You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

134 lines
4.4 KiB
Plaintext

9 months ago
using BP.Sys;
using System;
using System.DirectoryServices;
using System.Runtime.InteropServices; //必要引用
namespace BP.GPM.AD
{
public class Glo
{
#region 公共变量.
public static string ADBasePath
{
get
{
return BP.Difference.SystemConfig.AppSettings["ADBasePath"];
}
}
public static string ADUser
{
get
{
return BP.Difference.SystemConfig.AppSettings["ADUser"];
}
}
public static string ADPassword
{
get
{
return BP.Difference.SystemConfig.AppSettings["ADPassword"];
}
}
public static string ADPath
{
get
{
return BP.Difference.SystemConfig.AppSettings["ADPath"];
}
}
/// <summary>
/// 跟目录(主域)
/// </summary>
public static DirectoryEntry DirectoryEntryBasePath
{
get
{
DirectoryEntry domain = new DirectoryEntry();
domain.Path = Glo.ADBasePath;
domain.Username = Glo.ADUser;
domain.Password = Glo.ADPassword;
//domain.AuthenticationType = AuthenticationTypes.ReadonlyServer;
// domain.RefreshCache();
return domain;
}
}
/// <summary>
///
/// </summary>
public static DirectoryEntry DirectoryEntryAppRoot
{
get
{
DirectorySearcher search = new DirectorySearcher(Glo.DirectoryEntryBasePath); //查询组织单位.
search.Filter = "(OU=" + Glo.ADPath + ")";
search.SearchScope = SearchScope.Subtree;
SearchResult result = search.FindOne();
if (result == null)
throw new Exception("err@您配置的:ADAppRoot无效,正确的配置方法比如:chichengsoft 没有找到该节点." + Glo.ADPath);
DirectoryEntry de = result.GetDirectoryEntry();
search.Dispose();
return de;
}
}
#endregion 公共变量.
#region 相关方法.
public static string GetPropertyValue(DirectoryEntry de, string propertyName)
{
if (de.Properties.Contains(propertyName))
{
return de.Properties[propertyName][0].ToString();
}
else
{
return string.Empty;
}
}
#endregion
#region 登录校验相关.
[DllImport("advapi32.DLL", SetLastError = true)]
public static extern int LogonUser11(string lpszUsername, string lpszDomain, string lpszPassword,
int dwLogonType, int dwLogonProvider, ref IntPtr phToken);
[DllImport("advapi32.dll", CharSet = CharSet.Auto)]
private static extern int LogonUser(String lpszUserName, String lpszDomain, String lpszPassword, int dwLogonType, int dwLogonProvider,
ref IntPtr phToken);
[DllImport("advapi32.dll", CharSet = System.Runtime.InteropServices.CharSet.Auto, SetLastError = true)]
private extern static int DuplicateToken(IntPtr hToken,
int impersonationLevel,
ref IntPtr hNewToken);
private const int LOGON32_LOGON_INTERACTIVE = 2;
private const int LOGON32_PROVIDER_DEFAULT = 0;
/// <summary>
/// 执行登录
/// </summary>
/// <param name="domain"></param>
/// <param name="userNo"></param>
/// <param name="pass"></param>
public static bool CheckLogin(string domain, string userNo, string pass)
{
DirectoryEntry entry = new DirectoryEntry(BP.GPM.AD.Glo.ADBasePath, userNo, pass);
DirectorySearcher search = new DirectorySearcher(entry); //创建DirectoryEntry对象的搜索对象
search.Filter = "(SAMAccountName=" + userNo + ")"; //过滤条件为登录帐号user
SearchResult result = search.FindOne(); //查找第一个
if (null == result) //没找到
return false;
return true;
}
#endregion 登录校验相关.
}
}