You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
537 lines
17 KiB
Plaintext
537 lines
17 KiB
Plaintext
11 months ago
|
using System;
|
||
|
|
using System.Collections.Generic;
|
||
|
|
using System.DirectoryServices;
|
||
|
|
using BP.Port;
|
||
|
|
using BP.DA;
|
||
|
|
using BP.En;
|
||
|
|
using BP.Sys;
|
||
|
|
|
||
|
|
namespace BP.GPM.AD
|
||
|
|
{
|
||
|
|
/// <summary>
|
||
|
|
/// 同步AD.
|
||
|
|
/// </summary>
|
||
|
|
public class Sync : Method
|
||
|
|
{
|
||
|
|
/// <summary>
|
||
|
|
/// 同步
|
||
|
|
/// </summary>
|
||
|
|
public Sync()
|
||
|
|
{
|
||
|
|
this.Title = "同步AD数据到组织结构.";
|
||
|
|
this.Help = "手工同步数据到组织结构。";
|
||
|
|
}
|
||
|
|
public override void Init()
|
||
|
|
{
|
||
|
|
}
|
||
|
|
/// <summary>
|
||
|
|
/// 是否可以处理？
|
||
|
|
/// </summary>
|
||
|
|
public override bool IsCanDo
|
||
|
|
{
|
||
|
|
get
|
||
|
|
{
|
||
|
|
if (BP.Web.WebUser.No.Equals("admin"))
|
||
|
|
return true;
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
#region## 同步
|
||
|
|
private List<AdModel> list = new List<AdModel>();
|
||
|
|
|
||
|
|
private DirectoryEntry _DirectoryEntry = null;
|
||
|
|
public DirectoryEntry DirectoryEntrBasePath
|
||
|
|
{
|
||
|
|
get
|
||
|
|
{
|
||
|
|
if (_DirectoryEntry == null)
|
||
|
|
_DirectoryEntry = new DirectoryEntry(Glo.ADBasePath, Glo.ADUser, Glo.ADPassword);
|
||
|
|
return _DirectoryEntry;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
string rootPath = "";
|
||
|
|
|
||
|
|
string msg = "";
|
||
|
|
/// <summary>
|
||
|
|
/// 功能:
|
||
|
|
/// </summary>
|
||
|
|
/// <param name="entryOU"></param>
|
||
|
|
public override object Do()
|
||
|
|
{
|
||
|
|
//同步并获取根目录.
|
||
|
|
SyncDeptRoot();
|
||
|
|
|
||
|
|
//同步所有的部门.
|
||
|
|
SyncDept(Glo.DirectoryEntryAppRoot); //同步跟目录 PartentNo=0;
|
||
|
|
|
||
|
|
//同步所有的人员.
|
||
|
|
SyncEmps();
|
||
|
|
|
||
|
|
//同步岗位.
|
||
|
|
SyncStatioins();
|
||
|
|
return "执行成功.";
|
||
|
|
}
|
||
|
|
/// <summary>
|
||
|
|
/// 同步根目录
|
||
|
|
/// </summary>
|
||
|
|
/// <param name="root"></param>
|
||
|
|
public void SyncDept(DirectoryEntry root)
|
||
|
|
{
|
||
|
|
DirectorySearcher search = new DirectorySearcher(root); //查询组织单位.
|
||
|
|
search.Filter = "(objectclass=organizationalUnit)";
|
||
|
|
search.SearchScope = SearchScope.Subtree;
|
||
|
|
SearchResultCollection results = search.FindAll();
|
||
|
|
|
||
|
|
foreach (SearchResult result in results)
|
||
|
|
{
|
||
|
|
DirectoryEntry entry = result.GetDirectoryEntry();
|
||
|
|
|
||
|
|
string name = entry.Name.Replace("OU=", "");
|
||
|
|
if (Glo.ADPath.Contains("=" + name + ",") == true)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
BP.GPM.AD.Dept dept = new Dept();
|
||
|
|
dept.Name = name;
|
||
|
|
dept.No = entry.Guid.ToString();
|
||
|
|
dept.NameOfPath = entry.Path;
|
||
|
|
if (dept.IsExits == true)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
dept.ParentNo = entry.Parent.Guid.ToString();
|
||
|
|
dept.Idx = idxDept++;
|
||
|
|
dept.Insert();
|
||
|
|
}
|
||
|
|
search.Dispose();
|
||
|
|
}
|
||
|
|
public void SyncDeptRoot()
|
||
|
|
{
|
||
|
|
//删除现有的数据.
