OK, for future reference if someone finds this thread on the archives.
I read this thread  and after debugging, I found out that I had one
extra ZSK key on the directory server (explored with 389-console).
After I deleted the key that was *not* in the output of "ods-ksmutil
key list --verbose" , the service started normally and didn't crash
FreeIPA-users mailing list -- firstname.lastname@example.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org