Looks like I've somehow managed to get my 3 IPA servers out of sync:
[root@ipa3 ~]# ipa-replica-manage list
ipa3.my.net:master
ipa4.my.net:master
ipa5.my.net:master
[root@ipa3 ~]# ipa host-find solr14.my.net
---------------
0 hosts matched
---------------
----------------------------
Number of entries returned 0
----------------------------
On ipa4:
[root@ipa3 ~]# ipa host-find solr14.my.net
---------------
1 hosts matched
---------------
Host name: solr14.my.net
----------------------------
Number of entries returned 1
----------------------------
On ipa5:
[root@ipa3 ~]# ipa host-find solr14.my.net
---------------
1 hosts matched
---------------
Host name: solr14.my.net
Principal name: host/solr14.my.net@MY.NET
<mailto:host/solr14.my.net@MY.NET>
:
:
----------------------------
Number of entries returned 1
----------------------------
So they've obviously stopped talking. What's the right way to get them
back in sync and ensure that they don't drift again? Is there a
replication entry that's "stuck" and causing this?
That will give you the replication status.