ipaUniqueID should be unchangable once it is set.
https://bugzilla.redhat.com/show_bug.cgi?id=634194
make ipauniqueid unwritable freeipa-529-unique.patch
This will work because ipaUniqueId is set during an add operation which isn't controlled by attributes in a write ACI.
master: e648e03
Metadata Update from @rcritten: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.0 - 2010/09
Login to comment on this ticket.