I have an OpenLDAP server installed on RHEL 5.7. We are still in the testing phase of the project. I have test clients for RHEL 5 and 6 that authenticate and allow password changes so I know that the server configuration is good. On the RHEL 4 client however, I can authenticate but it will not allow me to change the password. The error I get is here:
LDAP password information update failed: Can't contact LDAP server
Must supply old password to be changed as well as new one
passwd: Permission denied

I found a bug fix on Red Hat's website for nss_ldap that was supposed to fix this issue but it did not fix it. Any thoughts? My ldap.conf follows (I used SSSD on 5 and 6 so I didn't have to use this file):
timelimit 120
bind_timelimit 120
bind_policy hard
idle_timelimit 3600
pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_lookup_policy yes
pam_password md5
nss_base_passwd ou=people,dc=prod,dc=example,dc=com?one
nss_base_shadow ou=people,dc=prod,dc=example,dc=com?one
nss_base_group ou=groups,dc=prod,dc=example,dc=com?one
pam_password exop
ssl start_tls
tls_cacertdir /etc/openldap/cacerts
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus
host servername
base dc=prod,dc=example,dc=com

Anybody? Any ideas? I still haven't found anything online. Would appreciate any assistance you can offer.

I'll try to help, but its not something I've done, at least for a while...

You could start here, a good HOWTO on LDAP http://www.linuxhomenetworking.com/w...DAP_and_RADIUS

This
normally implies the LDAP service is down or blocked by a firewall / iptables.

You do know that RHEL4 is no longer supported by RH, unless you have paid extra for Extended support
http://www.redhat.com/security/updates/errata/

Some good books/manuals (in-depth) at http://www.linuxtopia.org/online_boo...ion_index.html

HTH

Unfortunately, the site you posted is pretty much a beginner site, and while I did verify the file against my own, I know that there are no firewall rules blocking the traffic. It is in the same IP space as the RHEL 5 and RHEL 6 boxes that are able to change passwords.
Yes, I know that it is no longer supported, normally. We do have extended support thankfully, and I have put in a support case in the hope that they may be able to shed some light on the issue.