Steps to Reproduce:

1. have a first system installed with RHEL 6.1, ipaserver1.example.com

2. have RHN repo access

3. have this first system with a ipa server installed, on
ipaserver1.example.com:
ipa-server-install --realm=EXAMPLE.COM --domain=example.com
--ds-password=password --master-password=password --admin-password=password
--hostname=ipaserver1.example.com --ip-address=10.14.5.16 --setup-dns
--forwarder=10.14.7.221 --zonemgr=msauton@redhat.com --idstart=100 --unattended

4. prepare an ipa replica, with adding dns entries in ipaserver1:
ipa-replica-prepare ipaserver2.example.com --ip-address 10.14.5.15

3. have a second system installed with RHEL 6.1, ipaserver2.example.com

4. make ipaserver2.example.com an ipa replica with ipaserver1.example.com:
ipa-replica-install /var/lib/ipa/replica-info-ipaserver2.example.com.gpg


Actual results:

Directory Manager (existing master) password:
Configuring ntpd
  [1/4]: stopping ntpd
  [2/4]: writing configuration
  [3/4]: configuring ntpd to start on boot
  [4/4]: starting ntpd
done configuring ntpd.
Configuring directory server for the CA: Estimated time 30 seconds
  [1/3]: creating directory server user
  [2/3]: creating directory server instance
  [3/3]: restarting directory server
done configuring pkids.
creation of replica failed: Command '/sbin/service certmonger start ' returned
non-zero exit status 1
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.