客户要做个LDAP验证，只需要输入一个mail地址，检查下只要这个地址存在于某个组里就通过，否则就不通过。代码如下
using System;using System.Collections.Generic;using System.Configuration;using System.DirectoryServices;namespace LdapLogin{ public partial class _Default : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { AjaxPro.Utility.RegisterTypeForAjax(typeof(_Default)); } [AjaxPro.AjaxMethod] public bool CheckLadpAccount(string path, string username, string password) { using (DirectoryEntry entry = new DirectoryEntry()) { entry.Path = path;
//该用户是一个公共用户可以用来登录，也可以改成用mail来登录 entry.Username = "orcacm"; entry.Password = "1q2w3e4r"; DirectorySearcher searcher = new DirectorySearcher(entry); searcher.Filter = "(&(objectClass=*)(mail=" + username + "))"; searcher.PropertiesToLoad.Add("mail"); searcher.PropertiesToLoad.Add("memberof"); try { SearchResult obj = searcher.FindOne(); if(obj!=null) { string[] groupsUser = GetGroupForUser(obj); string[] groupsConfig = GetGroupForConfig(); foreach (string gu in groupsUser) { foreach (string gc in groupsConfig) { if(gu.Equals(gc)) { return true; } } } } return false; } catch (Exception ex) { return false; } } }
//取web.config信息 [AjaxPro.AjaxMethod] public Dictionary<string,string> LoadConfig() { Dictionary<string,string> dictionary=new Dictionary<string, string>(); string[] strLDAP = ConfigurationManager.AppSettings["LDAP"].Split(new char[]{';'},StringSplitOptions.RemoveEmptyEntries); foreach (string s in strLDAP) { string[] strTemp = s.Split(new char[] { ',' }, StringSplitOptions.RemoveEmptyEntries); dictionary.Add(strTemp[0].Trim(), strTemp[1].Trim()); } return dictionary; }
//根据用户得到所在的组 public string[] GetGroupForUser(SearchResult obj) { string[] results = new string[obj.Properties["memberof"].Count]; for (int i = 0; i < obj.Properties["memberof"].Count; i++) { string theGroupPath = obj.Properties["memberof"][i].ToString(); results[i] = theGroupPath.Substring(3, theGroupPath.IndexOf(",") - 3); } return results; } public string[] GetGroupForConfig() { string[] results = ConfigurationManager.AppSettings["GROUP"].Split(new char[] { ';' }, StringSplitOptions.RemoveEmptyEntries); return results; } }}
UI代码如下：
<%@ Page Language="C#" AutoEventWireup="true" CodeBehind="Default.aspx.cs" Inherits="LdapLogin._Default" %><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head runat="server"> <link href="css/layout.css" rel="stylesheet" type="text/css" /> <title></title></head><script type="text/javascript"> var name, password, domain; function CheckValue() { AjaxPro.timeoutPeriod = 121000; name = document.getElementById("txtUserMail").value; domain = document.getElementById("dropServer").value; if (name == "" || name.indexOf("@") == -1) { alert("Please input correct mail"); document.getElementById("txtUserMail").focus(); return false; } return true; } function login() { if (CheckValue()) { LdapLogin._Default.CheckLadpAccount(domain, name, password, loginCallBack); } } function GetConfig() { LdapLogin._Default.LoadConfig(GetConfigCallBack); } function GetConfigCallBack(res) { if (res.value == null) return; var arrList = res.value; var dropServer = document.getElementById("dropServer").options; for (var i = 0; i < arrList.keys.length; i++) { dropServer.add(new Option(arrList.keys[i], arrList.values[i])); } } function loginCallBack(res) { if (res.value) { alert("login successfully!"); } else{ alert("login failed"); } }</script><body> <form id="form1" runat="server"> <br /><br /><br /><br /><br /><br /> <div class="lightBox"> <div class="title"> <h1>EA Domain Login</h1> </div> <br/> <table> <tr> <td>LDAP Mail:</td> <td><input type="text" id="txtUserMail" style="width:180px;height:20px" value="PXiang@contractor.ea.com"/></td> </tr> <tr> <td></td> <td> </td> </tr> <tr> <td>LDAP Server:</td> <td><select id="dropServer" style="width:184px;height:20px"></select></td> </tr> <tr> <td colspan="2"> </td> </tr> <tr> <td colspan="2" style="text-align:center"><input type="button" id="btnLogin1" value="Login" onclick="login()" style="width:140px;height:28px"></td> </tr> </table> </div> </form> <div id="maskDiv"> <div class="loadingDiv"> <img alt="loading..." src="Images/loading.gif" /><br /> <br /> <span>Loading...</span> </div> </div></body></html><script type="text/javascript"> AjaxPro.onLoading = function(b) { var divMask = document.getElementById("maskDiv"); if (b) { divMask.style.display = "block"; } else { divMask.style.display = "none"; } }; GetConfig();</script>
web.config如下：
<appSettings> <add key="LDAP" value="abc.COM,LDAP://abc.def.test.com:3268; SUZSOFT.COM,LDAP://abcsoft.com;" /> <add key="GROUP" value="#Dev Detp 5;#PhotoGroup;EA;C++ Team;Staff-SZ;Tools Development" /> </appSettings>
期间一直碰到一个错误就是：
{"Unknown error (0x80005000)"}
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at System.DirectoryServices.DirectorySearcher.FindOne()
at LdapLogin._Default.CheckLadpAccount(String path, String username, String password) in C:\Users\Administrator\Desktop\LdapLogin\LdapLogin\LdapLogin\Default.aspx.cs:line 29
网上找了一堆资料，这种错误的原因很多，最后发现是是大小写问题，在连接LDAP SERVER时，只要把小写改成大写就OK了。如下
LDAP://XXX.XXX.COM:3268, windows的AD好像是不接受小写的，其他的没测试过
来源：https://www.cnblogs.com/liugang/archive/2011/09/09/2172586.html