Is pwdMustChange working ok in samba-2.2.5 and ldap? I'm setting it to some time way in the past but the user is still not forced to change his/her password. I also set pwdCanChange = 1 to no avail. Any hints?