Ðþò íá ðñáãìáôïðïéÞóïõí Ýëåã÷ï ôáõôüôçôáò óå õðçñåóßá êáôáëüãïõ Active Directory ÷ñçóéìïðïéþíôáò Ýëåã÷ï ôáõôüôçôáò öïñìþí êáé Visual C#.NET

ÅðéóôñïöÞ óôçí áñ÷Þ

ÄçìéïõñãÞóôå ìéá ASP.Ç åöáñìïãÞ NET Web óôï Visual C#.NET

1. ÎåêéíÞóôå ôï Microsoft Visual Studio.NET.
2. Áðü ôï Ôï áñ÷åßï ìåíïý, óçìåßï ÍÝá, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ¸ñãï.
3. ÊÜíôå êëéê óôï êïõìðß ¸ñãá Visual C# óôçí ðåñéï÷Þ Ôýðïé Ýñãïõ, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ASP.ÅöáñìïãÞ NET Web óôçí ðåñéï÷Þ Ðñüôõðá.
4. Ìå ôï ÈÝóç ðëáßóéï, WebApplication1 ìå áíôéêáôÜóôáóç FormsAuthAd.
5. ÊÜíôå êëéê óôï êïõìðß OK.
6. ÊÜíôå äåîéü êëéê ôïõ ÁíáöïñÝò êüìâïò óôï äéÜëõìá Explorer êáé óôç óõíÝ÷åéá êÜíôå êëéê ÐñïóèÞêç áíáöïñÜò.
7. Áðü ôï .NET óôï ôï ÐñïóèÞêç áíáöïñÜò óôï ðáñÜèõñï äéáëüãïõ, êÜíôå êëéê óôï êïõìðß System.DirectoryServices.dll, êÜíôå êëéê óôï êïõìðß ÅðéëÝîôå, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß OK.

ÅðéóôñïöÞ óôçí áñ÷Þ

ÓõíôÜîôå ôïí êþäéêá åëÝã÷ïõ ôáõôüôçôáò

1. Óôçí Åîåñåýíçóç ëýóç, êÜíôå äåîéü êëéê óôïí êüìâï Ýñãïõ óçìåßï Ãéá íá ÐñïóèÞêç, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ÐñïóèÞêç íÝïõ óôïé÷åßïõ.
2. ÊÜíôå êëéê óôï êïõìðß ÊëÜóç óôçí ðåñéï÷Þ Ðñüôõðá.
3. Ôýðïò LdapAuthentication.cs ìå ôï ¼íïìá ðëáßóéï êáé óôç óõíÝ÷åéá êÜíôå êëéê ¢íïéãìá.
4. ÁíôéêáôáóôÞóåôå ôïí õðÜñ÷ïíôá êþäéêá óôï áñ÷åßï LdapAuthentication.cs ìå ôïí áêüëïõèï êþäéêá.

   using System;
   using System.Text;
   using System.Collections;
   using System.DirectoryServices;
   
   namespace FormsAuth
   {	
     public class LdapAuthentication
     {
       private String _path;
       private String _filterAttribute;
   
       public LdapAuthentication(String path)
       {
         _path = path;
       }
   		
       public bool IsAuthenticated(String domain, String username, String pwd)
       {
         String domainAndUsername = domain + @"\" + username;
         DirectoryEntry entry = new DirectoryEntry(_path, domainAndUsername, pwd);
   			
         try
         {	//Bind to the native AdsObject to force authentication.			
            Object obj = entry.NativeObject;
   
   	DirectorySearcher search = new DirectorySearcher(entry);
   
   	search.Filter = "(SAMAccountName=" + username + ")";
   	search.PropertiesToLoad.Add("cn");
   	SearchResult result = search.FindOne();
   
   	if(null == result)
   	{
     	  return false;
   	}
   
   	//Update the new path to the user in the directory.
   	_path = result.Path;
   	_filterAttribute = (String)result.Properties["cn"][0];
         }
         catch (Exception ex)
         {
           throw new Exception("Error authenticating user. " + ex.Message);
         }
   
   	return true;
        }
   
        public String GetGroups()
        {
          DirectorySearcher search = new DirectorySearcher(_path);
          search.Filter = "(cn=" + _filterAttribute + ")";
          search.PropertiesToLoad.Add("memberOf");
          StringBuilder groupNames = new StringBuilder();
   
          try
          {
            SearchResult result = search.FindOne();
   
   	 int propertyCount = result.Properties["memberOf"].Count;
   
