Description of problem:
If user provides an invalid / incorrect credential for Directory Manager
Password's prompt, then ipa-replica-manage command throws stack trace related
to 'Invalid Credentials'
# ipa-replica-manage list --verbose
Directory Manager password:
Traceback (most recent call last):
  File "/usr/sbin/ipa-replica-manage", line 1607, in <module>
    main(options, args)
  File "/usr/sbin/ipa-replica-manage", line 1533, in main
    bind_pw=options.dirman_passwd)
  File "/usr/lib/python2.7/site-packages/ipalib/backend.py", line 66, in
connect
    conn = self.create_connection(*args, **kw)
  File "/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 181,
in create_connection
    client_controls=clientctrls)
  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1087, in
simple_bind
    bind_dn, bind_password, server_controls, client_controls)
  File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
    self.gen.throw(type, value, traceback)
  File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 973, in
error_handler
    raise errors.ACIError(info="%s %s" % (info, desc))
ACIError: Insufficient access:  Invalid credentials
Unexpected error: Insufficient access:  Invalid credentials
Version-Release number of selected component (if applicable):
ipa-server-4.4.0-1.el7.x86_64
How reproducible:
100%
Steps to Reproduce:
1. Kdestroy -A
2. ipa-replica-manage list --verbose # with wrong directory manager password
Actual results:
Stack trace as above
Expected results:
User should be notified with proper error message like
'Unable to get details related to replicas as Directory Manager's password is
wrong/invalid'
Additional info:
There is nothing in log files related to this error or stack trace.