Установка реплики:

# ipa-replica-install \
  --dirsrv-cert-file ~/test_ca/replicacert.p12 \
  --dirsrv-pin SECret.123 \
  --http-cert-file ~/test_ca/replicacert.p12 \
  --http-pin SECret.123 \
  --no-pkinit

…
The ipa-replica-install command was successful