Active Directory:无法使用DirectorySearcher

时间:2016-11-21 08:15:55

标签: c# active-directory ldap windows-authentication directorysearcher

我一直收到错误无法联系服务器。当我尝试运行我的代码时:

我搜索了几个小时,但我仍然无法联系服务器。

DirectorySearcher directorySearcher = new DirectorySearcher();
string path = directorySearcher.SearchRoot.Path;
DirectoryEntry directoryEntry = new DirectoryEntry(path);

PrincipalContext pricipalContext = new PrincipalContext(ContextType.Domain, "LDAP://domain.dk/DC=domain,DC=dk");
//GroupPrincipal group = GroupPrincipal.FindByIdentity(pricipalContext, "(CN=" + department + ")");
GroupPrincipal group = GroupPrincipal.FindByIdentity(pricipalContext, "(CN=" + department + ")");


if (group != null)
{
    foreach (Principal principal in group.Members)
    {
        UserPrincipal tu = principal as UserPrincipal;

        DirectoryEntry de = tu.GetUnderlyingObject() as DirectoryEntry;
        var store = de.InvokeGet("physicalDeliveryOfficeName").ToString();
        var storeNumber = de.InvokeGet("description").ToString();

        employees.Add(new AdEmployees() { name = principal.Name, phone = tu.VoiceTelephoneNumber, email = tu.EmailAddress, store = store.ToString(), storeNumber = storeNumber.ToString(), link = GenerateLink(principal.Name) });
    }
}

注意:我将AD所在的域名更改为域名。

1 个答案:

答案 0 :(得分:3)

这里的关键声明似乎是"我将AD所在的域名更改为域名。"

  1. 确保应用程序服务器指向正确的DNS服务器。
  2. 确保客户端指向正确的DNS服务器。
  3. 此连接字符串显示错误:PrincipalContext pricipalContext = new PrincipalContext(ContextType.Domain, "LDAP://domain.dk/DC=domain,DC=dk");

  4. #3中的连接字符串可能效果更好:

    PrincipalContext pricipalContext = new PrincipalContext(ContextType.Domain," DOMAIN"," DC = domain,DC = dk");