ldapmodify a userPassword updates krblastpwdchange on RHEL6 but not RHEL7

Issue

• Modifying a userpassword as Directory Manager doesn't update krblastpwdchange on RHEL7:

  # ldapmodify -v -Z -h `hostname` -x -D "cn=Directory Manager" -W << EOF
  dn: uid=jsmith,cn=users,cn=accounts,dc=example,dc=com
  changetype: modify
  replace: userPassword
  userPassword: apassword
  EOF
  

• Checking user jsmith attributes afterwards shows an old krblastpwdchange

  [root@idm ~]# ipa user-show jsmith --all
    dn: uid=jsmith,cn=users,cn=accounts,dc=example,dc=com
    User login: jsmith
    First name: John
    Last name: Smith
    Full name: John Smith
   [...]
  krblastfailedauth: 20180510061208Z
  krblastpwdchange: 20180509073934Z     <==== Old  krblastpwdchange
  krbloginfailedcount: 1
  krbpasswordexpiration: 20180807073934Z
   [...]