This is no longer an issue as the sambaPwdMustChange and sambaPwdCanChange attributes are no longer used. It now only uses the policy in combination with sambaPwdLastSet. This bug should be closed and marked as fixed.