Thanks for the response. The user I'm connecting as should have full access but I'll double check tomorrow.
This is the LDAP error that is returned when I leave out the OU: {'info': '00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece', 'desc': 'Operations error'} -- http://mail.python.org/mailman/listinfo/python-list