[python-ldap] Modifying AD ntSecurityDescriptor directly from python-ldap?

[Michael Ströder]

Robert Meany wrote:
> Is this possible?  If I try to pull ntSecurityDescriptor as an attribute
> from an AD object, I get nothing back.

You have to request 'ntSecurityDescriptor' explicitly.

>  I need to make changes to this
> attribute in order to set the 'user cannot change password' flag on our
> user accounts.

Are you sure that you don't want to tweak 'userAccountControl' on the user's
entry for that?

Ciao, Michael.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2398 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.python.org/pipermail/python-ldap/attachments/20140427/fa1e8ebd/attachment.bin>