      	 String dn;
   	 int equalsIndex, commaIndex;
   				
   	 for(int propertyCounter = 0; propertyCounter < propertyCount; propertyCounter++)
   	 {
   	   dn = (String)result.Properties["memberOf"][propertyCounter];
   
       	   equalsIndex = dn.IndexOf("=", 1);
   	   commaIndex = dn.IndexOf(",", 1);
   	   if(-1 == equalsIndex)
   	   {
   	     return null;
        	   }
   
              groupNames.Append(dn.Substring((equalsIndex + 1), (commaIndex - equalsIndex) - 1));
   	   groupNames.Append("|");
   
       	 }
          }
          catch(Exception ex)
          {
            throw new Exception("Error obtaining group names. " + ex.Message);
          }			
          return groupNames.ToString();
        }
      }
   }
   					

CN=...,...,DC=domain,DC=com
				

ÅðéóôñïöÞ óôçí áñ÷Þ

ÓõíôÜîôå ôïí êþäéêá Global.asax

1. Óôçí Åîåñåýíçóç ëýóç, êÜíôå äåîéü êëéê Global.asax, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ÐñïâïëÞ êþäéêá.
2. ÐñïóèÝóôå ôïí áêüëïõèï êþäéêá óôï åðÜíù ìÝñïò ôïõ êþäéêá ðßóù Ôï áñ÷åßï Global.asax.CS:

   using System.Web.Security;
   using System.Security.Principal;
   					

3. ÁíôéêáôáóôÞóôå ôï õðÜñ÷ïí óôïé÷åßï ÷åéñéóìïý óõìâÜíôïò êåíÞ ãéá ôï Application_AuthenticateRequest ìå ôïí áêüëïõèï êþäéêá.

   void Application_AuthenticateRequest(Object sender, EventArgs e)
   {
     String cookieName = FormsAuthentication.FormsCookieName;
     HttpCookie authCookie = Context.Request.Cookies[cookieName];
   
     if(null == authCookie)
     {//There is no authentication cookie.
       return;
     }	
   		
     FormsAuthenticationTicket authTicket = null;
   	
     try
     {
       authTicket = FormsAuthentication.Decrypt(authCookie.Value);
     }
     catch(Exception ex)
     {
       //Write the exception to the Event Log.
       return;
     }
   	
     if(null == authTicket)
     {//Cookie failed to decrypt.
       return;		
     }		
   	
     //When the ticket was created, the UserData property was assigned a
     //pipe-delimited string of group names.
     String[] groups = authTicket.UserData.Split(new char[]{'|'});
   
     //Create an Identity.
     GenericIdentity id = new GenericIdentity(authTicket.Name, "LdapAuthentication");
   	
     //This principal flows throughout the request.
     GenericPrincipal principal = new GenericPrincipal(id, groups);
   
     Context.User = principal;
   	
   }
   					

ÅðéóôñïöÞ óôçí áñ÷Þ

ÔñïðïðïéÞóôå ôï áñ÷åßï Web.config

<?xml version="1.0" encoding="utf-8" ?>
<configuration>    
  <system.web>
    <authentication mode="Forms">
      <forms loginUrl="logon.aspx" name="adAuthCookie" timeout="10" path="/" >
      </forms>
    </authentication>	
    <authorization>	
      <deny users="?" />
      <allow users="*" />
    </authorization>	
    <identity impersonate="true" />
  </system.web>
</configuration>
				

