[Python] Active Directoryにグループを登録

備忘録。

#!/usr/bin/python

import ldap, ldap.modlist

ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_NEVER)
ldap.set_option(ldap.OPT_REFERRALS, 0)
conn = ldap.initialize("ldaps://adserver.example.com")
conn.bind_s("Administrator@example.com","password")

groupname="testg1"
desc="test description"
groupdn = "CN=%s,CN=Users,DC=EXAMPLE,DC=COM" % groupname
attrs = {}
attrs['objectClass'] = ['top','group']
attrs['sAMAccountName'] = groupname
attrs['cn'] = groupname
attrs['description'] = "testgroup"

ldif = ldap.modlist.addModlist(attrs)
conn.add_s(groupdn, ldif)