silentthread
Jul 10th, 2006, 05:55 PM
With the help of some threads in this forum, I was able to put this together.
This is a function that you pass it the username and the AD group. If it finds a match, it returns true, else false. That way you can control what users can see on the webpage based on their AD rights.
To use the code below, you must be able to get the username. I believe you need to turn of anonymous access on the virtual directory, via mycomputer, right-click, manage, default website etc.
Add this to your webconfig file....
<identity impersonate="true" />
And call something like....
dim NTLogin as string = Replace(Environment.UserName, "Mydomain\", "")
To remove the domain name. If you still have problems getting the username, there are many threads in this forum that assist with that. ;)
Okay, Here is the function for checking if a user is a member of an AD group.
Please post questions, concerns, comments, suggestions, etc.
Public Function Check_If_Member_Of_AD_Group(ByVal username As String, _
ByVal grouptoCheck As String, _
ByVal domain As String, _
ByVal ADlogin As String, _
ByVal ADpassword As String) _
As Boolean
'This is a function that receives a username to see if it's a
'member of a specific group in AD.
Try
'First let's put the whole thing in a nice big try catch, and
'catch any errors.
Dim EntryString As String
EntryString = "LDAP://" & domain
'Above, we setup the LDAP basic entry string.
Dim myDE As DirectoryEntry
'Above, I dimension my DirectoryEntry object
grouptoCheck = grouptoCheck.ToLower()
'The groups returned may have different combinations of
'lowercase and uppercase, so let's go ahead
'and make grouptoCheck lowercase.
If (ADlogin <> "" AndAlso ADpassword <> "") Then
'If they provided a password, then add it
'as an argument to the function
'I recently learned about AndAlso, and it's pretty
'cool. Basically it does not worry about checking
'the next condition if the first one is not true.
myDE = New DirectoryEntry(EntryString, ADlogin, ADpassword)
'Above, we create a new instance of the Directory Entry
'Includes login and password
Else
'Else, use the account credentials of the machine
'making the request. You might not be able to get
'away with this if your production server does not have
'rights to query Active Directory.
'Then again, there are workarounds for anything.
myDE = New DirectoryEntry(EntryString)
'Above, we create a new instance of the Directory Entry
'Does not include login and password
End If
Dim myDirectorySearcher As New DirectorySearcher(myDE)
'Above we create new instance of a DirectorySearcher
'We also specify the Directory Entry as an argument.
myDirectorySearcher.Filter = "sAMAccountName=" & username
'Above we specify to filter our results where
'sAMAccountName is equal to our username passed in.
myDirectorySearcher.PropertiesToLoad.Add("MemberOf")
'We only care about the MemberOf Properties, and we
'specify that above.
Dim myresult As SearchResult = myDirectorySearcher.FindOne()
'SearchResult is a node in Active Directory that is returned
'during a search through System.DirectoryServices.DirectorySearcher
'Above, we dim a myresult object, and assign a node returned
'from myDirectorySearcher.FindOne()
'I've never heard of similar login Id's in Active Directory,
'so I don't think we need to call FindAll(), so Instead
'we call FindOne()
Dim NumberOfGroups As Integer
NumberOfGroups = myresult.Properties("memberOf").Count() - 1
'Above we get the number of groups the user is a memberOf,
'and store it in a variable. It is zero indexed, so we
'remove 1 so we can loop through it.
Dim tempString As String
'A temp string that we will use to get only what we
'need from the MemberOf string property
While (NumberOfGroups >= 0)
tempString = myresult.Properties("MemberOf").Item(NumberOfGroups)
tempString = tempString.Substring(0, tempString.IndexOf(",", 0))
'Above we set tempString to the first index of "," starting
'from the zeroth element of itself.
tempString = tempString.Replace("CN=", "")
'Above, we remove the "CN=" from the beginning of the string
tempString = tempString.ToLower() 'Lets make all letters lowercase
tempString = tempString.Trim()
'Finnally, we trim any blank characters from the edges
If (grouptoCheck = tempString) Then
Return True
End If
'If we have a match, the return is true
'username is a member of grouptoCheck
NumberOfGroups = NumberOfGroups - 1
End While
'If the code reaches here, there was no match.
