Free IPA Replication Verification Tool
There is a tool available that does a verification of the replication of each FreeIPA host:
yum install git -y; git clone https://github.com/peterpakos/checkipaconsistency.git
# ./cipa -d mws.mds.xyz -W "SECRET"
+——————–+————+————-+——-+
| FreeIPA servers: | idmipa03 | idmipa04 | STATE |
+——————–+————+————-+——-+
| Active Users | 1 | 1 | OK |
| Stage Users | 0 | 0 | OK |
| Preserved Users | 0 | 0 | OK |
| Hosts | 2 | 2 | OK |
| Services | 11 | 11 | OK |
| User Groups | 10 | 10 | OK |
| Host Groups | 1 | 1 | OK |
| Netgroups | 0 | 0 | OK |
| HBAC Rules | 1 | 1 | OK |
| SUDO Rules | 0 | 0 | OK |
| DNS Zones | 3 | 3 | OK |
| Certificates | 17 | 17 | OK |
| LDAP Conflicts | 0 | 0 | OK |
| Ghost Replicas | 0 | 0 | OK |
| Anonymous BIND | ON | ON | OK |
| Microsoft ADTrust | True | False | FAIL |
| Replication Status | idmipa04 0 | idmipa03 18 | OK |
+——————–+————+————-+——-+
#
Cheers,
TK