ipa-client-install always modifies the main ssh_config file. In modern distros there is now an ssh_config.d directory where config snippets can be dropped. ipa-client-install should detect if the directory is available and drop a snippet there instead of modify ssh_config directly.
Metadata Update from @pvoborni: - Issue set to the milestone: FreeIPA 4.7 backlog
Login to comment on this ticket.