Disclaimer: I did not dive into the test script. Maybe my suggestion is stupid. ;-)
How about just setting the pwdChangedTime attribute (with the help of relax rules control) to a value in the (near?) past right before sending the bind request to be tested? Ciao, Michael.
