When trying to drill his password he must use  iancoleman rather then Ledger itself and definitely he must do it on offline computer.

His SEED ==> BIP39 Mnemonic
His passphrase ==> BIP39 Passphrase (optional)