D S via FreeIPA-users wrote:
Any ideas on where to look next?
I believe you posed the same question on the freeipa-container package.
It might have helped if you'd posted here that you were using containers, what underlying OS's were being used and the version of IPA.
Did you try pointing the 3rd replica to one of the other two?
Did you try with --skip-conncheck? The connection checking isn't always perfect which is why the option exists.
rob