|
||
|
|
DBAccess.RunSQL("DELETE FROM Port_Dept");
|
||
|
|
|
||
|
|
DirectoryEntry rootDE = Glo.DirectoryEntryAppRoot;
|
||
|
|
|
||
|
|
BP.GPM.AD.Dept dept = new Dept();
|
||
|
|
dept.Name = rootDE.Name.Replace("OU=", "");
|
||
|
|
dept.No = rootDE.Guid.ToString();
|
||
|
|
dept.ParentNo = "0";
|
||
|
|
dept.Idx = idxDept++;
|
||
|
|
dept.NameOfPath = rootDE.Path;
|
||
|
|
dept.Insert();
|
||
|
|
this.rootPath = rootDE.Path;
|
||
|
|
}
|
||
|
|
public void SyncDeptRoot_del()
|
||
|
|
{
|
||
|
|
//删除现有的数据.
|
||
|
|
DBAccess.RunSQL("DELETE FROM Port_Dept");
|
||
|
|
|
||
|
|
//DirectorySearcher search = new DirectorySearcher(Glo.RootDirectoryEntry); //查询组织单位.
|
||
|
|
//search.Filter = "(OU=" + Glo.ADRoot + ")";
|
||
|
|
//search.SearchScope = SearchScope.Subtree;
|
||
|
|
//SearchResult result = search.FindOne();
|
||
|
|
// rootDE = result.GetDirectoryEntry();
|
||
|
|
// BP.GPM.AD.Dept dept = new Dept();
|
||
|
|
// dept.Name = rootDE.Name.Replace("OU=", "");
|
||
|
|
// dept.No = rootDE.Guid.ToString();
|
||
|
|
// dept.ParentNo = "0";
|
||
|
|
// dept.Idx = idxDept++;
|
||
|
|
// dept.Insert();
|
||
|
|
// this.rootPath = rootDE.Path;
|
||
|
|
//search.Dispose();
|
||
|
|
}
|
||
|
|
string err = "";
|
||
|
|
#endregion
|
||
|
|
|
||
|
|
/// <summary>
|
||
|
|
/// 同步人员
|
||
|
|
/// </summary>
|
||
|
|
public void SyncEmps()
|
||
|
|
{
|
||
|
|
DBAccess.RunSQL("DELETE FROM Port_Emp");
|
||
|
|
|
||
|
|
Depts depts = new Depts();
|
||
|
|
depts.RetrieveAll();
|
||
|
|
|
||
|
|
foreach (Dept mydept in depts)
|
||
|
|
{
|
||
|
|
|
||
|
|
DirectoryEntry deptDE = new DirectoryEntry(mydept.NameOfPath, Glo.ADUser, Glo.ADPassword);
|
||
|
|
|
||
|
|
DirectorySearcher ds = new DirectorySearcher(deptDE);
|
||
|
|
ds.SearchScope = SearchScope.OneLevel; //搜索当前..
|
||
|
|
ds.Filter = "(objectClass=user)";
|
||
|
|
|
||
|
|
SearchResultCollection rss = ds.FindAll();
|
||
|
|
DBAccess.RunSQL("DELETE FROM Port_Emp WHERE FK_Dept='" + mydept.No + "'");
|
||
|
|
if (rss.Count == 0)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
BP.GPM.AD.Emp emp = new Emp();
|
||
|
|
|
||
|
|
foreach (SearchResult result in rss)
|
||
|
|
{
|
||
|
|
DirectoryEntry entity = result.GetDirectoryEntry();
|
||
|
|
if (entity.Name.Contains("CN=") == false)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
string name = entity.Name.Replace("CN=", "");
|
||
|
|
|
||
|
|
//判断是 group 还是 user.
