class UserAccountnsRole(Account):

    def __init__(self, instance, dn=None):
        super(UserAccountnsRole, self).__init__(instance, dn)
        self._rdn_attribute = RDN
        self._create_objectclasses = [
            'top',
            'LDAPsubentry',
            'nsRoleDefinition',
            'nsComplexRoleDefinition',
            'nsFilteredRoleDefinition'
        ]
        user_compare_exclude = [
            'nsUniqueId',
            'modifyTimestamp',
            'createTimestamp',
            'entrydn'
        ]
        self._compare_exclude = self._compare_exclude + user_compare_exclude
        self._protected = False

    def _validate(self, rdn, properties, basedn):
        if 'ntUserDomainId' in properties and 'ntUser' not in self._create_objectclasses:
            self._create_objectclasses.append('ntUser')

        return super(UserAccountnsRole, self)._validate(rdn, properties, basedn)


def create_test_user_nsrole(instance, cn, nsRoleFilter, description, suffix=None):
    global test_user_id
    if cn is None:
        cn = "testuser_" + str(test_user_id)
        test_user_id += 1
    if suffix is None:
        suffix =  DEFAULT_SUFFIX
    dn = "cn=" + cn + "," + suffix
    properties = {
        'cn': cn,
        "nsRoleFilter": nsRoleFilter,
        "description": description,
    }
    user = UserAccountnsRole(instance, dn)
    user.create(properties=properties)
    return user