Question

我正在获得一个间歇性特约“。在我使用<

我的守则是:

PrincipalContext ctx = new PrincipalContext(ContextType.Domain, Environment.UserDomainName); GroupPrincipal groupPrincipal = GroupPrincipal.FindByIdentity(ctx, IdentityType.Name, "Group to find");

我是例外:

Inner Exception: System.Runtime.InteropServices.COMException (0x80072020): An operations error occurred. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_AdsObject() at System.DirectoryServices.PropertyValueCollection.PopulateList() at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) at System.DirectoryServices.PropertyCollection.get_Item(String propertyName) at System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer() at System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit() at System.DirectoryServices.AccountManagement.PrincipalContext.Initialize() at System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx() at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate) at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithType(PrincipalContext context, Type principalType, IdentityType identityType, String identityValue) at System.DirectoryServices.AccountManagement.GroupPrincipal.FindByIdentity(PrincipalContext context, IdentityType identityType, String identityValue)

守则从开始。视窗服务,,2003 SP2服务器。

I have found another Stack Overflow question, Active Directory, enumerating user s groups, COM exception, suggesting that enabling Kerberos as an option in the PrincipalContext constructor will fix this problem but I am receiving a different hex code than in this question.

www.un.org/Depts/DGACM/index_spanish.htm 我的问题是:

Is this particular COM Exception definitely an authentication issue? I need to be sure that this will 100% fix the problem before releasing the software.
Is there a resource somewhere which lists all the possible COM exception hex codes so that I can help myself a bit better in the future?

Answer 1

现在,我找到另一个答案:https://stackoverflow.com/questions/1504487/unable-to-add-user-with-crmservice-api-in-dynamics-crm>。无法在CRM中增加使用Crmservice AP的用户,该数据表明0-x80072020确实是一个许可问题。我改变了服务,把我的工作放在一个领域账户,而不是地方系统账户,这似乎解决了我的问题。

Answer 2

经常出现的问题是,主动征求书的背景是,用户没有许可(也可在伙伴关系中<条码>识别公义=“真实性”。 NET,因为用户被打成的是一种“次要星号”,在认证另一个服务器时无法使用:

The following code will ensure that the block of code your are running, is run under the context of say the AppPool (i.e. NETWORKSERVICE) that your service or site is running under.

using (HostingEnvironment.Impersonate())
{
   var domainContext = new PrincipalContext(ContextType.Domain, "myDomain.com");
   var groupPrincipal = GroupPrincipal.FindByIdentity(domainContext, IdentityType.Name, "PowerUsers");
   if (groupPrincipal != null)
   {
      //code to get the infomation
   }

}

然而,一个超级细节是,所有称为“积极名录”的代码必须放在这一组。我曾使用过一些代码,一位地雷问题小组成员写道,正在返回。类型<代码>Users的查询结果(海关类别),但不评价表述(惯例)。因此,树苗被退回,而不是结果。

最终出现的情况是,电话法最终评估了结果和<代码>。运行错误出现在的电文上。尽管上述法典做了一些工作。事实上,在进行这项工作时,有一部法律对框架之外的成果进行评价。

简而言之,确保all代码进入主动名录,该编码在using栏内,例外情况应当确定服务/应用在服务器上。

Answer 3

两年后,我同意这一点,认为以下问题已经解决:

using System.Web.Hosting;
...
...
// Code here runs as the logged on user

using (HostingEnvironment.Impersonate()) {
// This code runs as the application pool user
     DirectorySearcher searcher ...
}

参引

3rd party

Hosting Environment.Impersonate Solutions/a> 可在Net 4.8上查阅。但从一开始。 NET Core 1.0

The requested page is not available for .NET Core 1.0. You have been redirected to the newest product version this page is available for.

Answer 4

我在协会中就发生了这种情况。 NET(Windows 2008 R2 /IIS7),我用网络对这个错误进行敲响。其根本原因是,应用程序库作为DefaultAppPool运行,一旦我改名为网络服务,它就开始再次工作。我不理解为什么会发生改变,但这样做。

Answer 5

I had the same problem. I got success after changing the application pool as below: Process model load user profile = true

Answer 6

在我的案件中,网络后备库是“DefaultAppPool”,无法与公司积极名录连接。因此,我只字不提一个我手法中可以诉诸反倾销的账户,所有东西都做了罚款。

Answer 7

如果你出现错误代码, 发生故障(0x80072020)”,则可能意味着“被拒”。

Check your Web server whether or not in AD Domain
- If not you have to put authentication into PrincipalContext.

Example (Something like this):

public bool foo(String username, String password) {
    string ADIPaddress = "[ipaddress]";
    ContextOptions options = ContextOptions.Negotiate;
    PrincipalContext principalContext = new PrincipalContext(ContextType.Domain, AD_IPaddress, null, options, username, password);
    bool isAuthenticated = principalContext.ValidateCredentials(username, password, options);
    return isAuthenticated;
}

Reference

C#網頁登入AD網域進行LDAP驗證

Answer 8

对我来说,我也遇到了同样的问题,即试图向一名域名控制员登记,我有2名域名控制员,其中1名正在工作,而另一人正在工作,我认为,这与用户形象有关,仍在调查......。

3rd party

友情链接