If an LDAP server had two OU definitions with the same RDN values, if one is disabled, it still might be used.
One use case for this issue is searching for active vs. inactive users. Users that should be active could potentially be set to inactive.
Steps to Reproduce
Create two OU definitions for an LDAP server with the same RDN value.
Set one definition to not active.
Refresh the LDAP values for a user.
Check the logs to see the import set table to which the information was imported.
If this replication does not work, re-enable the OU definition and disable the other one. (Whether the replication is successful depends on which record the query finds first.)
Avoid having two OU definitions with the same RDN values.
Related Problem: PRB630276