Description of problem: According to https://bugzilla.redhat.com/show_bug.cgi?id=186527#c73 ipa-client-install uses deprecated nss_ldap not SSSD and it's still causing startup hangs which people have complained at least the past four years. Please make ipa-client-install use SSSD by default. Version-Release number of selected component (if applicable): F14
We plan to do this as soon as we release FreeIPA v2.
This seems to work now.