what worked for me was to change it to 0 first and then change it to -1
If set to 0 it will force user to change password on next login. (If user doesn’t have flag set to Don’t Expire Password)
If set to -1 the password change date will be set to current date and time.
reference:
http://ldapwiki.com/wiki/Pwd-Last-Set%20attribute
