Figured it out. I think it was this was because of I compiled checkipaconsistency on the replica. The errors pointed me towards pyasn1 and sure enough the pip versions on the first master and the replica differed:
First master: pyasn1 0.1.9 pyasn1-modules 0.0.8 Replica: pyasn1 0.4.7 pyasn1-modules 0.2.6 After doing pip uninstall pyasn1 ; pip uninstall pyasn1-modules, pip list shows on the replica: pyasn1 0.1.9 pyasn1-modules 0.0.8 After this ipa-healthcheck --failures-only returns 0 issues. _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
