username = sys.argv[1]
userpass = sys.argv[2]
creds = Creds(domain)
creds.acquire(user, password)
activate(creds)
client = Client(domain)
result = client.search('(sAMAccountName=%s)' % username)
if len(result) > 0:
sys.stderr.write('Error: user %s already exists\n' % username)
sys.exit(1)
dn = 'cn=%s,cn=users,%s' % (username, client.dn_from_domain_name(domain))
attrs = []
attrs.append(('cn', [username]))
attrs.append(('sAMAccountName', [username]))
princ = '%s@%s' % (username, domain)
attrs.append(('userPrincipalName', [princ]))
ctrl = AD_USERCTRL_NORMAL_ACCOUNT | AD_USERCTRL_ACCOUNT_DISABLED
attrs.append(('userAccountControl', [str(ctrl)]))
attrs.append(('objectClass', ['user']))
client.add(dn, attrs)
client.set_password(princ, userpass)
mods = []
ctrl = AD_USERCTRL_NORMAL_ACCOUNT
mods.append(('replace', 'userAccountControl', [str(ctrl)]))
client.modify(dn, mods)
