Let openldap users change password with passwd in centos, i broke it
In dn: olcDatabase={2}hdb,cn=config you specify which rule to replace/add.
My system has password access rules in dn: olcDatabase={-1}frontend.
Make sure to target the correct rule.