To resolve the issue, please analyze a content of LDAP Modify command, specifically what attributes and what values are listed there.
For example if there's samAccountName, it should not be longer than 20 characters and should not contain special characters ('.' is allowed).
Another example is pwdLastSet. This is a system-modified attribute and can only accept 0 or -1 values from ODM AD. Any other values will be rejected.
System modifies this value itself, every time the password is changed.
Please make sure that ODM AD template does not have simple pwdLastSet copy (Basic).
