Disclaimer: I did not dive into the test script. Maybe my suggestion is stupid. ;-)

How about just setting the pwdChangedTime attribute (with the help of relax rules control) to a value in the (near?) past right before sending the bind request to be tested?

Ciao, Michael.