using BP.Sys;
using System;
using System.DirectoryServices;
using System.Runtime.InteropServices;   //必要引用


namespace BP.GPM.AD
{
    public class Glo
    {
        #region 公共变量.
        public static string ADBasePath
        {
            get
            {
                return BP.Difference.SystemConfig.AppSettings["ADBasePath"];
            }
        }
        public static string ADUser
        {
            get
            {
                return BP.Difference.SystemConfig.AppSettings["ADUser"];
            }
        }
        public static string ADPassword
        {
            get
            {
                return BP.Difference.SystemConfig.AppSettings["ADPassword"];
            }
        }
        public static string ADPath
        {
            get
            {
                return BP.Difference.SystemConfig.AppSettings["ADPath"];
            }
        }
        /// <summary>
        /// 跟目录(主域)
        /// </summary>
        public static DirectoryEntry DirectoryEntryBasePath
        {
            get
            {
                DirectoryEntry domain = new DirectoryEntry();

                domain.Path = Glo.ADBasePath;
                domain.Username = Glo.ADUser;
                domain.Password = Glo.ADPassword;

                //domain.AuthenticationType = AuthenticationTypes.ReadonlyServer;

                // domain.RefreshCache();
                return domain;

            }
        }
        /// <summary>
        /// 
        /// </summary>
        public static DirectoryEntry DirectoryEntryAppRoot
        {
            get
            {
                DirectorySearcher search = new DirectorySearcher(Glo.DirectoryEntryBasePath); //查询组织单位.
                search.Filter = "(OU=" + Glo.ADPath + ")";
                search.SearchScope = SearchScope.Subtree;

                SearchResult result = search.FindOne();
                if (result == null)
                    throw new Exception("err@您配置的:ADAppRoot无效,正确的配置方法比如:chichengsoft 没有找到该节点." + Glo.ADPath);
                DirectoryEntry de = result.GetDirectoryEntry();
                search.Dispose();

                return de;
            }
        }
        #endregion 公共变量.

        #region 相关方法.

        public static string GetPropertyValue(DirectoryEntry de, string propertyName)
        {
            if (de.Properties.Contains(propertyName))
            {
                return de.Properties[propertyName][0].ToString();
            }
            else
            {
                return string.Empty;
            }
        }
        #endregion

        #region 登录校验相关.
        [DllImport("advapi32.DLL", SetLastError = true)]
        public static extern int LogonUser11(string lpszUsername, string lpszDomain, string lpszPassword,
            int dwLogonType, int dwLogonProvider, ref IntPtr phToken);


        [DllImport("advapi32.dll", CharSet = CharSet.Auto)]
        private static extern int LogonUser(String lpszUserName, String lpszDomain, String lpszPassword, int dwLogonType, int dwLogonProvider,
                                          ref IntPtr phToken);
        [DllImport("advapi32.dll", CharSet = System.Runtime.InteropServices.CharSet.Auto, SetLastError = true)]
        private extern static int DuplicateToken(IntPtr hToken,
                                          int impersonationLevel,
                                          ref IntPtr hNewToken);
        private const int LOGON32_LOGON_INTERACTIVE = 2;
        private const int LOGON32_PROVIDER_DEFAULT = 0;
        /// <summary>
        /// 执行登录
        /// </summary>
        /// <param name="domain"></param>
        /// <param name="userNo"></param>
        /// <param name="pass"></param>
        public static bool CheckLogin(string domain, string userNo, string pass)
        {

            DirectoryEntry entry = new DirectoryEntry(BP.GPM.AD.Glo.ADBasePath, userNo, pass);
            DirectorySearcher search = new DirectorySearcher(entry); //创建DirectoryEntry对象的搜索对象
            search.Filter = "(SAMAccountName=" + userNo + ")";  //过滤条件为登录帐号＝user
            SearchResult result = search.FindOne(); //查找第一个
            if (null == result)   //没找到
                return false;
            return true;
              
        }
        #endregion 登录校验相关.

    }
}