Command "ipa-replica-prepare" failed when SSL certificate is creating for the Directory Server.Certificate issuance failed
[2016-09-30T09:19:59Z ipa.ipatests.test_integration.host.Host.vm-074.cmd25] <DEBUG>: Creating SSL certificate for the Directory Server [2016-09-30T09:20:00Z ipa.ipatests.test_integration.host.Host.vm-074.cmd25] <DEBUG>: Certificate issuance failed [2016-09-30T09:20:00Z ipa.ipatests.test_integration.host.Host.vm-074.cmd25] <DEBUG>: The ipa-replica-prepare command failed.
pki-tomcat debug log debug
dirsrv error log errors
Tests client_reenrolnment_domlevel-0 failed with same error 'ipa-replica-prepare'
From dirsrv error log: " 10/Oct/2016:08:52:02.711983515 +0000] Entry "uid=admin,ou=people,o=ipaca" -- attribute krbExtraData" not allowed "
duplicate of #6274
Metadata Update from @gkaihoro: - Issue assigned to someone - Issue set to the milestone: 0.0 NEEDS_TRIAGE