ipa-replica-install fails with "Error while updating security domain: java.io.IOException: 2"

Issue

• Migration from IdM RHEL6 to RHEL7
• ipa-replica-install created this error in pki-ca-spawn log:

2016-05-18 16:49:05 pkispawn    : ERROR    ....... Exception from Java Configuration Servlet: 500 Server Error: Internal Server Error
2016-05-18 16:49:05 pkispawn    : ERROR    ....... ParseError: not well-formed (invalid token): line 1, column 0: {"Attributes":{"Attribute":[]},"ClassName":"com.netscape.certsrv.base.PKIException","Code":500,"Message":"Error while updating security domain: java.io.IOException: 2"}