at (/etc/sysconfig/docker) to pull appropriate docker-sssd image.
4. Migrate ipa-client to container image using command "atomic install rhel7/sssd --migrate"(Note here rhel7/sssd is name of docker image/container)
5. On atomic host run, ipa-client-install --uninstall  

Actual results:
1. After step5, Ipa-client un-installation process completes with a message 
"Unenrolling client from IPA server
Unenrolling host failed: Error obtaining initial credentials: Cannot find KDC for requested realm."

Expected results:
1. IPA client un-installation command should un-enroll client without any error message. 

Additional info:
1. This error message is not observed when command "atomic uninstall rhel7/sssd" (Note here rhel7/sssd is name of docker image/container)
2. Also noticed that "systemctl status sssd" reporta ssssd running inside container.
3. Refer attachment for additional console output logs.