'pam_password exop' problems

[John Dalbec <jpdalbec@cc.ysu.edu>]

RH7.1 on client and server.
When I try to update a password as a user I get:
LDAP password information update failed: DSA is unwilling to perform.
>From '-d255':
ber_dump: buf=0x0817f030 ptr=0x0817f032 end=0x0817f06c len=58
  0000:  80 29 75 69 64 3d 74 61  63 72 6f 73 73 2c 6f 75   .)uid=tacross,ou  
  0010:  3d 50 65 6f 70 6c 65 2c  64 63 3d 63 63 2c 64 63   =People,dc=cc,dc  
  0020:  3d 79 73 75 2c 64 63 3d  65 64 75 81 <old & new passwords omitted>
=ysu,dc=edu.  
  
slap_passwd_parse: OLD not allowed.
==> ldbm_back_exop_passwd: ""
send_ldap_extended 53: (0)
send_ldap_response: msgid=6 tag=120 err=53
ber_flush: 45 bytes to sd 14
  0000:  30 2b 02 01 06 78 26 0a  01 35 04 00 04 1f 75 73   0+...x&..5....us  
  0010:  65 20 62 69 6e 64 20 74  6f 20 76 65 72 69 66 79   e bind to verify  
  0020:  20 6f 6c 64 20 70 61 73  73 77 6f 72 64             old password     
When I try to update a password as root I get:
passwd: encode.c:328: ber_put_string: Assertion `str != ((void *)0)' failed.
Aborted
GDB backtrace:
#4  0x404b4c63 in ber_put_string () from /lib/liblber.so.2
#5  0x404b5921 in ber_printf () from /lib/liblber.so.2
#6  0x40476a7b in _update_authtok (session=0x805fb40, 
    user=0x8079b88 "tacross", old_password=0x0, 
    new_password=0x807a2f0 "<omitted>") at pam_ldap.c:2101
#7  0x4047794d in pam_sm_chauthtok (pamh=0x805b588, flags=8192, argc=1, 
    argv=0x80792e0) at pam_ldap.c:2634
#8  0x40027b92 in _pam_dispatch_aux () from /lib/libpam.so.0
#9  0x40027e5d in _pam_dispatch () from /lib/libpam.so.0
#10 0x4038f59b in pam_sm_chauthtok () from /lib/security/pam_stack.so
#11 0x4038eccd in pam_sm_chauthtok () from /lib/security/pam_stack.so
#12 0x40027b92 in _pam_dispatch_aux () from /lib/libpam.so.0
#13 0x40027e5d in _pam_dispatch () from /lib/libpam.so.0
#14 0x400297cd in pam_chauthtok () from /lib/libpam.so.0
#15 0x08049645 in pwdb_entry_delete ()
#16 0x4009a177 in __libc_start_main (main=0x8049430 <pwdb_entry_delete+1848>, 
    argc=2, ubp_av=0xbffffaf4, init=0x8048a58 <_init>, fini=0x804a54c <_fini>, 
    rtld_fini=0x4000e184 <_dl_fini>, stack_end=0xbffffaec)
    at ../sysdeps/generic/libc-start.c:129

Do I just need to update pam_ldap.so?
Thanks,
John