Question

我尝试在森林中获取所有域名。

我可以连接到一个特定的域并获取它的DirectoryEntry：

DirectoryContext dc =
    new DirectoryContext(DirectoryContextType.DirectoryServer, "xx.x.xxx.40", "w28\\administrator", "pwd");

Domain domain = Domain.GetDomain(dc);
DirectoryEntry entry = domain.GetDirectoryEntry();
foreach (DirectoryEntry child in entry.Children)
{
    Console.WriteLine(" - " + child.Name);
}

但是，当我尝试通过Forest特性获得其他域名时。

Forest forest = domain.Forest;
Console.WriteLine("Count: " + forest.Domains.Count); //It crashes here
DomainCollection domains = forest.Domains;

我的应用崩溃，异常消息如下所示： System.DirectoryServices.ActiveDirectory.ActiveDirectoryServerDownException：指定的域名不存在或无法联系。

在 System.DirectoryServices.ActiveDirectory.Locator.GetDomainControllerInfo（字符串 computerName，String domainName，String siteName，Int64 flags）at System.DirectoryServices.ActiveDirectory.DirectoryContext.isCurrentForest（）在 System.DirectoryServices.ActiveDirectory.DirectoryContext.GetServerName（）在 System.DirectoryServices.ActiveDirectory.DirectoryEntryManager.GetNewDirectoryEntry（字符串 dn）at System.DirectoryServices.ActiveDirectory.DirectoryEntryManager.GetCachedDirectoryEntry（字符串 distinguishedName）at System.DirectoryServices.ActiveDirectory.DirectoryEntryManager.ExpandWellKnownDN（WellKnownDN dn）at System.DirectoryServices.ActiveDirectory.DirectoryEntryManager.ExpandWellKnownDN（WellKnownDN dn）在System.DirectoryServices.ActiveDirectory.Forest.GetDomains（）在System.DirectoryServices.ActiveDirectory.Forest.get_Domains（）

请帮帮我。

提前致谢。

Answer 1

我在我的林中运行了类似的代码（通过GetCurrentDomain（）并查询其林）并且它们运行良好。我认为问题就像异常和callstack一样 - 它试图通过查询作为DC的林根服务器来获取有关您的林的信息，并且无法联系到它。我认为您需要检查拓扑，然后查看服务器的状态。

Answer 2

我有同样的问题。我在域外，而且我一直都是因为我们是网络安全测试人员。

我发现这是解决问题的好方法

 class PInvoke {
[DllImport("Netapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        public static extern int DsGetDcName
        (
          [MarshalAs(UnmanagedType.LPTStr)]
            string ComputerName,
          [MarshalAs(UnmanagedType.LPTStr)]
            string DomainName,
          [In] int DomainGuid,
          [MarshalAs(UnmanagedType.LPTStr)]
            string SiteName,
          [MarshalAs(UnmanagedType.U4)]
            DSGETDCNAME_FLAGS flags,
          out IntPtr pDOMAIN_CONTROLLER_INFO
        );

    [StructLayout(LayoutKind.Sequential)]
    public class GuidClass
    {
        public Guid TheGuid;
    }
    [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]

    public struct DOMAIN_CONTROLLER_INFO
    {
        [MarshalAs(UnmanagedType.LPTStr)]
        public string DomainControllerName;
        [MarshalAs(UnmanagedType.LPTStr)]
        public string DomainControllerAddress;
        public uint DomainControllerAddressType;
        public Guid DomainGuid;
        [MarshalAs(UnmanagedType.LPTStr)]
        public string DomainName;
        [MarshalAs(UnmanagedType.LPTStr)]
        public string DnsForestName;
        public uint Flags;
        [MarshalAs(UnmanagedType.LPTStr)]
        public string DcSiteName;
        [MarshalAs(UnmanagedType.LPTStr)]
        public string ClientSiteName;
    }



    [DllImport("Netapi32.dll", SetLastError = true)]
    public static extern int NetApiBufferFree(IntPtr Buffer);

    [Flags]
    public enum DSGETDCNAME_FLAGS : uint
    {
        DS_FORCE_REDISCOVERY = 0x00000001,
        DS_DIRECTORY_SERVICE_REQUIRED = 0x00000010,
        DS_DIRECTORY_SERVICE_PREFERRED = 0x00000020,
        DS_GC_SERVER_REQUIRED = 0x00000040,
        DS_PDC_REQUIRED = 0x00000080,
        DS_BACKGROUND_ONLY = 0x00000100,
        DS_IP_REQUIRED = 0x00000200,
        DS_KDC_REQUIRED = 0x00000400,
        DS_TIMESERV_REQUIRED = 0x00000800,
        DS_WRITABLE_REQUIRED = 0x00001000,
        DS_GOOD_TIMESERV_PREFERRED = 0x00002000,
        DS_AVOID_SELF = 0x00004000,
        DS_ONLY_LDAP_NEEDED = 0x00008000,
        DS_IS_FLAT_NAME = 0x00010000,
        DS_IS_DNS_NAME = 0x00020000,
        DS_RETURN_DNS_NAME = 0x40000000,
        DS_RETURN_FLAT_NAME = 0x80000000
    }
}

class domain
{
   public static void DetectDc(string domain, string username, string password, out string dc, out string dcAddress, out string path)
        {
            PInvoke.DOMAIN_CONTROLLER_INFO domainInfo;
            const int errorSuccess = 0;
            var pDci = IntPtr.Zero;

            try
            {
                var val = PInvoke.DsGetDcName(null, domain, 0, "", 0, out pDci);
                //check return value for error
                if (errorSuccess == val)
                {
                    domainInfo = (PInvoke.DOMAIN_CONTROLLER_INFO)Marshal.PtrToStructure(pDci, typeof(PInvoke.DOMAIN_CONTROLLER_INFO));
                }
                else
                {
                    dc = "";
                    dcAddress = "";
                    path = "";
                    namingContext = "";
                    return;
                }
            }
            finally
            {
                PInvoke.NetApiBufferFree(pDci);
            }

            dc = domainInfo.DomainControllerName;
            dc = dc.Replace("\\\\", "");

            dcAddress = domainInfo.DomainControllerAddress;
            dcAddress = dcAddress.Replace("\\\\", "");

            var ldap = new Ldap(domain, dcAddress, username, password);

        }
}

如何从一个域获取其他域

2 个答案: