Forms kimlik doðrulamasý ve Visual C#. NET'i kullanarak, Active Directory karþý kimlik doðrulamasý nasýl kullanýlýr

Üste

Visual C# .NET ASP.NET Web uygulama oluþturma

1. Microsoft Visual Studio .NET'i baþlatýn.
2. Dosya menüsünde Yeni ' nin üzerine gelin ve sonra Project ' i týklatýn.
3. Project Types altýnda Visual C# Projects ' ý týklatýn ve ASP.NET Web uygulamasýþablonlarý altýnda týklatýn.
4. Konum kutusunda WebApplication1 FormsAuthAd ile deðiþtirin.
5. Tamam ' ý týklatýn.
6. Solution Explorer <a1>Baþvurular</a1> düðümünü sað týklatýn ve sonra da Add Reference</a1>'ý týklatýn.
7. .NET sekmesinde <a0>Baþvuru Ekle</a0> iletiþim kutusunda, System.DirectoryServices.dll ' ý týklatýn, sonra da Seç ' i týklatýn ve sonra Tamam ' ý týklatýn.

Üste

Kimlik doðrulama kodu yazýn

1. Solution Explorer'da (Çözüm Gezgini), proje düðümünü sað týklatýn, sonra da Ekle iþaret ve sonra Yeni Öðe Ekle'yi týklatýn.
2. Sýnýfþablon altýnda'ý týklatýn.
3. LdapAuthentication.cs ' ý <a2>ad</a2> kutusuna yazýn ve Aç ' ý týklatýn.
4. Varolan LdapAuthentication.cs dosyasýndaki kodu aþaðýdaki kodla deðiþtirin.

   using System;
   using System.Text;
   using System.Collections;
   using System.DirectoryServices;
   
   namespace FormsAuth
   {	
     public class LdapAuthentication
     {
       private String _path;
       private String _filterAttribute;
   
       public LdapAuthentication(String path)
       {
         _path = path;
       }
   		
       public bool IsAuthenticated(String domain, String username, String pwd)
       {
         String domainAndUsername = domain + @"\" + username;
         DirectoryEntry entry = new DirectoryEntry(_path, domainAndUsername, pwd);
   			
         try
         {	//Bind to the native AdsObject to force authentication.			
            Object obj = entry.NativeObject;
   
   	DirectorySearcher search = new DirectorySearcher(entry);
   
   	search.Filter = "(SAMAccountName=" + username + ")";
   	search.PropertiesToLoad.Add("cn");
   	SearchResult result = search.FindOne();
   
   	if(null == result)
   	{
     	  return false;
   	}
   
   	//Update the new path to the user in the directory.
   	_path = result.Path;
   	_filterAttribute = (String)result.Properties["cn"][0];
         }
         catch (Exception ex)
         {
           throw new Exception("Error authenticating user. " + ex.Message);
         }
   
   	return true;
        }
   
        public String GetGroups()
        {
          DirectorySearcher search = new DirectorySearcher(_path);
          search.Filter = "(cn=" + _filterAttribute + ")";
          search.PropertiesToLoad.Add("memberOf");
          StringBuilder groupNames = new StringBuilder();
   
          try
          {
            SearchResult result = search.FindOne();
   
   	 int propertyCount = result.Properties["memberOf"].Count;
   
      	 String dn;
   	 int equalsIndex, commaIndex;
   				
   	 for(int propertyCounter = 0; propertyCounter < propertyCount; propertyCounter++)
   	 {
   	   dn = (String)result.Properties["memberOf"][propertyCounter];
   
       	   equalsIndex = dn.IndexOf("=", 1);
   	   commaIndex = dn.IndexOf(",", 1);
   	   if(-1 == equalsIndex)
   	   {
   	     return null;
        	   }
   
              groupNames.Append(dn.Substring((equalsIndex + 1), (commaIndex - equalsIndex) - 1));
   	   groupNames.Append("|");
   
       	 }
          }
          catch(Exception ex)
          {
            throw new Exception("Error obtaining group names. " + ex.Message);
          }			
          return groupNames.ToString();
        }
      }
   }
   					

