neither works: ldappasswd and passwd

["Alan Lu" <alan@ms.unimelb.edu.au>]

Hi,

I am trying to setup Openldap 2.0.11-13 on Redhat 7.2 to provide user
authentication services.

So far it's almost there. The remaining issues are on "password".
(1) ldappasswd can't work. Error msg as below:

=====
[root@herot etc]# ldappasswd -x -D
'cn=Manager,dc=ms,dc=unimelb,dc=edu,dc=au' -w secret test
New password: gc8/MZKw
Result: Unknown error (80)
Additional info: password hash failed
=====

I managed to work around by writing the encrypted "userPassword" attribute
directly. And then user "test" does have no problem to login.

(2)change password with "passwd"
The problem is that the user "test" itself can't change its own password:
=====
[test@herot test]$ passwd
Enter login(LDAP) password:
New password:
Retype new password:
LDAP password information update failed: Insufficient access
passwd: Permission denied
=====


The "access" primitive settings in slapd.conf are:
	access to * by * read
	access to *
			by self write
			by anonymous auth
			by dn="cn=Manager,dc=ms,dc=unimelb,dc=edu,dc=au" write

Any hints?


TIA

Alan