It should not be allowed. There is nothing to replicate.
Web UI also offers CA segment creation for such masters.
Also topologysuffix-verify ca reports error for replicas without CA
topologysuffix-verify ca
Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1298848 (Red Hat Enterprise Linux 7)
master:
Metadata Update from @pvoborni: - Issue assigned to stlaz - Issue set to the milestone: FreeIPA 4.4
Login to comment on this ticket.