The working replica was installed without CA.
This is what I can find in the replica install log. from the replica that is working.
ipa-replica-install was invoked with argument "/var/lib/ipa/replica-info-replica.ams.mydomain.gpg" and options: {'no_forwarders': False, 'conf_ssh': True, 'conf_sshd': True, 'ui_redirect': True, 'reverse_zone': None, 'trust_sshfp': False, 'unattended': False, 'no_host_dns': False, 'ip_address': None, 'no_reverse': False, 'setup_dns': False, 'create_sshfp': True, 'setup_ca': False, 'forwarders': None, 'debug': False, 'conf_ntp': True, 'skip_conncheck': False}
DEBUG args=/usr/sbin/ipa-replica-conncheck --master master.bxl.mydomain --auto-master-check --realm MYDOMAIN --principal theboss --hostname replica.ams.mydomain
Is there a command that can be used to poll for the CA master ?