I think that's a good example why an ID should be different from the user's common (sur)name. If you have jdoe as memeber of some groups, youll have some additional fun unless LDAP is smart enough to adjust those...
Sure, it was purely an example. There are plenty of cases where subtree renames may be required.
--Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>