|
||
|
|
// emp.No = name;// this.GetValFromDirectoryEntryByKey(entry, "samaccountname");
|
||
|
|
//emp.c = name;// this.GetValFromDirectoryEntryByKey(entry, "cn");
|
||
|
|
|
||
|
|
emp.No = this.GetValFromDirectoryEntryByKey(entity, "sAMAccountName");
|
||
|
|
emp.Name = this.GetValFromDirectoryEntryByKey(entity, "displayName");
|
||
|
|
|
||
|
|
emp.SetValByKey("Manager", this.GetValFromDirectoryEntryByKey(entity, "Manager"));
|
||
|
|
emp.SetValByKey("mobile", this.GetValFromDirectoryEntryByKey(entity, "mobile"));
|
||
|
|
|
||
|
|
if (emp.IsExits == true)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
emp.FK_Dept = mydept.No; // entity.Parent.Guid.ToString();
|
||
|
|
if (emp.No.Length > 20)
|
||
|
|
continue;
|
||
|
|
|
||
|
|
emp.Idx = idxEmp++;
|
||
|
|
emp.Insert();
|
||
|
|
}
|
||
|
|
//断开.
|
||
|
|
ds.Dispose();
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
//增加 admin
|
||
|
|
BP.GPM.AD.Dept dept = new Dept();
|
||
|
|
dept.Retrieve(BP.GPM.AD.DeptAttr.ParentNo, "0");
|
||
|
|
|
||
|
|
BP.GPM.AD.Emp empAdmin = new Emp();
|
||
|
|
empAdmin.No = "admin";
|
||
|
|
empAdmin.Name = "admin";
|
||
|
|
if (empAdmin.RetrieveFromDBSources() == 0)
|
||
|
|
{
|
||
|
|
empAdmin.FK_Dept = dept.No;
|
||
|
|
empAdmin.Insert();
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
empAdmin.FK_Dept = dept.No;
|
||
|
|
empAdmin.Update();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
/// <summary>
|
||
|
|
/// 同步岗位
|
||
|
|
/// </summary>
|
||
|
|
public void SyncStatioins()
|
||
|
|
{
|
||
|
|
DirectorySearcher ds = new DirectorySearcher();
|
||
|
|
ds.SearchRoot = Glo.DirectoryEntryAppRoot;
|
||
|
|
|
||
|
|
ds.SearchScope = SearchScope.Subtree; //搜索全部对象.
|
||
|
|
ds.Filter = ("(objectClass=group)");
|
||
|
|
|
||
|
|
//ds.Filter = "(&(objectClass=group)(cn=" + "YBS" + "))"; //YBS组名
|
||
|
|
//ds.Filter = ("(objectCategory=YBS)(objectClass=user)") ;
|
||
|
|
//. Find("ybs", "Group")) ;
|
||
|
|
|
||
|
|
DBAccess.RunSQL("DELETE FROM Port_Station ");
|
||
|
|
DBAccess.RunSQL("DELETE FROM Port_DeptEmpStation ");
|
||
|
|
|
||
|
|
Station sta = new Station();
|
||
|
|
BP.GPM.DeptEmpStation des = new DeptEmpStation();
|
||
|
|
|
||
|
|
foreach (SearchResult result in ds.FindAll())
|
||
|
|
{
|
||
|
|
DirectoryEntry deGroup = result.GetDirectoryEntry(); // new DirectoryEntry(result.Path, Glo.ADUser, Glo.ADPassword, AuthenticationTypes.Secure);
|
||
|
|
|
||
|
|
sta.No = deGroup.Guid.ToString();
|
||
|
|
|
||
|
|
string name = deGroup.Name;
|
||
|
|
name = name.Replace("CN=", "");
|
||
|
|
sta.Name = name;
|
||
|
|
sta.FK_StationType = "01";
|
||
|
|
sta.DirectInsert();
|
||
|
|
|
||
|
|
System.DirectoryServices.PropertyCollection pcoll = deGroup.Properties;
|
||
|
|
int n = pcoll["member"].Count;
|
||
|
|
for (int l = 0; l < n; l++)
|
||
|
|
{
|
||
|
|
try
|
||
|
|
{
|
||
|
