We need to add automation for ipa-replica-conncheck . For this we can refer the below mail thread snippet for test cases and we can add additional.
Lets create tasks needed for this effort in this user story.

Snippet from mail thread

and would like to make sure that we have an associated test. The test would need to make sure that the tool ipa-replica-conncheck --auto-master-check is successful in the following use cases:

when called with --principal (it should then prompt for a password)
when called with --principal / --password
when called without principal and password but with a kerberos TGT (kinit admin done before calling ipa-replica-conncheck)
when called without principal and password, and without any kerberos TGT (it should default to principal=admin and prompt for a password).

ipa-replica-conncheck should check the RPC connection to the master and not fallback to SSH.