Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Can not change user credentials (Users from Active directory <Full name field> could not be changed failed. Server return "Operation not allowed on RDN" message)

Messages: 1
Karma: 0
Send a private message to this user
All our users are mapped from Active Directory domain.
AD Server windows2K3
Kerio mail server Fedora Core 9.

When I try to save change Displayed Full user name field in KAC => Domain Settings -> Users -> Full name

I receive an error when I press apply button

"Error LDAP operation Failed. Check that you have installed Directory Extensions properly"

On a mail server
In error.log I see a lot of this messages.

main.cpp: Modify request to "" LDAP server (object DN = "CN=IT-Help,OU=IKF,OU=Contractors,DC=D8,DC=local") failed. Server return "Operation not allowed on RDN" message

# debug.log

Admin - insert Domain set Domain='d8.local', Type='1', BindIp='', FwPort='25', FwOffline='0', KerberosRealm='D8.LOCAL', FwMode='0', localDomainInsertFooter='0', FwAliasMode='0', MaxOutgoingMessageSize='0', DeletedMsgExpiration='0', MaxUserCount='0', AutoDeleteDeletedItemsEnabled='0', AutoDeleteJunkEmailEnabled='0', AutoDeleteDeletedItemsDays='30', AutoDeleteJunkEmailDays='30'
[13/Nov/2008 17:07:58] Admin - update User set Fullname='IT-Help gsdsg', Authorization={"kms.autodelete.deleteditems.days=30","kms.autodelete.junkemail.days=30 "} where Name='IT-help' and Domain='d8.local' controls ProviderID=6

Can you help me resolve this problem !

  • Attachment: error.PNG
    (Size: 10.83KB, Downloaded 507 times)
  • Attachment: kerio.PNG
    (Size: 14.18KB, Downloaded 488 times)

[Updated on: Thu, 13 November 2008 16:06]

Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
Active Directory does not allow to change the user full name from outside (via LDAP). The change has to be done on the AD server via MMC.

Messages: 119
Karma: 2
Send a private message to this user
Ok, several hours ago I made a Full Name change in AD but the change has not replicated to Kerio. Once a change is made through AD how does the change get replicated to Kerio?
Previous Topic: secretary lost the right to edit public calendar
Next Topic: Rebuild Log File
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Oct 19 14:51:29 CEST 2017

Total time taken to generate the page: 0.00391 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.