Cloned from upstream: https://pagure.io/freeipa/issue/6839
"ipa-replica-install" (with CA and KRA) fails with:
Installation failed: Command '['pki', '-d', '/etc/pki/pki-tomcat/alias', '-C', '/etc/pki/pki-tomcat/pfile', 'pkcs12-cert-find', '--pkcs12-file', '/tmp/tmpNGl512', '--pkcs12-password-file', '/tmp/tmpD5QigX/password.txt']' returned non-zero exit status 255
*** Bug 1440232 has been marked as a duplicate of this bug. ***
Verified using IPA server version::
Marking BZ as verified. See attachment for console.log.
Created attachment 1284925 [details]
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.