The ipa_uuid plugin fails to skip checks on replication this results in the plugin returning and insufficent access error when the replication user tries to set the ipaUniqueID that is being replicated over when the enforce flag is set (the default for ipaUniqueID).

This in turn cause the entry to simply disappear in the void as this error is not considered fatal by the replication engine and so the entry is simply lost instead of causing a replication error. From there on the trees on the 2 masters diverge.