通过活动目录登录

Question

我想通过 Active Directory 创建登录按钮。所以我想从他的域中获取名称登录用户（Windows）：

 string Name = System.Security.Principal.WindowsIdentity.GetCurrent().Name;

然后取上面的群进行登录：

 string Group = System.Security.Principal.WindowsIdentity.GetCurrent().Groups.ToString(); // <---I think this is wrong ? 
 string allowedGroup = "Admins";

然后像这样：

if(Name == string.Empty)
 {
    MessageBox.Show("Your Name in domain doesn't exist");
 }

if(Group.ToString() != allowedGroup)
 {
    MessageBox.Show("You don't have permissions to log in");
 }
else
 {
    MessageBox.Show("Hello");
 }

我认为我的 'getting group' 是错误的。我该怎么做？我不知道如何准确搜索分配了用户的一两个组。当用户被分配到多个组时怎么办？

Answer 1

这里重点是使用windows身份授权登录

1) 获取用户的windows身份。

2) 使用Windows 身份对象获取名称和组等其他信息。使用组名来验证用户请求。希望这会帮助你。有什么问题请在评论区留言。

System.Security.Principal.WindowsIdentity WI =  System.Security.Principal.WindowsIdentity.GetCurrent();
        string sUserName = WI.Name;
        bool bAuthorized = false;
        string allowedGroup = "Admins";
        IdentityReferenceCollection irc = WI.Groups;
        foreach (IdentityReference ir in irc)
        {
            if(ir.Translate(typeof(NTAccount)).Value == allowedGroup)
            {
                bAuthorized = true;
                break;
            }
        }
        if(string.IsNullOrEmpty(sUserName))
        {
            MessageBox.Show("Your Name in domain doesn't exist");
        }
        if(bAuthorized == false)
        {
            MessageBox.Show("You don't have permissions to log in");
        }
        else
        {
            MessageBox.Show("Hello");
        }

Answer 2

好的，我明白了。感谢 Pankaj。

    System.Security.Principal.WindowsIdentity WI = System.Security.Principal.WindowsIdentity.GetCurrent();
    string sUserName = WI.Name;
    bool bAuthorized = false;
    string allowedGroup = "Admins";
    IdentityReferenceCollection irc = WI.Groups;
    foreach (IdentityReference ir in irc)
    {
      NTAccount accInfo = (NTAccount)ir.Translate(typeof(NTAccount));

        if (accInfo.Value == allowedGroup)
        {
           bAuthorized = true;
           break;
        }
    }
    if(string.IsNullOrEmpty(sUserName))
    {
        MessageBox.Show("Your Name in domain doesn't exist");
    }
    if(bAuthorized == false)
    {
        MessageBox.Show("You don't have permissions to log in");
    }
    else
    {
        MessageBox.Show("Hello");
    }

通过活动目录登录

Log in through active directory

c#

login

active-directory