how to set ACL f. pwdmgmt-admin-group

[florianz]

i need to set on a user-object an ACL-Entry which allows a member of a specified group to reset the user´s password, but not to let that admin modify other attributes on that user-object. userpassword is not eligible for ACL-Entries it seems, tried the attributes ndappasswordmgmt and nspmpassword but none of them let me do the password-reset.

can i achieve that via ACL´s ?


thanks in advance, florian