Currently, utilities for managing users. Only members of root can modify groups. An unprivileged user can use ldapfinger.sh to get ldap records, and use changeldap{passwd|shell}.sh to change their password/shell.