What were you trying to do that didn't work?

if migration data contains replication conflicts, ipa-migrate tries to still add them to the deployment we are migrating to, but fails with 389ds error

What is the impact of this issue to you?

inproper tool behavior

Please provide the package NVR for which the bug is seen:

ipa-server-4.12.2-24.el10_1.1.x86_64

How reproducible is this bug?:

always

Steps to reproduce

1. get replication conflict
2. export data
3. try to import with ipa-migrate

Expected results

conflict entries are handled by the ipa-migrate and skipped

Actual results

ipa-migrate tries to add them and fails:

Failed to add "idnsname=23.3.10.in-addr.arpa.+nsuniqueid=0acc7201-b02311f0-95b88e22-54950682,cn=dns,$suffix" error: Invalid DN syntax: illegal attribute in RDN