There is currently no upstream test for BZ 1542960 and we should create one:
1. install master with CA instance and replica without CA instance
2. add user test1Master on master and test1Replica on replica
3. ipa-backup on master
4. delete user test1Master on master and add test2Master
5. delete user test1Replica on replica and add test2Replica
6. ipactl stop on the replica (in order to avoid removing the master entry when step 7 is run)
7. ipa-server-install uninstall -U --ignore-last-of-role
8. ipactl start on the replica. We just simulated a master crash: the master entry is still present on the replica but the master is lost
9. ipa-restore on the master
10. check user entries on master (test1Master and test1Replica) and replica (test2Master and test2Replica), the replication could not sync and requires re-initialize.
11. Depending on which data you want to keep, ipa-replica-manage re-initialize --from=...
12. check that the CA is still functioning by requesting a cert for a user or a service
13. ipa-getcert on replica
14. ipa-ca-install on replica
15. ipa-getcert on replica
16. Install second replica with ca