i need to get data from active directory and display them in new page after authonticating the user[Answered] RSS

4 replies

Last post Dec 22, 2010 09:01 AM by smirnov

‹ Previous Thread|Next Thread ›

Shortcuts

anazahrani

Member

9 Points

135 Posts

i need to get data from active directory and display them in new page after authonticating the us...

Dec 22, 2010 02:37 AM|anazahrani|LINK

Hello there ..

I have below code which authonticate users ; i need to display some data retrieced from active directory once the user logged in

i could not get it :(

here is the code in App_Code folder :

using System;
using System.Text;
using System.Collections;
using System.DirectoryServices;
using System.Data;
using System.Configuration;
using System.Data.Odbc;




namespace FormsAuth
{
    /// <summary>
    /// Summary description for LdapAuthentication.
    /// </summary>
    public class LdapAuthentication
    {
        private string _path;
        private string _filterAttribute;


        public LdapAuthentication()
        {
            //
            // TODO: Add constructor logic here
            //
        }


        public LdapAuthentication(string path)
        {
            _path = path;
        }


        public string AuthenticateFaculty(string domain, string uid, string
            password)
        {
            string userDN = "uid=" + uid + ",cn=****,o=***,dc=***,dc=***,dc=***"; //this is what is used to bind with


            DirectoryEntry root = new DirectoryEntry(
                _path,
                userDN,
                password,
                AuthenticationTypes.None
                );




            //userPassword


            using (root)
            {
                try
                {
                    Object obj = root.NativeObject;


                    DirectorySearcher ds = new DirectorySearcher(
                        root, String.Format("(uid={0})", uid), new String[] { "employeeNumber", "employeeType" });


                    SearchResult sr = null;


                    //we need to find this UID that we got
                    using (SearchResultCollection src = ds.FindAll())
                    {
                        if (src.Count > 0)
                            sr = src[0];
                    }


                    //bad uid was passed
                    if (sr == null)
                        throw new ArgumentException("User not found, check username");


                    if (!sr.Properties["employeeType"][0].ToString().Equals("FACULTY"))
                    {
                        throw new ArgumentException("User not found, check username");
                    }


                    _filterAttribute = sr.Properties["employeeNumber"][0].ToString();
                }
                catch (Exception ex)
                {
                    //we should really check for other errors here (lockout, etc)
                    _filterAttribute = null;
                }




            }
            return _filterAttribute;




        }


        public bool IsAuthenticated(string domain, string username, string
            pwd)
        {
            string uid = username;
            string password = pwd;  //these will be given to you by the user


            string userDN = "uid=" + username + ",cn=***,o=***,dc=***,dc=***,dc=***"; //this is what is used to bind with
            string userPath = String.Empty;
            bool authenticated = false;


            DirectoryEntry root = new DirectoryEntry(
                _path,
                userDN,
                password,
                AuthenticationTypes.None
                );


            //userPassword


            using (root)
            {
                try
                {
                    Object obj = root.NativeObject;
                    authenticated = true;
                }
                catch (Exception ex)
                {
                    //we should really check for other errors here (lockout, etc)
                    authenticated = false;
                }
            }
            return authenticated;
        }


       

        public string GetGroups()
        {
            DirectorySearcher search = new DirectorySearcher(_path);
            search.Filter = "(cn=" + _filterAttribute + ")";
            search.PropertiesToLoad.Add("memberOf");
            StringBuilder groupNames = new StringBuilder();
            try
            {
                SearchResult result = search.FindOne();
                int propertyCount = result.Properties["memberOf"].Count;
                String dn;
                int equalsIndex, commaIndex;


                for (int propertyCounter = 0; propertyCounter < propertyCount;
                    propertyCounter++)
                {
                    dn = (String)result.Properties["memberOf"][propertyCounter];


                    equalsIndex = dn.IndexOf("=", 1);
                    commaIndex = dn.IndexOf(",", 1);
                    if (-1 == equalsIndex)
                    {
                        return null;
                    }
                    groupNames.Append(dn.Substring((equalsIndex + 1),
                        (commaIndex - equalsIndex) - 1));
                    groupNames.Append("|");
                }
            }
            catch (Exception ex)
            {
                throw new Exception("Error obtaining group names. " +
                    ex.Message);
            }
            return groupNames.ToString();
        }






    }


}

here is the code in login.aspx

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using FormsAuth;

public partial class Login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void LoginValidate_ServerValidate(object source, ServerValidateEventArgs args)
    {
        args.IsValid = false;
        string adPath = LDAP://******;
        LdapAuthentication adAuth = new LdapAuthentication(adPath);
        if (adAuth.IsAuthenticated("", txtUserName.Text, txtPassword.Text))
        {
            
            Response.Redirect("page.aspx");
        }
        else
            args.IsValid = false;
    }

}

i need to list the data ( email , name .... ) in page.aspx

Thank you ..

- Reply
smirnov
All-Star

35149 Points

9075 Posts
Re: i need to get data from active directory and display them in new page after authonticating th...

Dec 22, 2010 04:49 AM|smirnov|LINK
When you see the code does not work and you don't know where the error is, remove all try...catch. This will help to understand the problem. The error here is, probably, in that way you are trying to check if user is got authenticated (IsAuthenticated method). The DirectoryEntry class does not require "uid=" + username + ",cn=***,o=***,dc=***,dc=***,dc=***". It used userid. So, you need to change
```
//DirectoryEntry root = new DirectoryEntry(
//    _path,
//    userDN,
//    password,
//    AuthenticationTypes.None
//    );


DirectoryEntry root = new DirectoryEntry(
_path,
username,
password,
AuthenticationTypes.None
);
```
Hope this helps.
- Reply
anazahrani
Member

9 Points

135 Posts

Re: i need to get data from active directory and display them in new page after authonticating th...

Dec 22, 2010 05:54 AM|anazahrani|LINK

Actually i forgot to tell you that the code is working fine , but the problem i'm facing is how to retrieve the data

like ( name , email ... ) and

display them in page.aspx ???

can you add something to the above code please , so it surve my purpose ??

Thank you ...
- Reply
anazahrani
Member

9 Points

135 Posts

Re: i need to get data from active directory and display them in new page after authonticating th...

Dec 22, 2010 07:51 AM|anazahrani|LINK

The code above is working fine , it authonticate user and direct him to the page.aspx , what i need is retrieve some value from active directory like name , id , etc and send it to page.aspx ..

i hope it's clear now ....

Thank you

smirnov

All-Star

35149 Points

9075 Posts

Re: i need to get data from active directory and display them in new page after authonticating th...

Dec 22, 2010 09:01 AM|smirnov|LINK

DirectoryEntry de = new DirectoryEntry("LDAP://...");
DirectorySearcher ds = new DirectorySearcher(de);


string userName = "smith";


ds.Filter = "(&(objectClass=user)(cn=" + userName + "))";
ds.PropertiesToLoad.Add("givenName");
ds.PropertiesToLoad.Add("mail");


SearchResult user = ds.FindOne();


Response.Write("Name=" + user.Properties["givenName"][0]);
Response.Write("Email=" + user.Properties["mail"][0]);

‹ Previous Thread|Next Thread ›