AD域对接域服务器做WEB登录认证碰到的问题，验证自己的AD可以，验证别人的就报错。

qq_15061021 2018-03-13 04:52:37

static void Main(string[] args)
{
// string strLDAPFilter = string.Format(txtFilter.Text, txtUserName.Text.Trim());
//deSearch.Filter = "(&(objectClass=user)(sAMAccountName=" + username + "))";

string TestUserID = "qimin";//"liuhao05";
string TestUserPwd = "SJQsjq301301";
string strLDAPFilter = String.Format("samAccountName={0}", TestUserID);
LDAPHelper objldap = new LDAPHelper();
string strLDAPPath = "LDAP://（域服务器IP）:389";
string strLDAPAdminName = "oa";
string strLDAPAdminPwd = "WSXwsx2018!";
string strMsg = "";
bool blRet = objldap.OpenConnection(strLDAPPath, strLDAPAdminName, strLDAPAdminPwd);

if (blRet)
{
blRet = objldap.CheckUidAndPwd(strLDAPFilter, TestUserID, TestUserPwd, ref strMsg);
if (blRet)
{
strMsg = "检测用户名" + TestUserID + "和密码" + TestUserPwd + "成功";
}
else if (!blRet && string.IsNullOrEmpty(strMsg))
{
strMsg = "检测用户名" + TestUserID + "和密码" + TestUserPwd + "失败";
}
}
}

帮助类
public class LDAPHelper
{
private DirectoryEntry _objDirectoryEntry;

/// <summary>
/// 构造函数
/// </summary>
/// <param name="LADPath">ldap的地址，例如"LDAP://***.***.48.110:389/dc=***,dc=com"</param>
/// <param name="authUserName">连接用户名，例如"cn=root,dc=***,dc=com"</param>
/// <param name="authPWD">连接密码</param>
public bool OpenConnection(string LADPath, string authUserName, string authPWD)
{ //创建一个连接
_objDirectoryEntry = new DirectoryEntry(LADPath, authUserName, authPWD, AuthenticationTypes.None);

if (null == _objDirectoryEntry)
{
return false;
}
else if (_objDirectoryEntry.Properties != null && _objDirectoryEntry.Properties.Count > 0)
{
return true;
}
return false;
}

/// <summary>
/// 检测一个用户和密码是否正确
/// </summary>
/// <param name="strLDAPFilter">(|(uid= {0})(cn={0}))</param>
/// <param name="TestUserID">testuserid</param>
/// <param name="TestUserPwd">testuserpassword</param>
/// <param name="ErrorMessage"></param>
/// <returns></returns>
public bool CheckUidAndPwd(string strLDAPFilter, string TestUserID, string TestUserPwd, ref string ErrorMessage)
{
bool blRet = false;
try
{
//创建一个检索
DirectorySearcher deSearch = new DirectorySearcher(_objDirectoryEntry);
//过滤名称是否存在
deSearch.Filter = strLDAPFilter;
deSearch.SearchScope = SearchScope.Subtree;

//find the first instance
SearchResult objSearResult = deSearch.FindOne();

//如果用户密码为空
if (string.IsNullOrEmpty(TestUserPwd))
{
if (null != objSearResult && null != objSearResult.Properties && objSearResult.Properties.Count > 0)
{
blRet = true;
}
}
else if (null != objSearResult && !string.IsNullOrEmpty(objSearResult.Path))
{
//获取用户名路径对应的用户uid
int pos = objSearResult.Path.LastIndexOf('/');
string uid = objSearResult.Path.Remove(0, pos + 1);
DirectoryEntry objUserEntry = new DirectoryEntry(objSearResult.Path, TestUserID, TestUserPwd, AuthenticationTypes.Secure);

if (null != objUserEntry && objUserEntry.Properties.Count > 0)
{
blRet = true;
}
}
}
catch (Exception ex)
{
if (null != _objDirectoryEntry)
{
_objDirectoryEntry.Close();
}
ErrorMessage = "检测异常：" + ex.StackTrace;
}
return blRet;
}

/// <summary>
/// 关闭连接
/// </summary>
public void closeConnection()
{
if (null != _objDirectoryEntry)
{
_objDirectoryEntry.Close();
}
}
}