java通过ldap新增、修改、删除windowsAD域用户

Hashtable env = new Hashtable();
String adminName = "testadmin@aa.com";
String adminPassword = "sdfsd@1!";
String userName = "CN=新用户,OU=用户（测试）,DC=aa,DC=com";
env.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, adminName);
env.put(Context.SECURITY_CREDENTIALS, adminPassword);
env.put(Context.PROVIDER_URL, "ldap://192.168.10.10:389");
try {
LdapContext ctx = new InitialLdapContext(env, null);
Attributes attrs = new BasicAttributes(true);
attrs.put("objectClass", "user");
attrs.put("samAccountName", "xinyonghu");
attrs.put("cn", "xinyonghu");
attrs.put("displayName", "新用户");
attrs.put("userPrincipalName", "xinyonghu@aa.com");

        int UF_ACCOUNTDISABLE = 0x0002;
        int UF_PASSWD_NOTREQD = 0x0020;
        int UF_PASSWD_CANT_CHANGE = 0x0040;
        int UF_NORMAL_ACCOUNT = 0x0200;
        int UF_DONT_EXPIRE_PASSWD = 0x10000;
        int UF_PASSWORD_EXPIRED = 0x800000;

        attrs.put(
                "userAccountControl",
                Integer.toString(UF_NORMAL_ACCOUNT + UF_PASSWD_NOTREQD
                        + UF_PASSWORD_EXPIRED + UF_ACCOUNTDISABLE));

        Context result = ctx.createSubcontext(userName, attrs);
        为什么我创建的用户是未启用的
        ![图片说明](https://img-ask.csdn.net/upload/201511/19/1447923871_430890.png)
        如果才能创建已经开启的用户。如何给用户设置密码让新创建的用户能够登陆到ad域里？谢谢

图片没传上来，你重新编辑一下