Description of problem:
Replica install on RHEL-7.3 update1 from 6.9 Master fails during pki instance creation.

Console output:
===============

   [42/42]: configuring directory to start on boot
Done configuring directory server (dirsrv).
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 30 seconds
  [1/27]: creating certificate server user
  [2/27]: configuring certificate server instance
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmp7tTBPF' returned non-zero exit status 1
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL See the installation logs and the following files/directories for more information:
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL   /var/log/pki/pki-tomcat
  [error] RuntimeError: CA configuration failed.
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(Replica): ERROR    CA configuration failed.
ipa.ipapython.install.cli.install_tool(Replica): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
[root@dhcp207-47 ~]#

Version-Release number of selected component (if applicable):
RHEL-6.9
--------
ipa-server-3.0.0-51.el6.x86_64
pki-ca-9.0.3-50.el6_8.noarch
[root@dhcp207-4 ~]# 

RHEL-7.3.update1
----------------
[root@dhcp207-47 ~]# rpm -q ipa-server pki-ca
ipa-server-4.4.0-14.el7_3.x86_64
pki-ca-10.3.3-14.el7_3.noarch
[root@dhcp207-47 ~]#

How reproducible:
Always

Steps to Reproduce:
1. Install IPA master on RHEL-6.9
2. Create replica gpg file for RHEL-7.3 update1 replica
3. Install replica on RHEL-7.3 update1

Actual results:
Replica installation fails

Expected results:
Replica installation should be successful

Additional info:
Please find the attached debug log file of CA