OpenLDAP's smbk5pwd overlay can be very useful for maintaining synchronization between various password fields, but only if password-change operations are submitted in the form of an rfc3062 password modify extended operation.
The ldap_extended_operation function needed to do this is not yet exposed to ruby programs.
Logged In: YES
user_id=1865097
Originator: YES
I added a function, LDAP::Conn.change_password, that does what I need.
File Added: rubyldap-change-password-patch.diff
Patch adds change_password to LDAP::Conn