avoid creating entries with duplicate dns, which are invalid in a real ldap implementation