Hi,
the following three patches make password changes for trusted AD users
work and fix
https://fedorahosted.org/sssd/ticket/1615 . The most
important fix, disabling canonicalization for the AS-REQ for the change
password ticket, is in the third patch. The other two fixes issues I
came across which might block password changes under specific
conditions.
bye,
Sumit