When I click "allow users to change their password" and click Done it seems to be that those settings aren't being written in the config files. If I visit the website it keeps saying "Changing passwords is turned off" - however I just turned it on didn't I?
I'm running Lion Server 10.7.5 on a Mac Mini Server. All other options for the default website are greyed out. SSL certificate is installed on the machine via Profile Manager.