Issue

I'm attempting to configure additiona FreeIPA v4.5.4 replica's for our environment. However, when executing ipa-replica-prepare replica3.example.com --ip-address=10.0.0.5 I get the following error:

ipa-replica-prepare replica3.example.com --ip-address=10.0.0.5
Directory Manager (existing master) password:
Do you want to search for missing reverse zones? [yes]: yes
Preparing replica for replica3.example.com from replica2.example.com
Constraint violation: Password reuse not permitted
The ipa-replica-prepare command failed.

Relevant debug logs: https://pastebin.com/raw/YZbBRJJr

Tracing the error, it appears this is due to https://pagure.io/freeipa/c/c1e9b6fa1d3b334e6331c00158bf8e71926cd658

Specifically, it looks like ipa-replica-prepare is trying to update the admin users password with the Directory Admin password but, due to our FreeIPA password policy, it's getting blocked.

ipa pwpolicy-show
  Group: global_policy
  Max lifetime (days): 3650
  Min lifetime (hours): 2
  History size: 288
  Character classes: 0
  Min length: 16
  Max failures: 6
  Failure reset interval: 60
  Lockout duration: 600

Steps to Reproduce

1. Install FreeIPA 4.5.4 master instance, configure the password policy to not allow password re-use
2. Attempt to prepare a replica info file

Actual behavior

ipa-replica-prepare errors out trying to update the password for the admin user.

Expected behavior

Either a flag to skip this or better logic around the admin users password such that global password policy restrictions to block replica prepare.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.5.4-10.el7.centos.1.x86_64
ipa-client-4.5.4-10.el7.centos.1.x86_64
389-ds-base-1.3.7.5-21.el7_5.x86_64
pki-ca-10.5.1-9.el7.noarch
krb5-server-1.15.1-19.el7.x86_64

I'm absolutely happy to provide any other information that's necessary. We're currently on Domain Level 0 as well, I'm migrating us to CentOS 7 instances.