The Samba-Bugzilla – Bug 13004
objectSID can be not-unique in AD due to conflict resolution
Last modified: 2017-08-31 04:09:19 UTC
Created attachment 13522 [details]
a possible solution
If there is conflict resolution on a foreignSecurityPrincipal that can cause a unique index constraint on objectSID, as both the original and conflict object exist at the same time. Deleting the conflict object doesn't help, as the deleted object is still in the index.