[Freeipa-users] Replica Server can not join to master server

Old Replica Server Faild, so rebuild new replica server, when success join to master us ipa-client-install with --force-join, run ipa-replica-install, on "Configuring directory server (dirsrv). Estimated time: 30 seconds" step [27/42]: creating DS keytab, has error. [error] CalledProcessErroe: Command '/usr/sbin/ipa-getkeytab -k /etc/firsrv/ds.keytab -p ldap/aaaa.ipa.bbbb.cccc.dddd(a)IPA.BBBB.CCCC.DDDD -H ldaps://xxxx.ipa.bbbb.cccc.dddd' returned non-zero exit status 9 who to fix this problem? This replica server is fresh install. Thanks