Question:
Can customer change password over LDAP when using Read only Domain controller (RODC)?

Answer:
Password change is not possible on RODC servers.

Note: We support referrals only for group extraction, it might not be applicable for password resets.

For information on password change in a multi-domain AD forest using ldap referral, refer to CTX200506 - How to Change Password through NetScaler in a Multi-Domain Active Directory Forest Using LDAP Referral

For information on password change for ldap authentication, refer to CTX201133 - How to Change Password for LDAP Authentication for NetScaler Gateway and AAA-TM Users