'Return false
Return False
Catch ex As Exception
HttpContext.Current.Response.Write("Error: <br><br>" & ex.ToString)
End Try
End Function
This is a function that you pass it the username and the AD group. If it finds a match, it returns true, else false. That way you can control what users can see on the webpage based on their AD rights.
To use the code below, you must be able to get the username. I believe you need to turn of anonymous access on the virtual directory, via mycomputer, right-click, manage, default website etc.
Add this to your webconfig file....
<identity impersonate="true" />
And call something like....
dim NTLogin as string = Replace(Environment.UserName, "Mydomain\", "")
To remove the domain name. If you still have problems getting the username, there are many threads in this forum that assist with that. ;)
Okay, Here is the function for checking if a user is a member of an AD group.
Please post questions, concerns, comments, suggestions, etc.
Public Function Check_If_Member_Of_AD_Group(ByVal username As String, _
ByVal grouptoCheck As String, _
ByVal domain As String, _
ByVal ADlogin As String, _
ByVal ADpassword As String) _
As Boolean
'This is a function that receives a username to see if it's a
'member of a specific group in AD.
Try
'First let's put the whole thing in a nice big try catch, and
'catch any errors.
Dim EntryString As String
EntryString = "LDAP://" & domain
'Above, we setup the LDAP basic entry string.
Dim myDE As DirectoryEntry
'Above, I dimension my DirectoryEntry object
grouptoCheck = grouptoCheck.ToLower()
'The groups returned may have different combinations of
'lowercase and uppercase, so let's go ahead
'and make grouptoCheck lowercase.
If (ADlogin <> "" AndAlso ADpassword <> "") Then
'If they provided a password, then add it
'as an argument to the function
'I recently learned about AndAlso, and it's pretty
'cool. Basically it does not worry about checking
'the next condition if the first one is not true.
myDE = New DirectoryEntry(EntryString, ADlogin, ADpassword)
'Above, we create a new instance of the Directory Entry
'Includes login and password
Else
'Else, use the account credentials of the machine
'making the request. You might not be able to get
'away with this if your production server does not have
'rights to query Active Directory.
'Then again, there are workarounds for anything.
myDE = New DirectoryEntry(EntryString)
'Above, we create a new instance of the Directory Entry
'Does not include login and password
End If
Dim myDirectorySearcher As New DirectorySearcher(myDE)
'Above we create new instance of a DirectorySearcher
'We also specify the Directory Entry as an argument.
myDirectorySearcher.Filter = "sAMAccountName=" & username
'Above we specify to filter our results where
'sAMAccountName is equal to our username passed in.
myDirectorySearcher.PropertiesToLoad.Add("MemberOf")
'We only care about the MemberOf Properties, and we
'specify that above.
Dim myresult As SearchResult = myDirectorySearcher.FindOne()
'SearchResult is a node in Active Directory that is returned
'during a search through System.DirectoryServices.DirectorySearcher
'Above, we dim a myresult object, and assign a node returned
'from myDirectorySearcher.FindOne()
'I've never heard of similar login Id's in Active Directory,
'so I don't think we need to call FindAll(), so Instead
'we call FindOne()
Dim NumberOfGroups As Integer
NumberOfGroups = myresult.Properties("memberOf").Count() - 1
'Above we get the number of groups the user is a memberOf,
'and store it in a variable. It is zero indexed, so we
'remove 1 so we can loop through it.
Dim tempString As String
'A temp string that we will use to get only what we
'need from the MemberOf string property
While (NumberOfGroups >= 0)
tempString = myresult.Properties("MemberOf").Item(NumberOfGroups)
tempString = tempString.Substring(0, tempString.IndexOf(",", 0))
'Above we set tempString to the first index of "," starting
'from the zeroth element of itself.
tempString = tempString.Replace("CN=", "")
'Above, we remove the "CN=" from the beginning of the string
tempString = tempString.ToLower() 'Lets make all letters lowercase
tempString = tempString.Trim()
'Finnally, we trim any blank characters from the edges
If (grouptoCheck = tempString) Then
Return True
End If
'If we have a match, the return is true
'username is a member of grouptoCheck
NumberOfGroups = NumberOfGroups - 1
End While
'If the code reaches here, there was no match.
'Return false
Return False
Catch ex As Exception
HttpContext.Current.Response.Write("Error: <br><br>" & ex.ToString)
End Try
End Function