expose changeowner that works with ldap connection (for one by one change)