[Freeipa-users] Re: Replication failed after ipa-server-upgrade

i'm checking with ldapsearch -Y GSSAPI -b cn=<domain controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>

and there's just

dn: ... cn: <domain controller> objectClass: ipaConfigObject objectClass: nsContainer objectClass: top

right after ldapmodify

[root@idm0 ~]# ipa-replica-manage list unexpected error: u'ipaconfigstring'

like something is not letting the attribute to be added or removes it immediately.