Ðþò íá ðñáãìáôïðïéÞóïõí Ýëåã÷ï ôáõôüôçôáò óå õðçñåóßá êáôáëüãïõ Active Directory ÷ñçóéìïðïéþíôáò Ýëåã÷ï ôáõôüôçôáò öïñìþí êáé Visual Basic .NET

ÅðéóôñïöÞ óôçí áñ÷Þ

Äçìéïõñãßá ìéáò åöáñìïãÞò Web ôïõ ASP.NET óôï Visual Basic .NET

1. ÎåêéíÞóôå ôï Microsoft Visual Studio .NET.
2. Óôï äéáêïìéóôÞFILEìåíïý, óçìåßïÍÝá, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÔï Ýñãï.
3. ÊÜíôå êëéê¸ñãá ôçò Visual BasicunderÔýðïé Ýñãïõ, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÅöáñìïãÞ Web ôïõ ASP.NETunderÐñüôõðá.
4. ÓôïÈÝóçðëçêôñïëïãÞóôåhttp:// <servername>/ FormsAuthAd</servername>(ÁíôéêáôÜóôáóçhttp://localhostÅÜí ÷ñçóéìïðïéåßôå ôïí ôïðéêü äéáêïìéóôÞ (þóôå íá Ý÷ïõíhttp://localhost/FormsAuthAd, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßOk.
5. ÊÜíôå äåîéü êëéê óôïÁíáöïñÝòêüìâïò óôï Solution Explorer êáé óôç óõíÝ÷åéá êÜíôå êëéêÐñïóèÞêç áíáöïñÜò.
6. Óôï äéáêïìéóôÞ.NETêáñôÝëá ìå ôïÐñïóèÞêç áíáöïñÜòðáñÜèõñï äéáëüãïõ, êÜíôå êëéê óôï êïõìðßSystem.DirectoryServices.dllÊÜíôå êëéêÅðéëïãÞ, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßOk.

ÅðéóôñïöÞ óôçí áñ÷Þ

ÃñÜøôå ôïí êùäéêü åëÝã÷ïõ ôáõôüôçôáò

1. Óôçí Åîåñåýíçóç ôùí ëýóåùí, êÜíôå äåîéü êëéê óôïí êüìâï ôïõ Ýñãïõ, ôïðïèåôÞóôå ôï äåßêôçADD, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÐñïóèÞêç íÝïõ óôïé÷åßïõ.
2. ÊÜíôå êëéêCLASSunderÐñüôõðá.
3. TYPELdapAuthentication.vbÓôïNAMEðëáßóéï êáé óôç óõíÝ÷åéá êÜíôå êëéêOpen.
4. ÁíôéêáôÜóôáóç ôïõ õðÜñ÷ïíôïò êþäéêá óôï áñ÷åßï LdapAuthentication.vb ìå ôïí áêüëïõèï êþäéêá:

   Imports System
   Imports System.Text
   Imports System.Collections
   Imports System.DirectoryServices
   
   Namespace FormsAuth
       Public Class LdapAuthentication
   
           Dim _path As String
           Dim _filterAttribute As String
   
           Public Sub New(ByVal path As String)
               _path = path
           End Sub
   
           Public Function IsAuthenticated(ByVal domain As String, ByVal username As String, ByVal pwd As String) As Boolean
   
               Dim domainAndUsername As String = domain & "\" & username
               Dim entry As DirectoryEntry = New DirectoryEntry(_path, domainAndUsername, pwd)
   
               Try
                   'Bind to the native AdsObject to force authentication.			
                   Dim obj As Object = entry.NativeObject
                   Dim search As DirectorySearcher = New DirectorySearcher(entry)
   
                   search.Filter = "(SAMAccountName=" & username & ")"
                   search.PropertiesToLoad.Add("cn")
                   Dim result As SearchResult = search.FindOne()
   
                   If (result Is Nothing) Then
                       Return False
                   End If
   
                   'Update the new path to the user in the directory.
                   _path = result.Path
                   _filterAttribute = CType(result.Properties("cn")(0), String)
   
               Catch ex As Exception
                   Throw New Exception("Error authenticating user. " & ex.Message)
               End Try
   
               Return True
           End Function
   
           Public Function GetGroups() As String
               Dim search As DirectorySearcher = New DirectorySearcher(_path)
               search.Filter = "(cn=" & _filterAttribute & ")"
               search.PropertiesToLoad.Add("memberOf")
               Dim groupNames As StringBuilder = New StringBuilder()
   
               Try
                   Dim result As SearchResult = search.FindOne()
                   Dim propertyCount As Integer = result.Properties("memberOf").Count
   
                   Dim dn As String
                   Dim equalsIndex, commaIndex
   
                   Dim propertyCounter As Integer
   
                   For propertyCounter = 0 To propertyCount - 1
                       dn = CType(result.Properties("memberOf")(propertyCounter), String)
   
                       equalsIndex = dn.IndexOf("=", 1)
                       commaIndex = dn.IndexOf(",", 1)
                       If (equalsIndex = -1) Then
                           Return Nothing
                       End If
   
                       groupNames.Append(dn.Substring((equalsIndex + 1), (commaIndex - equalsIndex) - 1))
                       groupNames.Append("|")
                   Next
   
