Howard Chu writes:
Don't guess. Turn up the slapd debug level and show what it logs when you perform the actual password change.
Except, take care not to mail any actual passwords around if they turn up in the log:-) They do with at least loglevel 16 (log BER packets), unless someone has added some heavy magic since last I looked.