|
DirectoryEntry deUser = new DirectoryEntry(Glo.ADBasePath + "/" + pcoll["member"][l].ToString(),
|
||
|
|
Glo.ADUser, Glo.ADPassword);
|
||
|
|
des.FK_Dept = deUser.Parent.Guid.ToString();
|
||
|
|
des.FK_Station = deGroup.Guid.ToString(); // result.GetDirectoryEntry()
|
||
|
|
des.FK_Emp = this.GetValFromDirectoryEntryByKey(deUser, "sAMAccountName");
|
||
|
|
if (des.FK_Emp.Length > 20)
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
catch (Exception ex)
|
||
|
|
{
|
||
|
|
err += "err@SyncStatioins 错误:" + ex.Message;
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
des.Insert();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
//岗位类型.
|
||
|
|
StationTypes typs = new StationTypes();
|
||
|
|
typs.RetrieveAll();
|
||
|
|
if (typs.Count == 0)
|
||
|
|
{
|
||
|
|
StationType st = new StationType();
|
||
|
|
st.Name = "未分组";
|
||
|
|
st.No = "01";
|
||
|
|
st.Insert();
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
/// <summary>
|
||
|
|
/// 获得属性
|
||
|
|
/// </summary>
|
||
|
|
/// <param name="oDE"></param>
|
||
|
|
/// <param name="PropertyName"></param>
|
||
|
|
/// <returns></returns>
|
||
|
|
public string GetProperty(DirectoryEntry oDE, string PropertyName)
|
||
|
|
{
|
||
|
|
try
|
||
|
|
{
|
||
|
|
if (oDE.Properties.Contains(PropertyName))
|
||
|
|
{
|
||
|
|
return oDE.Properties[PropertyName][0].ToString();
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
return string.Empty;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
catch (Exception ee)
|
||
|
|
{
|
||
|
|
throw ee;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public string GetValFromDirectoryEntryByKey(DirectoryEntry en, string key, string isNullAsVal = "")
|
||
|
|
{
|
||
|
|
if (en.Properties.Contains(key) == false)
|
||
|
|
return isNullAsVal;
|
||
|
|
|
||
|
|
PropertyValueCollection valueCollection = en.Properties[key];
|
||
|
|
|
||
|
|
if (valueCollection.Value == null)
|
||
|
|
return isNullAsVal;
|
||
|
|
|
||
|
|
return valueCollection.Value.ToString();
|
||
|
|
}
|
||
|
|
|
||
|
|
#region## 同步根组织单位
|
||
|
|
string rootDeptNo = "";
|
||
|
|
int idxDept = 0;
|
||
|
|
int idxStation = 0;
|
||
|
|
int idxEmp = 0;
|
||
|
|
/// <summary>
|
||
|
|
/// 功能: 同步根组织单位
|
||
|
|
/// 创建人:Wilson
|
||
|
|
/// 创建时间:2012-12-15
|
||
|
|
/// </summary>
|
||
|
|
/// <param name="entry"></param>
|
||
|
|
private void SyncRootOU(DirectoryEntry entry)
|
||
|
|
{
|
||
|
|
msg += "<hr>开始同步:" + entry.Name;
|
||
|
|
|
||
|
|
string myInfo = "";
|
||
|
|
//foreach (string elmentName in entry.Properties.PropertyNames)
|
||
|
|
//{
|
||
|
|
// PropertyValueCollection valueCollection = entry.Properties[elmentName];
|
||
|
|
// myInfo += "<br>KEY=" + elmentName + ", " + valueCollection.Value; // +valueCollection[i].ToString();
|
||
|
|
//}
|
||
|
|
msg += " 属性：" + myInfo;
|
||
|
|
|
||
|
|
//更目录.
