Jan Cholasta wrote: > Hi, > > the attached patch fixes <https://fedorahosted.org/freeipa/ticket/3975>. Just thinking out loud here, haven't tried it... What about creating a replica on a non-CA host, I think it wouldn't be tracked. Can you use the value or existence of api.env.ra_plugin instead? rob