Question

当我运行下面的代码来检索所有组，子组和相关用户时，我在检索一些记录后得到一个奇怪的错误：我期待检索90000组/子组和250000用户

错误：

System.Runtime.InteropServices.COMException被捕获了Message = The 服务器无法运行

 public static List<Group>getUsers()
{

    // create the "context" in which to operate - your domain here, 
    // as the old-style NetBIOS domain, and the container where to operate in
    PrincipalContext ctx = new PrincipalContext(ContextType.Domain, "lin.proximus.com");

    // define a "prototype" - an example of what you're searching for
    // Here: just a simple GroupPrincipal - you want all groups
    GroupPrincipal prototype = new GroupPrincipal(ctx);

    // define a PrincipalSearcher to find those principals that match your prototype
    PrincipalSearcher searcher = new PrincipalSearcher(prototype);

    // define a list of strings to hold the group names        
    List<Group> groupNames = new List<Group>();
    int counter = 0;
    // iterate over the result of the .FindAll() call
    foreach (var gp in searcher.FindAll())
    {

        // cast result to GroupPrincipal
        GroupPrincipal groupPrincipal = gp as GroupPrincipal;

        // if everything - grab the group's name and put it into the list
        if (groupPrincipal == null) continue;

        Group group = new Group();
        group.Name = groupPrincipal.Name;
        group.Description = groupPrincipal.Description;
        AddSubGroups(groupPrincipal, ref group);
        AddMemebers(groupPrincipal, ref group);
        counter++;
        groupNames.Add(group);
        Console.WriteLine(counter);
        if (counter > 10000)
            return groupNames;
    }
    return groupNames;
}

private static void AddSubGroups(GroupPrincipal gp,ref Group gr)
{
    gr.SubCounts = 0;
    if (gp.GetGroups().Count() <= 0) return;

    gr.SubCounts = gp.GetGroups().Count();
    gr.SubGroups = new List<string>();
    foreach (var principal in gp.GetGroups())
    {
        gr.SubGroups.Add(principal.Name);
    }
}

private static void AddMemebers(GroupPrincipal gp, ref Group gr)
{
    if (gp.GetMembers().Count() <= 0) return;

    gr.Users = new List<string>();

    foreach (Principal principal in gp.GetMembers())
    {
        gr.Users.Add(principal.Name);
    }
}

任何想法？

Answer 1

您似乎可以设置DirectorySearcher.PageSize并执行分页结果集。这通常可以让您超越服务器端限制。

我仍然会尝试使用已知的LDAP工具（我喜欢Apache Studio）并查看它是否有效。（directory.apache.org/studio）

Answer 2

这个错误可能意味着任何事情，但我强烈建议[Wireshark'ing] [1]你的机器和ldap服务器之间的TCP流量，以更好地了解实际导致它的原因。

如果在搜索器运行时你的连接超时，你会在错误被抛出之前看到你机器的[RST，ACK]。这也可以反过来，目标ldap服务器在搜索者完成之前强行关闭你的连接。

另外，我建议使用较低级别DirectoryServices命名空间中提供的对象和类，而不是AccountManagement命名空间提供的对象和类。

我真的为这类东西挖掘了LdapConnection和DirectorySearcher对象，两者都有很大的灵活性：

LdapConnection ldapConnection = new LdapConnection("lin.proximus.com:389");
ldapConnection.Timeout = 100000;

按照jeemster的建议设置PageSize，并设置PageTimeLimit：

var directoryEntry = new DirectoryEntry(("LDAP://" + ldapUrl), usrname, password);

var directorySearcher = new DirectorySearcher(directoryEntry)
{
    SearchScope = SearchScope.Subtree,
    ServerPageTimeLimit = TimeSpan.FromSeconds(100000),
    PageSize = 500000       
};

让我知道你在这里发现了什么。

使用System.DirectoryServices.AccountManagement我收到奇怪的错误

2 个答案: