Active Directory PrincipalContext.ValidateCredentials 域消歧

作者: 冷心33072806
来源: 51数据库
2022-10-21

问题描述

我正在处理两个域 - 一个是受信任域.一个域上可能有一个 JohnSmith，另一个域上可能有另一个 JohnSmith.这两个人都需要登录我的应用程序.

I'm dealing with two domains - one is a trusted domain. There may be a JohnSmith on one domain and another JohnSmith on the other. Both of these people need to log into my application.

我的问题:我传入哪个域并不重要 - 此代码返回 true！我如何知道哪个 JohnSmith 正在登录?

My problem: it doesn't matter which domain I pass in - this code returns true! How do I know which JohnSmith is logging in?

    static public bool CheckCredentials(
        string userName, string password, string domain)
    {
        using (var context = new PrincipalContext(ContextType.Domain, domain))
        {
            return context.ValidateCredentials(userName, password);
        }
    }

推荐答案

ValidateCredentials 与 userPrincipalName 一起使用，您也许可以尝试构建第一个参数(用户名)登录和域来创建用户名 JohnSmith@dom1.com 与 JohnSmith@dom2.com.

The ValidateCredentials works with userPrincipalName you perhaps can try to build the first parameter (username) combining the login and the domain to create the username JohnSmith@dom1.com versus JohnSmith@dom2.com.

推荐阅读