There seems to be a race condition when converting to GSSAPI replication where the master does not yet have the principal of the replica.
We force a synchronization to start but we don't wait for it to complete.
We actually do a force sync (twice, once on each side). I think the error was seen when the del command was used with ipa-replica-manage. That command forces a cleanup of the replica with the assumption it is going away completely.
If you later try to do a connect then it will fail because all the data (host, service principals, etc) have been removed on the replica.
This is not a bug.
Metadata Update from @rcritten: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/01
Login to comment on this ticket.