|
||
|
|
if (entry.Name.IndexOf("DC=") == 0)
|
||
|
|
{
|
||
|
|
BP.GPM.AD.Dept dept = new Dept();
|
||
|
|
dept.No = entry.Guid.ToString();
|
||
|
|
dept.Name = BP.Difference.SystemConfig.CustomerShortName;
|
||
|
|
if (dept.Name == "")
|
||
|
|
dept.Name = BP.Difference.SystemConfig.CustomerName;
|
||
|
|
|
||
|
|
if (dept.Name == "")
|
||
|
|
dept.Name = "总部";
|
||
|
|
|
||
|
|
dept.ParentNo = "0";
|
||
|
|
if (dept.IsExits == true)
|
||
|
|
return;
|
||
|
|
|
||
|
|
dept.Idx = idxDept++;
|
||
|
|
dept.Insert();
|
||
|
|
|
||
|
|
foreach (DirectoryEntry item in entry.Children)
|
||
|
|
{
|
||
|
|
SyncRootOU(item);
|
||
|
|
}
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
//组织结构,更新跟目录的.
|
||
|
|
if (entry.Name.IndexOf("OU=") == 0)
|
||
|
|
{
|
||
|
|
|
||
|
|
BP.GPM.AD.Dept dept = new Dept
|
||
|
|
{
|
||
|
|
Name = entry.Name.Replace("OU=", ""),
|
||
|
|
No = entry.Guid.ToString(),
|
||
|
|
ParentNo = entry.Parent.Guid.ToString(),
|
||
|
|
Idx = idxDept++
|
||
|
|
};
|
||
|
|
dept.Insert();
|
||
|
|
|
||
|
|
foreach (DirectoryEntry item in entry.Children)
|
||
|
|
{
|
||
|
|
SyncRootOU(item);
|
||
|
|
}
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
//用户.
|
||
|
|
if (entry.Name.IndexOf("CN=") == 0)
|
||
|
|
{
|
||
|
|
string name = entry.Name.Replace("CN=", "");
|
||
|
|
string objectCategory = this.GetValFromDirectoryEntryByKey(entry, "objectCategory");
|
||
|
|
|
||
|
|
if (objectCategory.Contains("CN=Group") == true)
|
||
|
|
{
|
||
|
|
|
||
|
|
//判断是 group 还是 user.
|
||
|
|
BP.Port.Station station = new BP.Port.Station();
|
||
|
|
// emp.No = name;// this.GetValFromDirectoryEntryByKey(entry, "samaccountname");
|
||
|
|
station.No = entry.Guid.ToString();
|
||
|
|
station.Name = name;// this.GetValFromDirectoryEntryByKey(entry, "cn");
|
||
|
|
// station.Idx = idxStation++;
|
||
|
|
station.Insert();
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
//判断是 group 还是 user.
