Exactly as the others report, I can no longer login to the WebUI. It says "invalid
'PKINIT enabled server': all masters must have IPA master role enabled" and
then throws an exception:
UPDATE: To resolve it, you can delete the following subtree entirely:
DN:
cn=<fqdn-of-your-stuck-replica>,cn=masters,cn=ipa,cn=etc,dc=ims,dc=telekom,dc=de
I think it should be marked as an issue... failed replica shouldn't affect WebUI of
other masters...