diff --git a/hsadmin/cmd.py b/hsadmin/cmd.py
index 3cd327a..d3be9fa 100644
--- a/hsadmin/cmd.py
+++ b/hsadmin/cmd.py
@@ -150,8 +150,9 @@ class HsLdap:
     def force_sasl(self, uid: str):
         logging.debug("setting LDAP password scheme to SASL")
         c = self._c
+        # TODO check if '{crypt}x' can be safely removed
         c.modify(
-            f'cn={escape_rdn(uid)},ou=People,dc=hackerspace,dc=pl',
+            f'uid={escape_rdn(uid)},ou=People,dc=hackerspace,dc=pl',
             {'userPassword': [(MODIFY_REPLACE, ['{crypt}x', f'{uid}@HACKERSPACE.PL'])]}
         )