Steps to reproduce
1)We have a normal user who is not admin of any kind.
2) Our password policy is :
a) passwordChange : on
b) passwordGraceLimit : 5 attempts
c) passwordExp: on
d) passwordMaxAge : 90 days
e) passwordHistory : on
f) passwordInHistory : 10

3) The normal user has expired the password and he also exhausted his password grace login attempts.
4) Now the user tries to change his password but he is not able to change his password and gets an error that ur password has expired . ( The user had entered fresh new password which is not in the list of his previous password)

Why can't the user change his own password once it has been fully expired ?
Is the administrator the only person who change the users password one it is fully expired ? If so then will the passwordhistory of the user get affected by password reset done by the administrator ?

I got the documentation of oracle directory which mentions that only the administrator can change user password once it is fully expired. (https://docs.oracle.com/cd/E19693-01/819-0995/6n3cq3as6/index.html)
But I could not get the similar reference for 389 directory server.