i'm checking with
ldapsearch -Y GSSAPI -b cn=<domain
controller>,cn=replicas,cn=ipa,cn=etc,dc=<mydc>
and there's just
dn: ...
cn: <domain controller>
objectClass: ipaConfigObject
objectClass: nsContainer
objectClass: top
right after ldapmodify
[root@idm0 ~]# ipa-replica-manage list
unexpected error: u'ipaconfigstring'
like something is not letting the attribute to be added or removes it immediately.