CN=...,...,DC=domain,DC=com
				

Üste

Global.asax kod yazma

1. Solution Explorer'da (Çözüm Gezgini), Global.asax ' ý sað týklatýn ve Kod Görüntüle</a1>'ý týklatýn.
2. Üst kodunun - Global.asax.cs dosya arkasýnda aþaðýdaki kodu ekleyin:

   using System.Web.Security;
   using System.Security.Principal;
   					

3. Varolan boþ olay iþleyici için Application_AuthenticateRequest aþaðýdaki kodla deðiþtirin.

   void Application_AuthenticateRequest(Object sender, EventArgs e)
   {
     String cookieName = FormsAuthentication.FormsCookieName;
     HttpCookie authCookie = Context.Request.Cookies[cookieName];
   
     if(null == authCookie)
     {//There is no authentication cookie.
       return;
     }	
   		
     FormsAuthenticationTicket authTicket = null;
   	
     try
     {
       authTicket = FormsAuthentication.Decrypt(authCookie.Value);
     }
     catch(Exception ex)
     {
       //Write the exception to the Event Log.
       return;
     }
   	
     if(null == authTicket)
     {//Cookie failed to decrypt.
       return;		
     }		
   	
     //When the ticket was created, the UserData property was assigned a
     //pipe-delimited string of group names.
     String[] groups = authTicket.UserData.Split(new char[]{'|'});
   
     //Create an Identity.
     GenericIdentity id = new GenericIdentity(authTicket.Name, "LdapAuthentication");
   	
     //This principal flows throughout the request.
     GenericPrincipal principal = new GenericPrincipal(id, groups);
   
     Context.User = principal;
   	
   }
   					

Üste

Web.config dosyasýný deðiþtirme

<?xml version="1.0" encoding="utf-8" ?>
<configuration>    
  <system.web>
    <authentication mode="Forms">
      <forms loginUrl="logon.aspx" name="adAuthCookie" timeout="10" path="/" >
      </forms>
    </authentication>	
    <authorization>	
      <deny users="?" />
      <allow users="*" />
    </authorization>	
    <identity impersonate="true" />
  </system.web>
</configuration>
				

Üste

IIS anonim kimlik doðrulamasý için yapýlandýrma

1. ýýs'de, sunucu bilgisayarýn düðümünü geniþletin, Web sitelerini geniþletin, Varsayýlan Web sitesi ' ni geniþletin, FormsAuthAd ' ý sað týklatýn ve sonra da Properties ' i týklatýn.
2. Dizin Güvenliði sekmesi týklatýn ve sonra Anonim eriþim ve doðrulama denetimi altýnda Düzenle ' yi týklatýn.
3. Uygulama anonim hesap için Active Directory iznine sahip bir hesabýn olun.
4. IIS denetim parolasý izin ver</a0> onay kutusunu týklatýp temizleyin.
5. “ Kimliði doðrulanmýþ eriþim ” bölümünde “ tümleþik Windows kimlik doðrulamasý ” onay kutusunun iþaretini kaldýrýn.
6. Tamam'ý týklatýn.
7. Uygula'yý týklatýn

Üste

Logon.aspx sayfasýna oluþturma

1. Solution Explorer'da (Çözüm Gezgini), proje düðümünü sað týklatýn, sonra da Ekle iþaret ve Web formu Ekle</a1>'ý týklatýn.
2. Logon.aspx <a2>ad</a2> kutusuna yazýn ve sonra Aç ' ý týklatýn.
3. Solution Explorer'da (Çözüm Gezgini), Logon.aspx ' ý sað týklatýn ve sonra da Görünüm Designer ' ý týklatýn.
4. Tasarýmcý <a1>HTML</a1> sekmesini týklatýn.
5. Replace the existing code with the following code.

