从ASP.NET搜索Active Directory

Question

I have an asp.net website which searches Active Directory for user details using this code:

public static SearchResult GetUserProfileFromAD(string username)
{
    DirectorySearcher searcher = new DirectorySearcher("(&(objectCategory=person)(sAMAccountName=" + username + "))");
    return searcher.FindOne();
}

the website is working great on windows server 2003 and IIS5. recently i move the website to a new windows server 2008 with IIS7.5 i Added application to iis and conect the website and i get this error:

The (&(objectCategory=person)(sAMAccountName=)) search filter is invalid. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.ArgumentException: The (&(objectCategory=person)(sAMAccountName=)) search filter is invalid.

when i run my website through Visual Studio it works. the problem is only from IIS.

Can someone help me?

Answer 1

Your "username" variable is blank, causing your filter to terminate in a equal sign (which is, in fact. invalid) Without knowing more about your setup, it's hard to say. But it sounds distinctly like you don't have the authentication set up correctly for the website on your new server - causing whatever routine you have to fill in the username to not get anything back.

Answer 2

The error is clearly because "username" is an empty string. This is most likely because you're users are logging into your web-site anonymously. Please ensure that anonymous access is disabled in IIS.

However, it would be helpful if you can show the code which calls GetUserProfileFromAD .

Answer 3

在我看来，变量用户名没有被填充，如果你说你把它移动到IIS尝试再次检查安全选项，可能还没有配置Windows身份验证。