Ldap：从 C# 中的父组中检索子组答案

【问题标题】：Ldap: retrieve subgroup from parent group in C#Ldap：从 C# 中的父组中检索子组
【发布时间】：2015-05-18 18:22:34
【问题描述】：

我在 Active Directory 帐户中有安全组。安全组有用户和子组。我能够从安全组获取用户。这是从安全组获取用户的代码，我将“组名”作为参数传递。它将返回相应的用户属于组。

  DataTable dt = new DataTable(groupName);
        var _with1 = dt.Columns;
        _with1.Add("AccountID", typeof(string));
        _with1.Add("FirstName", typeof(string));
        _with1.Add("LastName", typeof(string));
        _with1.Add("DisplayName", typeof(string));
        _with1.Add("Email", typeof(string));
        _with1.Add("AccountDisabled", typeof(bool));
 using (DirectoryEntry rootEntry = new DirectoryEntry(LDAPPath, LDAPUser, LDAPPassword))
        {
            using (DirectorySearcher searcher = new DirectorySearcher(rootEntry))
            {
            searcher.Filter = string.Format("(&(ObjectClass=Group)(CN={0}))", groupName);
            SearchResult result = searcher.FindOne();
            object members = result.GetDirectoryEntry().Invoke("Members", null);
            //<<< Get members

            //<<< loop through members
            foreach (object member in (IEnumerable)members)
            {
                DirectoryEntry currentMember = new DirectoryEntry(member);
                //<<< Get directoryentry for user
                if (currentMember.SchemaClassName.ToLower() == "user")
                {
                    System.DirectoryServices.PropertyCollection props1 = currentMember.Properties;
                    dt.Rows.Add(props1["sAMAccountName"].Value, props1["givenName"].Value, props1["sn"].Value, props1["displayName"].Value, props1["mail"].Value, Convert.ToBoolean(currentMember.InvokeGet("AccountDisabled")));
                }

            }

} }

但我没有解决方案来获取添加到父安全组中的子组。

如何从父组中检索组？

【问题讨论】：

标签： c# active-directory ldap

【解决方案1】：

这段代码对我来说很好..

 DataTable dt = new DataTable(groupName);
        var _with1 = dt.Columns;
        _with1.Add("AccountID", typeof(string));
        _with1.Add("FirstName", typeof(string));
        _with1.Add("LastName", typeof(string));
        _with1.Add("DisplayName", typeof(string));
        _with1.Add("Email", typeof(string));
        _with1.Add("AccountDisabled", typeof(bool));
        _with1.Add("Groups", typeof(string));

        using (DirectoryEntry rootEntry = new DirectoryEntry(LDAPPath, LDAPUser, LDAPPassword))
        {
            using (DirectorySearcher searcher = new DirectorySearcher(rootEntry))
            {
            searcher.Filter = string.Format("(&(ObjectClass=Group)(CN={0}))", groupName);
            SearchResult result = searcher.FindOne();
            object members = result.GetDirectoryEntry().Invoke("Members", null);
            //<<< Get members

            //<<< loop through members
            foreach (object member in (IEnumerable)members)
            {
                DirectoryEntry currentMember = new DirectoryEntry(member);
                //<<< Get directoryentry for user
                if (currentMember.SchemaClassName.ToLower() == "user")
                {
                    System.DirectoryServices.PropertyCollection props1 = currentMember.Properties;
                    dt.Rows.Add(props1["sAMAccountName"].Value, props1["givenName"].Value, props1["sn"].Value, props1["displayName"].Value, props1["mail"].Value, Convert.ToBoolean(currentMember.InvokeGet("AccountDisabled")),"");
                }
                else if (currentMember.SchemaClassName.ToLower() == "group")
                {
                    System.DirectoryServices.PropertyCollection props1 = currentMember.Properties;
                    //foreach (var group in result.Properties["member"])
                    //{
                        dt.Rows.Add("","","","","",false,props1["name"].Value);
                    //}
                }
            }
   }

【讨论】：