Today, after literally decades of being used to being treated as a second class citizen by IT, I learned that LDAP integration on the Mac is now sufficiently well evolved that it is possible to change one's password from the Usernames and Passwords control panel.