如何解决使用C＃在Active Directory中获取组成员列表的快速方法
|| 在网络应用中，我们希望为属于特定组的用户显示sam帐户列表。在许多情况下，网上论坛可以拥有500个或更多的成员，我们需要页面能够响应。 拥有约500名成员的小组，需要7-8秒的时间才能获得该小组所有成员的sam帐户列表。有更快的方法吗？我知道Active Directory管理控制台可以在一秒钟内完成。 我尝试了几种方法： 1）PrincipalContext pcRoot = new PrincipalContext(ContextType.Domain)
GroupPrincipal grp = GroupPrincipal.FindByIdentity(pcRoot,\"MyGroup\");
List<string> lst = grp.Members.Select(g => g.SamAccountName).ToList();
PrincipalContext pcRoot = new PrincipalContext(ContextType.Domain)
GroupPrincipal grp = GroupPrincipal.FindByIdentity(pcRoot,\"MyGroup\");
PrincipalSearchResult<Principal> lstMembers = grp.GetMembers(true);
List<string> lst = new List<string>();
foreach (Principal member in lstMembers )
{
if (member.StructuralObjectClass.Equals(\"user\"))
{
lst.Add(member .SamAccountName);
}
}
PrincipalContext pcRoot = new PrincipalContext(ContextType.Domain)
GroupPrincipal grp = GroupPrincipal.FindByIdentity(pcRoot,\"MyGroup\");
System.DirectoryServices.DirectoryEntry de = (System.DirectoryServices.DirectoryEntry)grp.GetUnderlyingObject();
List<string> lst = new List<string>();
foreach (string sDN in de.Properties[\"member\"])
{
System.DirectoryServices.DirectoryEntry deMember = new System.DirectoryServices.DirectoryEntry(\"LDAP://\" + sDN);
lst.Add(deMember.Properties[\"samAccountName\"].Value.ToString());
}
解决方法
我的一个同事在使用各种Active Directory检索方法时，查询时间也有类似的问题。他最终将信息缓存在数据库中，并每晚刷新一次，然后访问数据库。
考虑到用户帐户不会经常更改的事实，这对他来说是一个可以接受的折衷方案。根据您的用法，这可能会接受也可能不会接受。
, 这是使用ADSI的递归搜索（嵌套组中的搜索用户）。
static void Main(string[] args)
{
/* Connection to Active Directory
*/
string sFromWhere = \"LDAP://SRVENTR2:389/dc=societe,dc=fr\";
DirectoryEntry deBase = new DirectoryEntry(sFromWhere,\"societe\\\\administrateur\",\"test.2011\");
/* To find all the users member of groups \"Grp1\" :
* Set the base to the groups container DN; for example root DN (dc=societe,dc=fr)
* Set the scope to subtree
* Use the following filter :
* (member:1.2.840.113556.1.4.1941:=CN=Grp1,OU=MonOu,DC=X)
*/
DirectorySearcher dsLookFor = new DirectorySearcher(deBase);
dsLookFor.Filter = \"(&(memberof:1.2.840.113556.1.4.1941:=CN=Grp1,DC=societe,DC=fr)(objectCategory=user))\";
dsLookFor.SearchScope = SearchScope.Subtree;
dsLookFor.PropertiesToLoad.Add(\"cn\");
dsLookFor.PropertiesToLoad.Add(\"samAccountName\");
SearchResultCollection srcUsers = dsLookFor.FindAll();
/* Just show each user
*/
foreach (SearchResult srcUser in srcUsers)
{
Console.WriteLine(\"{0}\",srcUser.Path);
Console.WriteLine(\"{0}\",srcUser.Properties[\"samAccountName\"][0]);
}
Console.ReadLine();
PrincipalContext pcRoot = new PrincipalContext(ContextType.Domain)
GroupPrincipal mygroup = new GroupPrincipal(pcRoot);
// define the principal searcher,based on that example principal
PrincipalSearcher ps = new PrincipalSearcher(mygroup);
ps.QueryFilter = new GroupPrincipal(pcRoot) { SamAccountName = \"Name of your group Case Sensitive\" };
List<UserPrincipal> users = new List<UserPrincipal>();
// loop over all principals found by the searcher
GroupPrincipal foundGroup = (GroupPrincipal)ps.FindOne();
foreach (UserPrincipal u in foundGroup.Members)
{
users.Add(u);
}
//OR
List<string> lst = foundGroup.Members.Select(g => g.SamAccountName).ToList();//this will only get the usernames not the user object or UserPrincipal
System.DirectoryServices.AccountManagement
GroupPrincipal
UserPrincipal
DirectorySearcher
DirectoryEntry
AccountManagement