ÅðéóôñïöÞ óôçí áñ÷Þ

Ñýèìéóç ðáñáìÝôñùí ôùí õðçñåóéþí IIS ãéá ôïí áíþíõìï Ýëåã÷ï ôáõôüôçôáò

1. Óôéò õðçñåóßåò IIS, áíáðôýîôå ôïí êüìâï õðïëïãéóôÞ ôïõ äéáêïìéóôÞ, áíáðôýîôå ôï óôïé÷åßï Ôïðïèåóßåò Web, áíáðôýîôå ôï óôïé÷åßï ÐñïåðéëåãìÝíç ôïðïèåóßá Web, êÜíôå äåîéü êëéê FormsAuthAd, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß Éäéüôçôåò.
2. ÊÜíôå êëéê óôçí åðéëïãÞ ôïõ ÊáñôÝëá "ÁóöÜëåéá êáôáëüãïõ", êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß Åðåîåñãáóßá óôçí ðåñéï÷Þ Áíþíõìç ðñüóâáóç êáé Ýëåã÷ïò ôáõôüôçôáò.
3. ÊÜíåôå ôïí áíþíõìï ëïãáñéáóìü ãéá ôçí åöáñìïãÞ åíüò ëïãáñéáóìïý ìå äéêáéþìáôá ôçò õðçñåóßáò êáôáëüãïõ Active Directory.
4. ÊÜíôå êëéê ãéá íá êáôáñãÞóåôå ôï ðëáßóéï åëÝã÷ïõ äõíáôüôçôá IIS Ýëåã÷ïò êùäéêïý ðñüóâáóçò.
5. Óôçí åíüôçôá "Ðñüóâáóç ìå Ýëåã÷ï ôáõôüôçôáò", êáôáñãÞóôå ôçí åðéëïãÞ ôïõ ðëáéóßïõ åëÝã÷ïõ "ÅíóùìáôùìÝíïò Ýëåã÷ïò ôáõôüôçôáò ôùí Windows".
6. ÊÜíôå êëéê óôï OK.
7. ÊÜíôå êëéê óôï êïõìðß åöáñìïãÞ

ÅðéóôñïöÞ óôçí áñ÷Þ

Äçìéïõñãßá óåëßäáò Logon.aspx

1. Óôçí Åîåñåýíçóç ëýóç, êÜíôå äåîéü êëéê óôïí êüìâï Ýñãïõ óçìåßï Ãéá íá ÐñïóèÞêç, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ÐñïóèÞêç öüñìáò Web.
2. Ôýðïò Logon.aspx ìå ôï ¼íïìá ðëáßóéï êáé óôç óõíÝ÷åéá êÜíôå êëéê ¢íïéãìá.
3. Óôçí Åîåñåýíçóç ëýóç, êÜíôå äåîéü êëéê Logon.aspx, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ÐñïâïëÞ "Ó÷åäßáóç".
4. ÊÜíôå êëéê óôçí åðéëïãÞ ôïõ HTML óôçí êáñôÝëá óôç ó÷åäßáóç.
5. ÁíôéêáôáóôÞóåôå ôïí õðÜñ÷ïíôá êþäéêá ìå ôïí ðáñáêÜôù êþäéêá.

   <%@ Page language="c#" AutoEventWireup="true" %>
   <%@ Import Namespace="FormsAuth" %>
   <html>
     <body>	
       <form id="Login" method="post" runat="server">
         <asp:Label ID="Label1" Runat=server >Domain:</asp:Label>
         <asp:TextBox ID="txtDomain" Runat=server ></asp:TextBox><br>    
         <asp:Label ID="Label2" Runat=server >Username:</asp:Label>
         <asp:TextBox ID=txtUsername Runat=server ></asp:TextBox><br>
         <asp:Label ID="Label3" Runat=server >Password:</asp:Label>
         <asp:TextBox ID="txtPassword" Runat=server TextMode=Password></asp:TextBox><br>
         <asp:Button ID="btnLogin" Runat=server Text="Login" OnClick="Login_Click"></asp:Button><br>
         <asp:Label ID="errorLabel" Runat=server ForeColor=#ff3300></asp:Label><br>
         <asp:CheckBox ID=chkPersist Runat=server Text="Persist Cookie" />
       </form>	
     </body>
   </html>
   <script runat=server>
   void Login_Click(Object sender, EventArgs e)
   {
     String adPath = "LDAP://corp.com"; //Fully-qualified Domain Name
     LdapAuthentication adAuth = new LdapAuthentication(adPath);
     try
     {
       if(true == adAuth.IsAuthenticated(txtDomain.Text, txtUsername.Text, txtPassword.Text))
       {
         String groups = adAuth.GetGroups();
   
