使用Novell.Directory.Ldap.NETStandard2_0的受限用户（登录工作站）在ASP.NET Core中的LDAP身份验证问题

Question

I use Novell.Directory.Ldap.NETStandard2_0 package to authenticate users from Active Directory and it works fine for most of users.

using (var cn = new LdapConnection())
{
    cn.Connect(ldapOptions.Host, ldapOptions.Port);
    var userDn = username.IndexOf('@') < 0 ? username + $"@{ldapOptions.Domain}" : username;
    cn.Bind(userDn, password);
    if (cn.Bound)
    {
        result.Result = AuthResult.Succeed;
        result.Message = "Login Successful using LDAP: {0}.";
    }

    return result;
}

The problem is when we need to authenticate users that are restricted to logon to only certain computers in our domain (Active Directory).

I added the computer that host my application (IIS & Win Server 2016) to the list but it still fails and restricted users cannot be authenticated yet.

How can I solve this issue? should I change my code? or Active Directory/IIS settings?

Answer 1

LDAP身份验证通常来自域控制器，因此配置为LDAP主机的域控制器需要出现在登录工作站（userWorkstations）列表中。