Currently, utilities for managing users.

Only members of root can modify groups.

An unprivileged user can use ldapfinger.sh to get ldap records, and use changeldap{passwd|shell}.sh to change their password/shell.