Users can change their own passwords with the passwd command, but if you need to change a user’s password without their involvement, do `sudo /root/ldifs/star-passwd username` which will just prompt for the new password and the LDAP password. __Note:__ If you need to lock a user out of their account without deleting it, just change the password to something unguessable.