         //Create the ticket, and add the groups.
         bool isCookiePersistent = chkPersist.Checked;
         FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1,  txtUsername.Text,
   	DateTime.Now, DateTime.Now.AddMinutes(60), isCookiePersistent, groups);
   	
         //Encrypt the ticket.
         String encryptedTicket = FormsAuthentication.Encrypt(authTicket);
   		
         //Create a cookie, and then add the encrypted ticket to the cookie as data.
         HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
   
         if(true == isCookiePersistent)
   	authCookie.Expires = authTicket.Expiration;
   				
         //Add the cookie to the outgoing cookies collection.
         Response.Cookies.Add(authCookie);		
   
         //You can redirect now.
         Response.Redirect(FormsAuthentication.GetRedirectUrl(txtUsername.Text, false));
       }
       else
       {
         errorLabel.Text = "Authentication did not succeed. Check user name and password.";
       }
     }
     catch(Exception ex)
     {
       errorLabel.Text = "Error authenticating. " + ex.Message;
     }
   }
   </script>

6. ÔñïðïðïéÞóôå ôç äéáäñïìÞ óôç óåëßäá Logon.aspx ãéá íá óáò Ï äéáêïìéóôÞò êáôáëüãïõ LDAP.

ÅðéóôñïöÞ óôçí áñ÷Þ

ÔñïðïðïéÞóôå ôç óåëßäá áñ÷åßï WebForm1.aspx

1. Óôçí Åîåñåýíçóç ëýóç, êÜíôå äåîéü êëéê Áñ÷åßï WebForm1.aspx, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ÐñïâïëÞ "Ó÷åäßáóç".
2. ÊÜíôå êëéê óôçí åðéëïãÞ ôïõ HTML óôçí êáñôÝëá óôç ó÷åäßáóç.
3. ÁíôéêáôáóôÞóåôå ôïí õðÜñ÷ïíôá êþäéêá ìå ôïí ðáñáêÜôù êþäéêá.

   <%@ Page language="c#" AutoEventWireup="true" %>
   <%@ Import Namespace="System.Security.Principal" %>
   <html>
     <body>	
       <form id="Form1" method="post" runat="server">
         <asp:Label ID="lblName" Runat=server /><br>
         <asp:Label ID="lblAuthType" Runat=server />
       </form>	
     </body>
   </html>
   <script runat=server>
   void Page_Load(Object sender, EventArgs e)
   {
     lblName.Text = "Hello " + Context.User.Identity.Name + ".";
     lblAuthType.Text = "You were authenticated using " +   Context.User.Identity.AuthenticationType + ".";
   }
   </script>
   					

4. ÁðïèÞêåõóç üëùí ôùí áñ÷åßùí êáé óôç óõíÝ÷åéá íá ìåôáãëùôôßóåôå ôï Ýñãï.
5. Áßôçóç óåëßäáò áñ÷åßï WebForm1.aspx. ÐáñáôçñÞóôå üôé åßóôå áíáêáôåýèõíóç Logon.aspx.
6. ÐëçêôñïëïãÞóôå ôéò ðéóôïðïéÞóåéò óýíäåóçò êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðß ÕðïâïëÞ. Óçìåéþóôå üôé üôáí ãßíåôáé áíáêáôåýèõíóç óôï áñ÷åßï WebForm1.aspx, óáò ÷ñÞóôç ôï üíïìá åìöáíßæåôáé êáé üôé LdapAuthentication åßíáé ï ôýðïò åëÝã÷ïõ ôáõôüôçôáò ãéá ôï Context.User.AuthenticationType ç éäéüôçôá.

ÅðéóôñïöÞ óôçí áñ÷Þ