I'm working application that requires the use of AWS ParallelCluster assets for some high performance processing. After the initial setup, we need to be able to add/remove user accounts and I am trying to set that up according to these instructions which explain how to setup a simple openLDAP directory service on the cluster head for this purpose.
I have successfully followed those instructions and am able to make an LDAP non-admin account. When logged in as root, I can set the password of this account by following using this command:
sudo ldappasswd -H ldap://localhost:389 -x -D "cn=ldapadmin,dc=<stack_name>,dc=internal" -W -S uid=<username>,ou=Users,dc=<stack_name>,dc=internal -y <path/to/file/with/LDAP/password>
At this point, I can switch into the new LDAP non-admin account. Unfortunately, if while logged in as this user, I execute the command passwd, I get the following error:
password change failed: Insufficient access passwd: Authentication token manipulation error
How can I configure my application of openLDAP so that non-admin users can change their own password?