openldap 2.3 on RHEL 4 - users changing their own passwords?

[m.roth2006 at rcn.com]

I finally got openldap 2.3 built and working, and now I'm trying to let users change their own passwords. Everything I find on the 'Net wants the admin password, something that's obviously not going to happen. 

Does anyone know what I need to do to enable this?

The ACL from my slapd.conf is:
<snip>
 access to *
        by * read

 olcAccess: to attrs=userPassword
        by self write
        by anonymous auth
        by dn.base="cn=root,dc=att,dc=com" write
        by * none
<snip>

openldap 2.3.39

     mark