如何确定用户DN针对Active Directory认证后？(How to determine us

我使用的DirectoryServices对抗的ADLDS一个用户（lighteweight的Active Directory）认证。之后，我通过认证。我怎么能确定在当前登录用户的DN或SID？

using (DirectoryEntry entry = new DirectoryEntry(<a>LDAP://XYZ:389</a>,
userName.ToString(),
password.ToString(),
AuthenticationTypes.Secure))
{
try
{
// Bind to the native object to force authentication to happen
Object native = entry.NativeObject;
MessageBox.Show("User authenticated!");
}
catch (Exception ex)
{
throw new Exception("User not authenticated: " + ex.Message);
}
...

谢谢

更新：

我得到一个异常

src = search.FindAll() 
There is no such object on the server.

我实现了用户身份登录，在Active Directory轻型所以我想也许我可以修改你的过滤器是一个类类型“foreignSecurityPrincipal”：

search.Filter = "(&(objectclass=foreignSecurityPrincipal)" + "(sAMAccountName=" + userName + "))";

但是，这给了我同样的异常。任何想法，我缺少什么？

Answer 1:

据我所知，你将不得不做用户的LDAP搜索，并从AD中的distinguishedName属性。见下文：

// you can use any root DN here that you want provided your credentials
// have search rights
DirectoryEntry searchEntry = new DirectoryEntry("LDAP://XYZ:389");

DirectorySearcher search = new DirectorySearcher(searchEntry);
search.Filter = "(&(objectclass=user)(objectCategory=person)" +
  "(sAMAccountName=" + userName + "))";    

if (search != null)
{
  search.PropertiesToLoad.Add("sAMAccountName");
  search.PropertiesToLoad.Add("cn");
  search.PropertiesToLoad.Add("distinguishedName");

  log.Info("Searching for attributes");

  // find firest result
  SearchResult searchResult = null;
  using (SearchResultCollection src = search .FindAll())
  {
 if (src.Count > 0)
   searchResult = src[0];
  }

  if (searchResult != null)
  {
    // Get DN here
    string DN = searchResult.Properties["distinguishedName"][0].ToString();
  }