I get this error when trying to login to the freeipa gui on the CA master.

"Login failed due to an unknow reason"

This started after an attempt to create a new replica failed on another machine.

freeipa version: VERSION: 4.5.0, API_VERSION: 2.228

Snippet from /var/log/httpd/error_log
...
[Wed Apr 25 21:47:43.846406 2018] [:error] [pid 29271] ipa: DEBUG: stderr=kinit: Pre-authentication failed: Cannot read password while getting initial credentials
[Wed Apr 25 21:47:43.846412 2018] [:error] [pid 29271]
[Wed Apr 25 21:47:43.846544 2018] [:error] [pid 29271] [remote 192.168.145.30:188] mod_wsgi (pid=29271): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Wed Apr 25 21:47:43.846603 2018] [:error] [pid 29271] [remote 192.168.145.30:188] Traceback (most recent call last):
[Wed Apr 25 21:47:43.846630 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/share/ipa/wsgi.py", line 51, in application
[Wed Apr 25 21:47:43.846690 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     return api.Backend.wsgi_dispatch(environ, start_response)
[Wed Apr 25 21:47:43.846711 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 262, in __call__
[Wed Apr 25 21:47:43.846747 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     return self.route(environ, start_response)
[Wed Apr 25 21:47:43.846759 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 274, in route
[Wed Apr 25 21:47:43.846776 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     return app(environ, start_response)
[Wed Apr 25 21:47:43.846787 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 929, in __call__
[Wed Apr 25 21:47:43.846803 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     self.kinit(user_principal, password, ipa_ccache_name)
[Wed Apr 25 21:47:43.846814 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 965, in kinit
[Wed Apr 25 21:47:43.846829 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     pkinit_anchors=[paths.KDC_CERT, paths.KDC_CA_BUNDLE_PEM],
[Wed Apr 25 21:47:43.846843 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 125, in kinit_armor
[Wed Apr 25 21:47:43.846872 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     run(args, env=env, raiseonerr=True, capture_error=True)
[Wed Apr 25 21:47:43.846883 2018] [:error] [pid 29271] [remote 192.168.145.30:188]   File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 512, in run
[Wed Apr 25 21:47:43.846906 2018] [:error] [pid 29271] [remote 192.168.145.30:188]     raise CalledProcessError(p.returncode, arg_string, str(output))
[Wed Apr 25 21:47:43.846976 2018] [:error] [pid 29271] [remote 192.168.145.30:188] CalledProcessError: Command '/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_29271 -X X509_anchors=FILE:/var/kerberos/krb5kdc/kdc.crt -X X509_anchors=FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem' returned non-zero exit status 1