To change the DN of an entry, you must provide the following information in the cfldap tag:

dn="original DN"
action="modifyDN"
attributes="dn=new DN"

For example:

<cfldap action="modifyDN"
    dn="#old_UID#, ou=People, o=Airius.com"
    attributes="uid=#newUID#"
    server=#myServer#
    username=#myUserName#
    password=#myPassword#>

The new DN and the entry attributes must conform to the directory schema; therefore, you cannot move entries arbitrarily in a directory tree. You can only modify a leaf only. For example, you cannot modify the group name if the group has children.