I have a need to programmatically enable/disable a user. I am using Python's ldap module and so would like to know how to do this via ldap modify.
I used the dsutil command to enable/disable a user and the only attributes I saw that changed were nsAccountLock. However, simply modifying this attribute was not sufficient (at least in terms of dsutil status).
What do I need to do to enable/disable programmatically?