Prohibited pw modification message is shown for non-ldap users

[ion201]

I have a nslcd.conf file with a section like this:

pam_password_prohibit_message "Local password change is prohibited for LDAP login"
validnames /^.*@company.com$/
nss_min_uid 100000

When I try to change a password with a local user, I get an unexpected message from ldapd:

$ passwd local_user
Changing password for local_user.
Current password: [ENTER WRONG PASSWORD]
Local password change is prohibited for LDAP login
passwd: Authentication token manipulation error
passwd: password unchanged

The message indicates the wrong error to the user, suggesting that ldapd blocked this request. In actuality, this user does not pass the criteria specified by validnames or nss_min_uid, so ldapd doesn't have anything to do with it. In that case, I don't think ldapd should print any messages at all.