howto: ldap modify acl

Hello guys,

I have a smb-ldap server on ubuntu 10.04 server. I recently found that when smb-ldap user SSHs into the server box and runs smbldap-passwd command then there is below error. root can run this command with no issues. I'd like users to be able to do the same.

Here is the error (happens for all users)

Ldap config for acl is :

I saw on some forums people suggesting below acl,

will this be correct acl? If so, how to modify the ACLs in ldap.

Thanks:b:

BTW : Is 'code / #' removed from thread tools ? I just find 'quote' so I used that for highlighting my configuration in thread

turn debugging on (log level 256) and see what attribute it is trying to update. it might not be userPassword. not familar with using SMB with LDAP but the logging would show you exactly what is wrong.