If my memory serves me correctly, I think it was ipa-server-trust-ad.
Maybe I had
wrongfully assumed that it got installed as part of the replica setup process? After
the master already had that running.
FYI, 'yum history list' will show you the packages you installed & in what
Sam Morris <https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9