I had to set my bind credentials using 'cn' instead of 'uid' to get ldapsearch to work, but anyway... After setting my password logged into console as myself I get identical ldapsearch results with both old and new passwords. After setting via 'passwd' only the new password works. I can send you the ldapsearch output offline if you'd like. -chris Richard Megginson wrote: > So the following both work and produce the exact same result? > ldapsearch -x -h ldaphost -p ldapport -D > "uid=chalstead,ou=people,dc=yourdomain,dc=com" -w oldpassword -b > ou=people,dc=yourdomain,dc=com "(uid=chalstead)" > and > ldapsearch -x -h ldaphost -p ldapport -D > "uid=chalstead,ou=people,dc=yourdomain,dc=com" -w newpassword -b > ou=people,dc=yourdomain,dc=com "(uid=chalstead)" > ?