When a stage user is activate (ipa stageuse-activate), UUID plugin
(DS) checks that the ipaUniqueID value of the new active user is
This is useful to prevent a provisioning systems to create Active
user with invalid ipaUniqueID.
Now one of the workflow step is to move a Delete user into the Stage
container. In that case the Stage entry contains a ipaUniqueID and
can not activate.
A possibility is to 'reset' the ipaUniqueID value to 'autogenerate'
during that step but I wonder it it is valid to reset it.
Also, is it valid to reset it and keep others values like
Freeipa-devel mailing list