asp.net-web-api - 验证用户是否存在于 Asp.net web api 核心的 Active Directory 中

Question

如何检查用户是否存在于 Active Directory中。我们将 emailId 作为用户名传递给方法参数，它是 GET 方法。

我们已经编写了这个方法，但是它不能正常工作。

[HttpGet("GetADUsers")]
public List<string> GetADUsers(string userName)
{
        var domainUsers = new List<string>();
        try
        {
            string domainName = _domainSettings.Value.DomainName;
            string domainUserName = _domainSettings.Value.UserName;
            string domainPassword = _domainSettings.Value.Password;

            PrincipalContext pc = new PrincipalContext(ContextType.Domain, domainName, domainUserName, domainPassword, ContextOptions.SimpleBind.ToString());

            UserPrincipal principalUser = new UserPrincipal(pc);

            using (var search = new PrincipalSearcher(principalUser))
            {
                foreach (var user in search.FindAll().Where(x => x.DisplayName == userName))
                {
                    if (user.DisplayName != null)
                    {
                        domainUsers.Add(user.DisplayName);
                    }
                }
            }
        }
        catch (Exception ex)
        {
            ex.Message.ToString();
        }

        return domainUsers;
    }

标签： asp.net-web-apiasp.net-coreactive-directoryasp.net-core-2.0

Answer 1

创建 后PrincipalContext，您可以调用UserPrincipal.FindByIdentity()- 如果找到用户，则返回UserPrincipal- 否则为 null。

[HttpGet("GetADUsers")]
public bool ADUserExists(string userName)
{
    string domainName = _domainSettings.Value.DomainName;
    string domainUserName = _domainSettings.Value.UserName;
    string domainPassword = _domainSettings.Value.Password;

    PrincipalContext pc = new PrincipalContext(ContextType.Domain, domainName, domainUserName, domainPassword, ContextOptions.SimpleBind.ToString());

    UserPrincipal principalUser = UserPrincipal.FindByIdentity(pc, userName);

    if (principalUser != null) 
    {
         // gefunden ....            
         return true;
    }
    else
    {
         // nicht gefunden  
         return false;
    }
}