UC = int(entry['userAccountControl'][0])
UC = UC | (1 << 1)
mod_attrs = [ (ldap.MOD_REPLACE, 'userAccountControl', str(UC))]
try:
    print dn,mod_attrs
    l.modify_s(dn, mod_attrs)
except ldap.LDAPError, e:
    print "Error disabling user %s" % e