Question

我试图进行LDAP问询,将所有属于组织单位的用户(OU=Employees和OU=FormerEmployees,而且我没有到任何地方。

我尝试使用<条码>拆开的Name进行搜索,但这似乎只是支持野心。我知道,必须更加容易,但我的搜索努力没有产生任何结果。

Answer 1

如果你在NET3.5和新版上读取,你可以使用 PrincipalSearcher和“query-by-example”作为主人查询:

// create your domain context and define what container to search in - here OU=Employees
PrincipalContext ctx = new PrincipalContext(ContextType.Domain, "YOURDOMAIN", "OU=Employees,DC=YourCompany,DC=com");

// define a "query-by-example" principal - here, we search for a UserPrincipal 
// that is still active
UserPrincipal qbeUser = new UserPrincipal(ctx);
qbeUser.Enabled = true;

// create your principal searcher passing in the QBE principal    
PrincipalSearcher srch = new PrincipalSearcher(qbeUser);

// find all matches
foreach(var found in srch.FindAll())
{
    // do whatever here - "found" is of type "Principal" - it could be user, group, computer.....          
}

如果你有点,就绝对读到MSDN条款。《网络框架》第3.5条: 说明如何最好地利用<编码>系统>的新特征。

如果你喜欢“旧”网络2.0风格的话,你需要建立一个基底<代码>目录><>代码>,该代码与你想要在座标中列举的物体相对应,然后你需要创建“名录Searcher

// create your "base" - the OU "FormerEmployees"
DirectoryEntry formerEmployeeOU = new DirectoryEntry("LDAP://OU=FormerEmployees,DC=YourCompany,DC=com");

// create a searcher to find objects inside this container
DirectorySearcher feSearcher = new DirectorySearcher(formerEmployeeOU);

// define a standard LDAP filter for what you search for - here "users"    
feSearcher.Filter = "(objectCategory=user)";

// define the properties you want to have returned by the searcher
feSearcher.PropertiesToLoad.Add("distinguishedName");
feSearcher.PropertiesToLoad.Add("sn");
feSearcher.PropertiesToLoad.Add("givenName");
feSearcher.PropertiesToLoad.Add("mail");

// search and iterate over results
foreach (SearchResult sr in feSearcher.FindAll())
{
    // for each property, you need to check where it s present in sr.Properties
    if (sr.Properties["description"] != null && sr.Properties["description"].Count > 0)
    {
       string description = sr.Properties["description"][0].ToString();
    }
}

友情链接