pswd

server: OpenLDAP 2.4.43
clients: nss-pam-ldapd 0.9.6

master:~$ ldappasswd -x -D "cn=manager,dc=my,dc=example,dc=com" -W -S "uid=james,ou=users,dc=my,dc=example,dc=com"
New password:
Re-enter new password:
Enter LDAP Password:

And yet after changing the passwd, I can still only access the ldap client node-2 using NOT the new password.

node-2(james):~$ ldapwhoami -WxD 'uid=james,ou=users,dc=my,dc=example,dc=com' -H ldap://10.0.0.11
Enter LDAP Password:
dn:uid=james,ou=users,dc=my,dc=example,dc=com

$ ldapsearch -x -b 'dc=my,dc=example,dc=com' '(objectclass=*)'
# extended LDIF
#
# LDAPv3
# base <dc=my,dc=example,dc=com> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# my.example.com
dn: dc=my,dc=example,dc=com
dc: cem
objectClass: dcObject
objectClass: organization
o: CEM

# manager, my.example.com
dn: cn=manager,dc=my,dc=example,dc=com
objectClass: organizationalRole
cn: Manager
description: LDAP Admin

# groups, my.example.com
dn: ou=groups,dc=my,dc=example,dc=com
ou: groups
description: Groups
objectClass: organizationalUnit

# users, my.example.com
dn: ou=users,dc=my,dc=example,dc=com
ou: users
description: Users
objectClass: organizationalUnit

# james, groups, my.example.com
dn: cn=james,ou=groups,dc=my,dc=example,dc=com
cn: james
objectClass: top
objectClass: posixGroup
gidNumber: 1000

# james, users, my.example.com
dn: uid=james,ou=users,dc=my,dc=example,dc=com
cn: James
uid: james
uidNumber: 1000
gidNumber: 1000
sn: James
homeDirectory: /home/james
mail: [email protected]
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
loginShell: /bin/bash
gecos: james
shadowLastChange: 16372
userPassword:: e1NTSEF9ZjhRMGwwaDk1ek9mMUViaDhreDNlUEsvdFhFb29wV3I=
shadowMax: 9999
shadowWarning: 14

# search result
search: 2
result: 0 Success

# numResponses: 7
# numEntries: 6