windows 2008 AD 更新 group member 异常

[weixin_38056418]

用spring ldap 更新group 的 member 报：
org.springframework.ldap.OperationNotSupportedException: [LDAP: error code 53 - 00002016: SvcErr: DSID-031A120C, problem 5003 (WILL_NOT_PERFORM), data 0
]; nested exception is javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 00002016: SvcErr: DSID-031A120C, problem 5003 (WILL_NOT_PERFORM), data 0
]; remaining name 'CN=m8,CN=Users'
at org.springframework.ldap.support.LdapUtils.convertLdapException(LdapUtils.java:212)
at org.springframework.ldap.core.LdapTemplate.executeWithContext(LdapTemplate.java:820)
at org.springframework.ldap.core.LdapTemplate.executeReadWrite(LdapTemplate.java:812)
at org.springframework.ldap.core.LdapTemplate.modifyAttributes(LdapTemplate.java:964)
at org.springframework.ldap.core.LdapTemplate.modifyAttributes(LdapTemplate.java:1317)
at org.springframework.ldap.core.LdapTemplate.update(LdapTemplate.java:1778)
at com.jhinno.ad.group.OperateGroup.replaceGroupMember(OperateGroup.java:92)
at com.jhinno.ad.Main.replaceGroupMember(Main.java:64)
at com.jhinno.ad.Main.main(Main.java:40)