What were you trying to do that didn't work?

IPA user updates sometimes trigger compat tree entries to duplicate

What is the impact of this issue to you?

Non-single results from the compat tree

Please provide the package NVR for which the bug is seen:

slapi-nis-0.60.0-5.el9_3.x86_64
ipa-server-4.12.2-22.el9_7.1.x86_64
ipa-server-trust-ad-4.12.2-22.el9_7.1.x86_64

How reproducible is this bug?:

Always through webUI, sometimes with CLI, might be a race condition

Steps to reproduce

1. install clean server
2. run ipa-adtrust-install
3. create a test user, request compat for this user > 1 entry
4. update the test user with CLI , request compat > 1 entry
5. update the test user from webUI, request compat > 2 entries with different ipaAnchorUUID

Expected results

1 entry in compat for 1 user

Actual results

2 entries with different ipaAnchorUUID

Workaround

rebuild compat tree