An update of 389-ds-base has been released which should resolve the
problems that IPA was having. 389-ds-base-1.2.11.5-1.fc17 corrects the
problems we were seeing with managed entries.
Don't forget to remove 389-ds-base from excludes in your yum.conf and/or
use yum versionlock delete 389-ds-base{,-devel,-libs}
regards
rob