[OID] how to allow an user to change password after expiration

I'm writing a PL/SQL web app that performs user/password authentication using DBMS_LDAP against an Oracle Internet Directory server.

I would like to emulate a Windoz feature: when the password expires, the system should force the user to change his/her password before to continue.

In order to allow the user to bind to OID after password expiration, I must set the pwdGraceLoginLimit attribute.

Unfortunately it seems that OID doesn't allow the user to change his/her password when it performs a grace login. I get a LDAP error 50 when I try to modify the password after a grace login.

Is there any combination of attributes that allow me do do that? I'm using Oracle DB 9.0.1 and Oracle Application Server (including Oracle Internet Directory) 9.0.2.

Thanks in advance. Kind regards,

-- 
Cris Carampa (spamto:cris119_at_operamail.com)

All foreign wars I do proclaim
Live on blood and a mother's pain