C# LDAP认证登录

LDAP是轻量目录访问协议，英文全称是Lightweight Directory Access Protocol，一般都简称为LDAP。它是基于X.500标准的，但是简单多了并且可以根据需要定制。与X.500不同，LDAP支持TCP/IP，这对访问Internet是必须的。LDAP的核心规范在RFC中都有定义，所有与LDAP相关的RFC都可以在LDAPman RFC网页中找到。

 

bool checkResult = false;
                try
                {
                    string username = Request.Params.Get("username");
                    string userpwd = Request.Params.Get("userpwd");
                    string strLADPath = "LDAP://OU=事业部,DC=HOLD,DC=Company,DC=COM";
                   
                    DirectoryEntry objEntry = new DirectoryEntry(strLADPath);
                    objEntry.AuthenticationType = AuthenticationTypes.None;

                    DirectorySearcher deSearch = new DirectorySearcher(objEntry);
                    //过滤名称是否存在
                    deSearch.Filter = "(&(objectClass=user)(sAMAccountName=" + username + "))";
                    deSearch.SearchScope = SearchScope.Subtree;
                    //find the first instance 
                    SearchResult results = deSearch.FindOne();
                    //check username & userpwd
                    if (null != results)
                    {
                        DirectoryEntry objUserEntry = new DirectoryEntry(results.Path, username, userpwd);
                        if (null != objUserEntry && null != objUserEntry.Properties
                            && objUserEntry.Properties.Contains("cn"))
                        {
                            checkResult = true;
                        }
                    }

                    Response.Write("认证结果：" + checkResult.ToString());
                }
                catch (System.Exception ex)
                {
                    Response.Write("认证异常"+ex.StackTrace);
                    Response.Write("认证结果：" + checkResult.ToString());
                }