通过LDAP查找AD User所属的ADGroupy代码,CSharp代码库,德仔网

代码语言

代码分类

【CSharp】通过LDAP查找AD User所属的ADGroupy

作者:智瑞 / 发布于2015/10/8/ 860


	/// <summary>
	 /// 获得用户所属组的SID
	 /// </summary>
	 /// Comes From http://netwenchao.cnblogs.com
	 /// <returns></returns>
	 public static IEnumerable<string> GetGroupSidsOfUser(string userLoginName, ADOperator operater)
	 {
	 using (DirectorySearcher directorySearcher = new DirectorySearcher(
	 new DirectoryEntry(string.Format("LDAP://{0}", operater.ManageDomainName), operater.UserLogonName, operater.Password, AuthenticationTypes.Secure),
	 string.Format("(&(objectcategory=user)(samaccountname={0}))", GetUserName(userLoginName)),
	 new string[] { ADUserAttributes.SamAccountName }))
	 {
	 var result = directorySearcher.FindOne();
	 if (result != null)
	 {
	 DirectoryEntry directoryEntry = result.GetDirectoryEntry();
	 directoryEntry.RefreshCache(new string[] { ADUserAttributes.TokenGroupsGlobalAndUniversal });
	 for (int index = 0; index < directoryEntry.Properties[ADUserAttributes.TokenGroupsGlobalAndUniversal].Count; index++)
	 {
	 yield return ConvertBinarySidToString((byte[])directoryEntry.Properties[ADUserAttributes.TokenGroupsGlobalAndUniversal][index]);
	 }
	 }
	 }
	 yield break;
	 }

	 /// <summary>
	 /// 获得用户所属组的AccountName
	 /// </summary>
	 /// <param name="userLoginName"></param>
	 /// <param name="operater"></param>
	 /// Comes From http://netwenchao.cnblogs.com
	 /// <returns></returns>
	 public static IEnumerable<string> GetGroupsOfUser(string userLoginName, ADOperator operater)
	 {
	 using (DirectorySearcher directorySearcher = new DirectorySearcher(
	 new DirectoryEntry(string.Format("LDAP://{0}", operater.ManageDomainName), operater.UserLogonName, operater.Password, AuthenticationTypes.Secure),
	 "",
	 new string[] { ADUserAttributes.SamAccountName }))
	 {
	 IList<string> groups = new List<string>();
	 SearchResult sr = null;
	 var sids = GetGroupSidsOfUser(userLoginName, operater);
	 if (!sids.Any()) return null;
	 foreach (var sid in sids)
	 {
	 directorySearcher.Filter = string.Format("objectsid={0}", sid);
	 sr = directorySearcher.FindOne();
	 if (null != sr && sr.Properties[ADUserAttributes.SamAccountName].Count > 0) groups.Add(sr.Properties[ADUserAttributes.SamAccountName][0].ToString());
	 }
	 return groups;
	 }
	 }

试试其它关键字

　LDAP　　ADGroupy　

同语言下

可能有用的

智瑞贡献的其它代码(12)