检查登录凭据以查看它们在Active Directory中是否有效，并检查它们是否属于AD中的特定组

Question

以下是用于检查输入的Creds是否良好的方法。 我还想补充一下，看看它们是否属于“ XXX”组。

    Private Function ValidateActiveDirectoryLogin(ByVal Domain As String, ByVal Username As String, ByVal Password As String) As Boolean
    Dim Success As Boolean = False
    Dim Entry As New System.DirectoryServices.DirectoryEntry("LDAP://" + Domain, Username, Password)
    Dim Searcher As New System.DirectoryServices.DirectorySearcher(Entry)
    Searcher.SearchScope = DirectoryServices.SearchScope.OneLevel
    Try
        Dim Results As System.DirectoryServices.SearchResult = Searcher.FindOne
        Success = Not (Results Is Nothing)
    Catch ex As Exception
        Success = False
    End Try
    Return Success

End Function

在下面，我尝试玩我在堆栈中找到的东西，但我没有很多运气。 我如何使用现有方法并添加到其中以获得我的结果？

Public Function IsInGroup(ByVal UserName As String) As Boolean
    'Dim MyIdentity As System.Security.Principal.WindowsIdentity = New WindowsPrincipal(New WindowsIdentity(UserName)) ' System.Security.Principal.WindowsIdentity.GetCurrent()
    'Dim userPrincipal = New WindowsPrincipal(New WindowsIdentity(Username))
    Dim MyPrincipal As System.Security.Principal.WindowsPrincipal = New WindowsPrincipal(New WindowsIdentity(UserName)) 'New System.Security.Principal.WindowsPrincipal(userPrincipal)
    Return MyPrincipal.IsInRole("XXX_YYY")
End Function

也试图做这样的事情，但得到我截图的错误。

Public Function IsInGroup(ByVal UserName As String) As Boolean
    Dim Result As Boolean
    Dim de As New DirectoryEntry("LDAP://AD")
    Dim MemberSearcher As New DirectorySearcher

    With MemberSearcher
        .SearchRoot = de
        .Filter = "(&(ObjectClass=Group)(CN=VAL_ITS))"
        .PropertiesToLoad.Add("Member")
    End With

    Dim mySearchResults As SearchResult = MemberSearcher.FindOne()

    For Each User In mySearchResults.Properties("Member")

        If User = UserName Then
            Result = True
        Else
            Result = False
        End If
    Next

    Return Result
End Function

Answer 1

'Project > Add Reference > System.DirectoryServices.AccountManagement & System.DirectoryServices

使用System.DirectoryServices.AccountManagement命名空间进行验证

    Imports System.DirectoryServices.AccountManagement

    Public function validate(username as string, password as string, domain as string)

        Dim valid As Boolean = False

        Using context As New PrincipalContext(ContextType.Domain, domain)
            valid = context.ValidateCredentials(username, password)
        End Using

        return valid

    End Function

    Public function checkgroup(domain as string, username as string, groupname as string)

      Dim isMember as boolean = false
      Dim ctx As New PrincipalContext(ContextType.Domain, domain)
      Dim user As UserPrincipal = UserPrincipal.FindByIdentity(ctx, username)
      Dim group As GroupPrincipal = GroupPrincipal.FindByIdentity(ctx, groupname)

      If user IsNot Nothing Then
        If user.IsMemberOf(group) Then
          isMember = True
        End If
      End If

      return isMember

    End Function