Its a pretty huge effort to roll out a wrapper around freeipa to +300 Hosts and keep it maintained for 2 years until Bullseye is released.
I am using freeipa-client on Debian for several years now. This problem never came up before, even though it was Python 2 as well, so I wonder if there could be another solution? Regards Harri

