Clone of https://issues.redhat.com/browse/RHEL-148282

The replica installation fails in the replica-conncheck phase. This step connects to the master and executes a command on the master, that is handled by apache server. The httpd server is using dbus and oddjob to start a process but dbus does not recognize the ipaapi user that is trying to run the command.

The issue happens because the ipaapi user is now created using systemd-sysusers in the %post server section:

%post server
# NOTE: systemd specific section
    /bin/systemctl --system daemon-reload 2>&1 || :
# END
if [ $1 -gt 1 ] ; then
    /bin/systemctl condrestart certmonger.service 2>&1 || :
fi
/bin/systemctl reload-or-try-restart dbus
/bin/systemctl reload-or-try-restart oddjobd
%sysusers_create %{_sysusersdir}/ipa.conf 

but the creation happens AFTER dbus and oddjob are restarted. As a result, when the httpd server tries to call dbus, Dbus is not aware of the user ipaapi.

The fix is to call sysusers_create before restarting oddjob and dbus.