|
||
|
|
BP.GPM.AD.Emp emp = new Emp();
|
||
|
|
// emp.No = name;// this.GetValFromDirectoryEntryByKey(entry, "samaccountname");
|
||
|
|
emp.No = name;// this.GetValFromDirectoryEntryByKey(entry, "cn");
|
||
|
|
emp.Name = this.GetValFromDirectoryEntryByKey(entry, "displayName");
|
||
|
|
|
||
|
|
if (emp.IsExits == true)
|
||
|
|
return;
|
||
|
|
|
||
|
|
emp.FK_Dept = entry.Parent.Guid.ToString();
|
||
|
|
|
||
|
|
if (emp.No.Length > 20)
|
||
|
|
return;
|
||
|
|
|
||
|
|
emp.Idx = idxEmp++;
|
||
|
|
emp.Insert();
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public void SyncRootOU(DirectoryEntry en, string parentEn)
|
||
|
|
{
|
||
|
|
|
||
|
|
}
|
||
|
|
#endregion
|
||
|
|
|
||
|
|
#region## 同步下属组织单位及下属用户
|
||
|
|
/// <summary>
|
||
|
|
/// 功能: 同步下属组织单位及下属用户
|
||
|
|
/// 创建人:Wilson
|
||
|
|
/// 创建时间:2012-12-15
|
||
|
|
/// </summary>
|
||
|
|
/// <param name="entry"></param>
|
||
|
|
/// <param name="parentId"></param>
|
||
|
|
private void SyncSubOU(DirectoryEntry entry, string parentId)
|
||
|
|
{
|
||
|
|
foreach (DirectoryEntry subEntry in entry.Children)
|
||
|
|
{
|
||
|
|
string entrySchemaClsName = subEntry.SchemaClassName;
|
||
|
|
|
||
|
|
string[] arr = subEntry.Name.Split('=');
|
||
|
|
string categoryStr = arr[0];
|
||
|
|
string nameStr = arr[1];
|
||
|
|
string id = string.Empty;
|
||
|
|
|
||
|
|
if (subEntry.Properties.Contains("objectGUID")) //SID
|
||
|
|
{
|
||
|
|
byte[] bGUID = subEntry.Properties["objectGUID"][0] as byte[];
|
||
|
|
|
||
|
|
id = BitConverter.ToString(bGUID);
|
||
|
|
}
|
||
|
|
|
||
|
|
bool isExist = list.Exists(d => d.Id == id);
|
||
|
|
|
||
|
|
switch (entrySchemaClsName)
|
||
|
|
{
|
||
|
|
case "organizationalUnit":
|
||
|
|
|
||
|
|
if (!isExist)
|
||
|
|
{
|
||
|
|
list.Add(new AdModel(id, nameStr, (int)TypeEnum.OU, parentId));
|
||
|
|
}
|
||
|
|
|
||
|
|
SyncSubOU(subEntry, id);
|
||
|
|
break;
|
||
|
|
case "user":
|
||
|
|
string accountName = string.Empty;
|
||
|
|
|
||
|
|
if (subEntry.Properties.Contains("samaccountName"))
|
||
|
|
{
|
||
|
|
accountName = subEntry.Properties["samaccountName"][0].ToString();
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!isExist)
|
||
|
|
{
|
||
|
|
list.Add(new AdModel(id, accountName, (int)TypeEnum.USER, parentId));
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#endregion
|
||
|
|
}
|
||
|
|
/// <summary>
|
||
|
|
/// 类型
|
||
|
|
/// </summary>
|
||
|
|
public enum TypeEnum
|
||
|
|
{
|
||
|
|
/// <summary>
|
||
|
|
/// 组织单位
|
||
|
|
/// </summary>
|
||
|
|
OU = 1,
|
||
|
|
/// <summary>
|
||
|
|
/// 用户
|
||
|
|
/// </summary>
|
||
|
|
USER = 2
|
||
|
|
}
|
||
|
|
/// <summary>
|
||
|
|
/// Ad域信息实体
|
||
|
|
/// </summary>
|
||
|
|
public class AdModel
|
||
|
|
{
|
||
|
|
public AdModel(string id, string name, int typeId, string parentId)
|
||
|
|
{
|
||
|
|
Id = id;
|
||
|
|
Name = name;
|
||
|
|
TypeId = typeId;
|
||
|
|
ParentId = parentId;
|
||
|
|
}
|
||
|
|
|
||
|
|
public string Id { get; set; }
|
||
|
|
|
||
|
|
public string Name { get; set; }
|
||
|
|
|
||
|
|
public int TypeId { get; set; }
|
||
|
|
|
||
|
|
public string ParentId { get; set; }
|
||
|
|
}
|
||
|
|
}
|