title: Enable/Disable account programmatically using Python ldap module?
body: <p>I would like to programmatically enable/disable LDAP user accounts.  From the command prompt I can use dsutil and this apparently sets/removes the nsAccountLock operational attribute.  I have attempted to do modify_s() to set and remove this attribute from w/in Python but always get the following error message:  "Insufficient 'write' privilege to the 'nsAccountLock' attribute of entry ''".</p>
  
  <p>Is there a way to set/remove/add operational attributes or otherwise enable/disable ldap users programmatically through Python?</p>
  
  <p>Thanks,
  C</p>