Ldap Zugriff auf Active directory um einen neuen Account zu erstellen mit php Script

<?
/*
Examples file

To test any of the functions, just change the 0 to a 1.
*/

//error_reporting(E_ALL ^ E_NOTICE);

include ("../adLDAP.php");  
try {
    $adldap = new adLDAP($options);
}
catch (adLDAPException $e) {
    echo $e; exit();   
}
//var_dump($ldap);

echo ("<pre>\n");  

if (1){
	$attributes=array(
		"username" = "fred",  
		"logon_name"= "freds@mydomain.local",  
		"firstname"= "Fred",  
		"surname" = $_POST["nachname"],  
		"company"= "Benni",  
		"email"= "$_POST["username"]@domain.de",  
		"container"= array("Container Parent","Container Child"),  
		"enabled"= 1,  
		"password"= "Password123",  
	);
	
  try {
    	$result=$ldap->user_create($attributes);
	    var_dump($result);
    }
        catch (adLDAPException $e) {
        echo $e;     exit();   
    }
}

?>

?php
/**
 * PHP LDAP CLASS FOR MANIPULATING ACTIVE DIRECTORY 
 * Version 3.3.2
 * 
 * PHP Version 5 with SSL and LDAP support
 * 
 * Written by Scott Barnett, Richard Hyland
 *   email: scott@wiggumworld.com, adldap@richardhyland.com
 *   http://adldap.sourceforge.net/
 * 
 * Copyright (c) 2006-2010 Scott Barnett, Richard Hyland
 * 
 * We'd appreciate any improvements or additions to be submitted back 
 * to benefit the entire community :)
 * 
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License.
 * 
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 * 
 * @category ToolsAndUtilities
 * @package adLDAP
 * @author Scott Barnett, Richard Hyland
 * @copyright (c) 2006-2010 Scott Barnett, Richard Hyland
 * @license http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html LGPLv2.1
 * @revision $Revision: 91 $
 * @version 3.3.2
 * @link http://adldap.sourceforge.net/
 */

/**
 * Define the different types of account in AD
 */
define ('ADLDAP_NORMAL_ACCOUNT', 805306368);  
define ('ADLDAP_WORKSTATION_TRUST', 805306369);  
define ('ADLDAP_INTERDOMAIN_TRUST', 805306370);  
define ('ADLDAP_SECURITY_GLOBAL_GROUP', 268435456);  
define ('ADLDAP_DISTRIBUTION_GROUP', 268435457);  
define ('ADLDAP_SECURITY_LOCAL_GROUP', 536870912);  
define ('ADLDAP_DISTRIBUTION_LOCAL_GROUP', 536870913);  
define ('ADLDAP_FOLDER', 'ldap://localhost');  
define ('ADLDAP_CONTAINER', 'Users');  

/**
* Main adLDAP class
* 
* Can be initialised using $adldap = new adLDAP();
* 
* Something to keep in mind is that Active Directory is a permissions
* based directory. If you bind as a domain user, you can't fetch as 
* much information on other users as you could as a domain admin.
* 
* Before asking questions, please read the Documentation at
* http://adldap.sourceforge.net/wiki/doku.php?id=api
*/
class adLDAP {
    /**
    * The account suffix for your domain, can be set when the class is invoked
    * 
    * @var string
    */   
	protected $_account_suffix = "@ben-server.dyndns.org";  
    
    /**
    * The base dn for your domain
    * 
    * @var string
    */
	protected $_base_dn = "DC=benni,DC=de";   
	
    /**
    * Array of domain controllers. Specifiy multiple controllers if you
    * would like the class to balance the LDAP queries amongst multiple servers
    * 
    * @var array
    */
    protected $_domain_controllers = array ("win-pxwzhli6ijn.benni.de");  
	
    /**
    * Optional account with higher privileges for searching
    * This should be set to a domain admin account
    * 
    * @var string
    * @var string
    */
	protected $_ad_username=NULL;
    protected $_ad_password=NULL;
    
    /**
    * AD does not return the primary group. http://support.microsoft.com/?kbid=321360
    * This tweak will resolve the real primary group. 
    * Setting to false will fudge "Domain Users" and is much faster. Keep in mind though that if 
    * someone's primary group is NOT domain users, this is obviously going to mess up the results 
    * 
    * @var bool
    */
	protected $_real_primarygroup=true;
	
    /**
    * Use SSL (LDAPS), your server needs to be setup, please see
    * http://adldap.sourceforge.net/wiki/doku.php?id=ldap_over_ssl
    * 
    * @var bool
    */
	protected $_use_ssl=false;
    
    /**
    * Use TLS
    * If you wish to use TLS you should ensure that $_use_ssl is set to false and vice-versa
    * 
    * @var bool
    */
    protected $_use_tls=false;
    
    /**
    * When querying group memberships, do it recursively 
    * eg. User Fred is a member of Group A, which is a member of Group B, which is a member of Group C
    * user_ingroup("Fred","C") will returns true with this option turned on, false if turned off      
    * 
    * @var bool
    */
	protected $_recursive_groups=true;
	
	// You should not need to edit anything below this line