使用System.DirectoryServices.Protocols獲取用戶的專有名稱使用System.DirectoryServices.Protocols獲取用戶

Question

我有一個相當廣泛的應用程序，可以通過OID爲多個Web應用程序提供SSO。問題在於我們看到一些用戶對某個應用程序的角色「孤立」了。我已經編寫了一個方法，可以爲所有有權訪問該角色的用戶返回專有名稱。爲了執行清理，我試圖確保在上一步中返回的用戶實際上存在於OID中。在搜索用戶或角色時，我一直在使用System.DirectoryServices.Protocols.SearchRequest類，但它不適用於專有名稱。以下是我的方法。它已經改變了幾次嘗試不同的方式來使它工作。

Public Function GetUserByDN(UserDN As String) As SearchResultEntry 
     Dim searchString As String = String.Format("baseDN={0}", UserDN) 
     Dim containerDN As String = Nothing 
     If _extranet Then 
      containerDN = "cn=users," & ConfigurationManager.AppSettings("Directory_ExternalDomain") 
     Else 
      containerDN = "cn=users," & ConfigurationManager.AppSettings("Directory_InternalDomain") 
     End If 

     Dim attributes(14) As String 
     attributes(0) = DIRECTORY_UNIQUE_ID 
     attributes(1) = DIRECTORY_FIRST_NAME 
     attributes(2) = DIRECTORY_LAST_NAME 
     attributes(3) = DIRECTORY_EMAIL_ADDRESS 
     attributes(4) = DIRECTORY_TELEPHONE 
     attributes(5) = DIRECTORY_STREET 
     attributes(6) = DIRECTORY_CITY 
     attributes(7) = DIRECTORY_STATE 
     attributes(8) = DIRECTORY_ZIP 
     attributes(9) = DIRECTORY_CUSTOMER_NAME 
     attributes(10) = DIRECTORY_ENABLED 
     attributes(11) = DIRECTORY_GIVEN_NAME ' this is the first name for a domain user 
     attributes(12) = DIRECTORY_KBIT_INDICATOR 
     attributes(13) = DIRECTORY_REQUESTING_BRANCH 
     attributes(14) = DIRECTORY_PWD_MUST_CHANGE 

     'Me.Connection.Bind() 
     Me.Bind() 

     Dim myRequest As New System.DirectoryServices.Protocols.SearchRequest(containerDN, UserDN, SearchScope.Base, attributes) 
     Dim myResponse As SearchResponse = Me.Connection.SendRequest(myRequest) 
     Dim results As SearchResultEntryCollection = myResponse.Entries 

     If results.Count >= 1 Then 
      Return results(0) 
     Else 
      Return Nothing 
     End If 
    End Function 

Answer 1

它已經採取了大量的研究和問問題，在哪裏可以找到答案。事實證明，我不應該查看用戶OU並搜索用戶的DN，而應該只查看用戶的DN並僅執行簡單的LDAP查詢。這是我的最終解決方案。我希望這有助於社區。

 Public Function GetUserByDN(UserDN As String) As SearchResultEntry 
     Dim ldapFilter As String = "(objectClass=person)" 

     Dim attributes(14) As String 
     attributes(0) = DIRECTORY_UNIQUE_ID 
     attributes(1) = DIRECTORY_FIRST_NAME 
     attributes(2) = DIRECTORY_LAST_NAME 
     attributes(3) = DIRECTORY_EMAIL_ADDRESS 
     attributes(4) = DIRECTORY_TELEPHONE 
     attributes(5) = DIRECTORY_STREET 
     attributes(6) = DIRECTORY_CITY 
     attributes(7) = DIRECTORY_STATE 
     attributes(8) = DIRECTORY_ZIP 
     attributes(9) = DIRECTORY_CUSTOMER_NAME 
     attributes(10) = DIRECTORY_ENABLED 
     attributes(11) = DIRECTORY_GIVEN_NAME 
     attributes(12) = DIRECTORY_KBIT_INDICATOR 
     attributes(13) = DIRECTORY_REQUESTING_BRANCH 
     attributes(14) = DIRECTORY_PWD_MUST_CHANGE 

     Me.Bind() 

     Dim myRequest As New SearchRequest(UserDN, ldapFilter, SearchScope.Base, attributes) 
     Dim myResponse As SearchResponse = Me.Connection.SendRequest(myRequest) 

     If myResponse.Entries.Count >= 1 Then 
      Return myResponse.Entries(0) 
     Else 
      Return Nothing 
     End If 
    End Function