Can anyone offer a theory as to why an LDAP account with administrator privileges wouldn’t be able to change their own password or create new users, but are able to change settings of existing users in Workgroup Manager (10.3.4)?
The account in question has been granted the following:
can administer the server (in this case, the LDAP server)
can administer this directory domain (for all users, groups, and computers)
can log in
This users password type is Open Directory
Puzzeled in Hollywood….