It looks like freeipa needs release 1.28 of xmlrpc-c as there's some calls using gssapi_delegate. Debian just has 1.16.33 The latest version of xmlrpc-c that's released as a tarball appears to be 1.25.25