GetMember()
memberOf
member
Domain Users
AccountManagement
GetMember()
DirectoryEntry
.RefreshCache()
Properties
private static List<string> GetGroupMemberList(DirectoryEntry group,bool recurse = false) {
var members = new List<string>();
group.RefreshCache(new[] { \"member\" });
while (true) {
var memberDns = group.Properties[\"member\"];
foreach (var member in memberDns) {
var memberDe = new DirectoryEntry($\"LDAP://{member}\");
memberDe.RefreshCache(new[] { \"objectClass\",\"sAMAccountName\" });
if (recurse && memberDe.Properties[\"objectClass\"].Contains(\"group\")) {
members.AddRange(GetGroupMemberList(memberDe,true));
} else {
var username = memberDe.Properties[\"sAMAccountName\"]?.Value?.ToString();
if (!string.IsNullOrEmpty(username)) { //It will be null if this is a Foreign Security Principal
members.Add(username);
}
}
}
if (memberDns.Count == 0) break;
try {
group.RefreshCache(new[] {$\"member;range={members.Count}-*\"});
} catch (COMException e) {
if (e.ErrorCode == unchecked((int) 0x80072020)) { //no more results
break;
}
throw;
}
}
return members;
}
using System;
using System.DirectoryServices;
namespace ADAM_Examples
{
class EnumMembers
{
/// <summary>
/// Enumerate AD LDS groups and group members.
/// </summary>
[STAThread]
static void Main()
{
DirectoryEntry objADAM; // Binding object.
DirectoryEntry objGroupEntry; // Group Results.
DirectorySearcher objSearchADAM; // Search object.
SearchResultCollection objSearchResults; // Results collection.
string strPath; // Binding path.
// Construct the binding string.
strPath = \"LDAP://localhost:389/OU=TestOU,O=Fabrikam,C=US\";
Console.WriteLine(\"Bind to: {0}\",strPath);
Console.WriteLine(\"Enum: Groups and members.\");
// Get the AD LDS object.
try
{
objADAM = new DirectoryEntry(strPath);
objADAM.RefreshCache();
}
catch (Exception e)
{
Console.WriteLine(\"Error: Bind failed.\");
Console.WriteLine(\" {0}\",e.Message);
return;
}
// Get search object,specify filter and scope,// perform search.
try
{
objSearchADAM = new DirectorySearcher(objADAM);
objSearchADAM.Filter = \"(&(objectClass=group))\";
objSearchADAM.SearchScope = SearchScope.Subtree;
objSearchResults = objSearchADAM.FindAll();
}
catch (Exception e)
{
Console.WriteLine(\"Error: Search failed.\");
Console.WriteLine(\" {0}\",e.Message);
return;
}
// Enumerate groups and members.
try
{
if (objSearchResults.Count != 0)
{
foreach(SearchResult objResult in objSearchResults)
{
objGroupEntry = objResult.GetDirectoryEntry();
Console.WriteLine(\"Group {0}\",objGroupEntry.Name);
foreach(object objMember
in objGroupEntry.Properties[\"member\"])
{
Console.WriteLine(\" Member: {0}\",objMember.ToString());
}
}
}
else
{
Console.WriteLine(\"Results: No groups found.\");
}
}
catch (Exception e)
{
Console.WriteLine(\"Error: Enumerate failed.\");
Console.WriteLine(\" {0}\",e.Message);
return;
}
Console.WriteLine(\"Success: Enumeration complete.\");
return;
}
}
using(PrincipalContext ctx = new PrincipalContext(ContextType.Domain))
using(GroupPrincipal group = GroupPrincipal.FindByIdentity(ctx,IdentityType.SamAccountName,\"groupName\"))
{
List<string> members = group.GetMembers(true).Select(g => g.SamAccountName).ToList();
HashSet<string> hashset = new HashSet<string>(members,StringComparer.OrdinalIgnoreCase);
if(hashset.Contains(someUser)
return true;
}
版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 dio@foxmail.com 举报，一经查实，本站将立刻删除。