How to change password of LDAP user?

Question

Is it possible to change password for logged in LDAP user using passwd command?

I have logged in to server1 using testuser. Trying to change password for itself (testuser) and got the below error.

[testuser@server1 ~]$ passwd  
Changing password for user testuser.  
(current) LDAP Password:  
New password:  
Retype new password:  
password change failed: Insufficient access  
passwd: Authentication token manipulation error 

Answer 1

See "OPERATION REQUIREMENTS" in slapd.access(5).

Unfortunately setting up ACLs in OpenLDAP is non-trivial, and you can easily lock everybody out, except the admin.

But your ACLs for the database should contain something like (using the cn=config format):

...
olcAccess: {5}to attrs=userPassword by self write by * auth
olcAccess: {6}to attrs=shadowLastChange by self write by * none
olcAccess: {7}to * by * read