Hi,
The attached patch fixes
https://fedorahosted.org/sssd/ticket/2406
I tried to use a permissive modification initially, but realized ldb
still checks for attribute duplicated when modifiying an entry. So I
added a check to the sssd code directly. It's a nested loop which is not
great, but it should be invoked in quite rare situations only.