The replicationdb password is an instance parameter and should be created by the first subsystem in the instance. This should happen independently of whether replication is being set up in case it is needed to set up replication (as a master) later. As IPA figured out when trying out setupReplication=False, failure to set the replication password in the first subsystem ends up breaking instance restart because of password checks on startup. Please review, Ade _______________________________________________ Pki-devel mailing list Pki-devel(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-devel