一、 通過AccountManagement 程序集（System.DirectoryServices.AccountManagement）
acountManagement 包含有:
1. UserPrincipals
2. GroupPrincipal
3.ComputerPrincipals
4.SearchPrincipals
我們可以通過GroupPrincipals 方法拿出一組AD user
private static void AccountManagementGetUsers()
{
var principalContext = new PrincipalContext(ContextType.Domain, "192.168.1.199", "CN=Users,DC=weihu,DC=com", ContextOptions.ServerBind, "administrator", "Password");
var principals = new GroupPrincipal(principalContext);
foreach (var members in principals.Members)
{
Console.WriteLine(members.DisplayName);
}
}
二、通過 System.DirectoryServices直接獲得ADuser
在 DirectoryServices 程序中 我們可以使用DirectorySearcher方法獲得AD User.
private static void DirectoryConnection()
{
var directoryEntry = new DirectoryEntry("LDAP://192.168.1.199", "administrator", "Password2");
var filter = "(&(objectClass=user)(objectCategory=person)(mail=*)(company=Forefront Consulting Group))";
var propertiesToLoad = new[] { "sAMAccountName", "givenName", "sn", "mail", "userPrincipalName" };
var directorySearcher = new DirectorySearcher(directoryEntry, filter, propertiesToLoad);
var users = directorySearcher.FindAll().Cast<SearchResult>();
foreach (var user in users)
{
if (user.Properties.Contains("samaccountname"))
{
Console.WriteLine(user.Properties["samaccountname"][0]);
}
}
}
三、通過System.DirectoryServices.Protocols拿到AD user
private static void LdapConnection()
{
var server = "Ffazure01.cloudapp.net";
var userName = "XXX";
var passsword = "XXX";
var port = 63600;
var filter = "Ou=Users,ou=ffcg.local,dc=ffcg,dc=local";
var propertiesToLoad = new string[] { "sAMAccountName" };
try
{
//AD connection
var ldapConnection = new LdapConnection(new LdapDirectoryIdentifier(server, port));
ldapConnection.SessionOptions.SecureSocketLayer = true;
ldapConnection.SessionOptions.ProtocolVersion = 3;
ldapConnection.SessionOptions.VerifyServerCertificate = ServerCallback;
ldapConnection.Credential = new NetworkCredential(userName, passsword);
ldapConnection.AuthType = AuthType.Negotiate;
ldapConnection.Bind();
Console.WriteLine("connection success");
//GetUser
const string ldapSearchFilter = "(objectClass=*)";
var searchRequest = new SearchRequest(filter, ldapSearchFilter, SearchScope.Subtree, propertiesToLoad);
var searchResponse = (SearchResponse)ldapConnection.SendRequest(searchRequest);
if (searchResponse == null) return;
foreach (SearchResultEntry entry in searchResponse.Entries)
{
var name = GetStringAttributeValue(entry, "sAMAccountName");
Console.WriteLine(name);
}
}
catch (Exception e)
{
hrow new Exception("Connect AD server error");
}
}
private static bool ServerCallback(LdapConnection connection, X509Certificate certificate)
{
return true;
}
private static string GetStringAttributeValue(SearchResultEntry entry, string attribute)
{
try
{
var attrs = entry.Attributes;
if (!attrs.Contains(attribute)) return null;
var directoryAttribute = attrs[attribute];
var attr = directoryAttribute.GetValues(typeof(string)).First() as string ?? "";
return attr;
}
catch (Exception e)
{
throw new Exception("Could not get attribute " + attribute + "for " + entry.DistinguishedName, e);
}
}
