Renaming cn ldap attribute

Support
1

Hi all, I’ve discovered that renaming a PC joined to the domain is not a good idea: the CN ldap attribute doesn’t change. Now I have this issue:
dn: CN=01ORGCED0322,CN=Computers,DC=ad,DC=csaricerche,DC=com
cn: 01ORGCED0322
sAMAccountName: CENTR0322$
dNSHostName: CENTR0322.csaricerche.com
[…]

There is a way to change the CN attribute of a joined PC?

2

So there is no way to change the CN of a computer ldap entry? IIRC that’s not the same behaviour in NS7…

Paolo

3

As you can see, CN is part of the entry DN, it’s not like other attributes. Changing CN requires generating a new LDAP entry. Why do you want to change CN?

I’d suggest to

  • Remove the PC from the domain, delete the PC account CENTR0322$
  • Fix the PC name
  • Add the PC again to the domain
4

You are right, the problem is that I have renamed a joined pc and I have discovered that cn in ldap still contains the old name.

So to rename a pc I have to remove from the domain then rename and re-join? Why directly renaming the joined pc doesn’t rename even the cn ldap attribute? AFAIK AD behaves differently isn’t it?

5

I don’t know. It’s better to ask Samba experts in the Samba users mailing-list. AFAIK CN cannot be changed as easily as other attributes since it’s part of the DN: it’s how LDAP works. The LDAP modrdn operation would be required in this case, but active directory may have its additional rules.

Second suggestion: if you can live with it, do not touch it.