[sork] ldap password change question

[Joe Cave]

hi list,
trying to migrate my horde to ldap backend and i'm having a problem changing passwords in ldap. when i try and change the passwd i get this error in horde:

Failure in changing password : User not found.

i think i've been looking at too much ldap for a while so maybe another pair of eyes can help me sort this out? here's my info:

- horde/passwd stable versions as of a couple days ago

here's my ldap access:

access to * attr=userPassword,cn,sn,givenName,hordePrefs,impPrefs,turbaPrefs
        by self write
        by * auth

here's my ldap user:

# joe, accounts, ld.dir
dn: uid=joe,ou=accounts,dc=ld,dc=dir
sn: joe
cn: joe cave
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: qmailUser
objectClass: hordePerson
mail: joe at netwrek.net
mailMessageStore: /var/qmail/maildirs/joe
mailHost: bandit
uid: joe
userPassword:: bGRhcGxkYXA=
ou: personal_addressbook

here's my backends.php:

$backends['ldap'] = array(
    'name' => 'ldap',
    'preferred' => '',
    'password policy' => array(
        'minLength' => 7,
        'maxLength' => 16
    ),
    'driver' => 'ldap',
    'params' => array(
        'host' => 'localhost',
        'port' => 389,
        'basedn' => 'ou=accounts,dc=ld,dc=dir',
        'uid' => 'uid',
        'realm' => '', // this will be appended to the username when
                       // looking for the userdn.
//        'userdn' => 'uid=' . Auth::getAuth() . ',ou=accounts,dc=ld,dc=dir,
        'encryption' => 'plain'
    )
);

here's my conf.php:

$conf['menu']['apps'] = array();
$conf['backend']['backend_list'] = 'hidden';
$conf['password']['strengthtests'] = true;
$conf['hooks']['username'] = false;
$conf['hooks']['default_username'] = false;

here's the ldap log:

[ID 293980 local4.debug] daemon: conn=114 fd=15 connection from IP=127.0.0.1:30589 (IP=0.0.0.0:389) accepted.
[ID 347666 local4.debug] conn=114 op=0 BIND dn="" method=128
[ID 217296 local4.debug] conn=114 op=0 RESULT tag=97 err=0 text=
[ID 902418 local4.debug] conn=114 op=1 SRCH base="ou=accounts,dc=ld,dc=dir" scope=2 filter="(uid=joe)"
[ID 362707 local4.debug] conn=114 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
[ID 338319 local4.debug] conn=114 op=2 UNBIND
[ID 850449 local4.debug] conn=114 fd=15 closed

what am i missing here? any input is appreciated. also, i know in cvs version its possible to lock the username to the uid of the person logged in. is it possible with stable version also? thx much.

- j