AD + Openldap, change passwd failed

[Yang Xiao <yxiao2004 gmail com>]

Hi all,
For all the LDAP gurus out there, I have openldap setup on FC2 to be a
client of MS server 2003 AD, user authentication works fine, but
attempts to change passwd failed.

[root mymachine root]# passwd yxiao
Changing password for user yxiao.
Enter login(LDAP) password:
New UNIX password:
Retype new UNIX password:
LDAP password information update failed: Unknown error
00002077: SvcErr: DSID-03190DC8, problem 5003 (WILL_NOT_PERFORM), data 0

passwd: Permission denied

and in /var/log/messages
Sep 28 19:46:59 mymachine passwd[8537]: pam_ldap: ldap_modify_s Server
is unwilling to perform
Sep 28 19:47:10 mymachine passwd[8538]: pam_ldap: ldap_modify_s Server
is unwilling to perform


Many thanks,

Yang