Here's the changelog:
When setting up clones or non-CA subsystems, pkispawn checks if
the security domain is accessible and if the user can log in.
These calls invoke REST URIs, which are not available on older
subsystems. To support these subsystems, we need to attempt the
older legacy servlets if the REST APIs are not available.
Ticket #604
This is breaking IPA replica installs because the new URLs are not
exposed through the proxy config. Even if this is fixed, it will be
broken for old servers.
The output of getDomainXML is pretty messed up and I'll open a ticket to
fix it, but given that it appears to be parsed correctly wherever its
being used, we can fix it later when we have time to test everything.
Please review,
Ade