Error when user attempting to change their own password

Hello,

We are new Centrify customers.  We had engineers on site a few weeks ago and they configured AD and their application to allow authentication on Linux servers.  Which seems to work great.

However, users are unable to change their own passwords from the Linux machines using either `passwd` or `adpasswd`.

For instance, when attempting to change my own password:

[14425@centrify-test ~]$ passwd
Changing password for user 14425.
Changing password for 14425
(current) password:
Enter new password:
Confirm new password:
The password change operation failed due to a policy restriction set by the
Active Directory administrator. This may be due to the new password length,
lack of complexity or a minimum age for the current password.
passwd: Authentication token manipulation error
[14425@centrify-test ~]$ adpasswd
(current) password:
Enter new password:
Confirm new password:
The password change operation failed due to a policy restriction set by
the Active Directory administrator. This may be due to the new password
length, lack of complexity or a minimum age for the current password.
Password change failed for user 14425

My password does in fact meet complexity requirements, is older than 1 day, and is longer than 7chars.

How do we allow users to change their own passwords.  

note:  I am a domain admin, however, this problem seems to be happening for everyone.

Thanks!