Simplified Password Updates With LDAP Extended Operations
Directory Server allows you to change expired passwords using the
LDAP Password Modify Extended Operation specified in RFC 3062. The ldappasswd(1) command
can be used to change expired passwords from the command line.