[Freeipa-users] ACME admin replication conflict

hello all,

in our setup ipa-healthcheck reports an issue with a replication conflict on "dn: cn=Enterprise ACME Administrators,ou=groups,o=ipaca"

the conflict and valid entry are almost identical:

Valid Entry:

dn: cn=Enterprise ACME Administrators,ou=groups,o=ipaca cn: Enterprise ACME Administrators description: ACME RA accounts objectClass: top objectClass: groupOfUniqueNames uniqueMember: uid=acme-master2.domain,ou=people,o=ipaca uniqueMember: uid=ipara,ou=people,o=ipaca

with the conflicting entry the same, except for the line

uniqueMember: uid=acme-master1.domain,ou=people,o=ipaca

i would like some guidance what this means and how to proceed: delete the conflicting entry, swap to the conflicting entry, merge it (somehow)

many thanks,

stijn