   <%@ Page language="c#" AutoEventWireup="true" %>
   <%@ Import Namespace="FormsAuth" %>
   <html>
     <body>	
       <form id="Login" method="post" runat="server">
         <asp:Label ID="Label1" Runat=server >Domain:</asp:Label>
         <asp:TextBox ID="txtDomain" Runat=server ></asp:TextBox><br>    
         <asp:Label ID="Label2" Runat=server >Username:</asp:Label>
         <asp:TextBox ID=txtUsername Runat=server ></asp:TextBox><br>
         <asp:Label ID="Label3" Runat=server >Password:</asp:Label>
         <asp:TextBox ID="txtPassword" Runat=server TextMode=Password></asp:TextBox><br>
         <asp:Button ID="btnLogin" Runat=server Text="Login" OnClick="Login_Click"></asp:Button><br>
         <asp:Label ID="errorLabel" Runat=server ForeColor=#ff3300></asp:Label><br>
         <asp:CheckBox ID=chkPersist Runat=server Text="Persist Cookie" />
       </form>	
     </body>
   </html>
   <script runat=server>
   void Login_Click(Object sender, EventArgs e)
   {
     String adPath = "LDAP://corp.com"; //Fully-qualified Domain Name
     LdapAuthentication adAuth = new LdapAuthentication(adPath);
     try
     {
       if(true == adAuth.IsAuthenticated(txtDomain.Text, txtUsername.Text, txtPassword.Text))
       {
         String groups = adAuth.GetGroups();
   
         //Create the ticket, and add the groups.
         bool isCookiePersistent = chkPersist.Checked;
         FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1,  txtUsername.Text,
   	DateTime.Now, DateTime.Now.AddMinutes(60), isCookiePersistent, groups);
   	
         //Encrypt the ticket.
         String encryptedTicket = FormsAuthentication.Encrypt(authTicket);
   		
         //Create a cookie, and then add the encrypted ticket to the cookie as data.
         HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
   
         if(true == isCookiePersistent)
   	authCookie.Expires = authTicket.Expiration;
   				
         //Add the cookie to the outgoing cookies collection.
         Response.Cookies.Add(authCookie);		
   
         //You can redirect now.
         Response.Redirect(FormsAuthentication.GetRedirectUrl(txtUsername.Text, false));
       }
       else
       {
         errorLabel.Text = "Authentication did not succeed. Check user name and password.";
       }
     }
     catch(Exception ex)
     {
       errorLabel.Text = "Error authenticating. " + ex.Message;
     }
   }
   </script>

6. Logon.aspx sayfasýnda, LDAP Dizin sunucusuna iþaret edecek biçimde yolu deðiþtirin.

Üste

WebForm1.aspx sayfasýný deðiþtirme

1. Solution Explorer'da (Çözüm Gezgini), WebForm1.aspx dosyasýný sað týklatýn ve Görünüm Tasarýmcýsý</a1>'ý týklatýn.
2. Tasarýmcý <a1>HTML</a1> sekmesini týklatýn.
3. Aþaðýdaki code.

   <%@ Page language="c#" AutoEventWireup="true" %>
   <%@ Import Namespace="System.Security.Principal" %>
   <html>
     <body>	
       <form id="Form1" method="post" runat="server">
         <asp:Label ID="lblName" Runat=server /><br>
         <asp:Label ID="lblAuthType" Runat=server />
       </form>	
     </body>
   </html>
   <script runat=server>
   void Page_Load(Object sender, EventArgs e)
   {
     lblName.Text = "Hello " + Context.User.Identity.Name + ".";
     lblAuthType.Text = "You were authenticated using " +   Context.User.Identity.AuthenticationType + ".";
   }
   </script>
   					

4. Tüm dosyalarý kaydedin ve sonra Projeyi derleyin.
5. WebForm1.aspx sayfa isteyin. Logon.aspx için yönlendirileceði dikkat edin.
6. Oturum açma kimlik bilgilerini yazýn ve ardýndan Gönder ' i týklatýn. WebForm1.aspx yeniden yönlendirilmesi sýrasýnda kullanýcý adýnýzý görünür dikkat edin ve LdapAuthentication kimlik olduðunu Context.User.AuthenticationType özelliði için yazýn.

Üste