               Catch ex As Exception
                   Throw New Exception("Error obtaining group names. " & ex.Message)
               End Try
   
               Return groupNames.ToString()
           End Function
       End Class
   End Namespace
   
   
   					

ÅðåîÞãçóç ôïõ êùäéêïý

¸ëåã÷ïò ôáõôüôçôáò ÷ñÞóôç

ÏìÜäåò ÷ñçóôþí

CN=...,...,DC=domain,DC=com
				

ÅðéóôñïöÞ óôçí áñ÷Þ

Write the Global.asax Code

1. Óôçí Åîåñåýíçóç ôùí ëýóåùí, êÜíôå äåîéü êëéêGlobal.asax, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÐñïâïëÞ êþäéêá.
2. Add the following code at the top of the code, behind the Global.asax.vb file:

   Imports System.Web.Security
   Imports System.Security.Principal
   					

3. Replace the existing empty event handler for theApplication_AuthenticateRequestìå ôïí áêüëïõèï êþäéêá:

   Sub Application_AuthenticateRequest(ByVal sender As Object, ByVal e As EventArgs)
           ' Fires upon attempting to authenticate the use
           Dim cookieName As String = FormsAuthentication.FormsCookieName
           Dim authCookie As HttpCookie = Context.Request.Cookies(cookieName)
   
           If (authCookie Is Nothing) Then
               'There is no authentication cookie.
               Return
           End If
   
           Dim authTicket As FormsAuthenticationTicket = Nothing
   
           Try
               authTicket = FormsAuthentication.Decrypt(authCookie.Value)
           Catch ex As Exception
               'Write the exception to the Event Log.
               Return
           End Try
   
           If (authTicket Is Nothing) Then
               'Cookie failed to decrypt.
               Return
           End If
   
           'When the ticket was created, the UserData property was assigned a
           'pipe-delimited string of group names.
           Dim groups As String() = authTicket.UserData.Split(New Char() {"|"})
   
           'Create an Identity.
           Dim id As GenericIdentity = New GenericIdentity(authTicket.Name, "LdapAuthentication")
   
           'This principal flows throughout the request.
           Dim principal As GenericPrincipal = New GenericPrincipal(id, groups)
   
           Context.User = principal
   
       End Sub
   					

ÅðéóôñïöÞ óôçí áñ÷Þ

Modify the Web.config File

<?xml version="1.0" encoding="utf-8" ?>
<configuration>    
  <system.web>
    <authentication mode="Forms">
      <forms loginUrl="logon.aspx" name="adAuthCookie" timeout="60" path="/" >
      </forms>
    </authentication>	
    <authorization>	
      <deny users="?" />
      <allow users="*" />
    </authorization>	
    <identity impersonate="true" />
  </system.web>
</configuration>
				

ÅðéóôñïöÞ óôçí áñ÷Þ

Configure IIS for Anonymous Authentication

1. In the Internet Information Services (IIS) management console, right-click the Virtual Directory node for"FormsAuthAd".
2. ÊÜíôå êëéê óôçí êáñôÝëáÉäéüôçôåò (Properties), êáé óôç óõíÝ÷åéá êÜíôå êëéê óôïÁóöÜëåéá êáôáëüãïõTAB.
3. ÊÜíôå êëéêÅðåîåñãáóôåßôå ôç äéáäñïìÞunderAnonymous access and authentication control.
4. ÅðéëÝîôå ôïÁíþíõìç ðñüóâáóçÐëáßóéï åëÝã÷ïõ.
5. Make the anonymous account for the application an account that has permission to the Active Directory.
6. ÊÜíôå êëéê ãéá íá êáôáñãÞóåôå ôçí åðéëïãÞ ôïõAllow IIS To Control PasswordÐëáßóéï åëÝã÷ïõ.

ÅðéóôñïöÞ óôçí áñ÷Þ

Äçìéïõñãßá ôçò óåëßäáò Logon.aspx

1. Óôçí Åîåñåýíçóç ôùí ëýóåùí, êÜíôå äåîéü êëéê óôïí êüìâï ôïõ Ýñãïõ, ôïðïèåôÞóôå ôï äåßêôçADD, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÐñïóèÞêç öüñìáò Web.
2. TYPELogon.aspxÓôïNAMEðëáßóéï êáé óôç óõíÝ÷åéá êÜíôå êëéêOpen.
3. Óôçí Åîåñåýíçóç ôùí ëýóåùí, êÜíôå äåîéü êëéêLogon.aspx, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÐñïâïëÞ "Ó÷åäßáóç".
4. ÊÜíôå êëéê óôçí êáñôÝëáHTMLêáñôÝëá óôç ó÷åäßáóç.
5. ÁíôéêáôáóôÞóôå ôïí õðÜñ÷ïíôá êùäéêü ìå ôïí áêüëïõèï êþäéêá:

   <%@ Page language="vb" AutoEventWireup="true" %>
   <%@ Import Namespace="FormsAuthAd.FormsAuth" %>
   <html>
   	<body>
   		<form id="Login" method="post" runat="server">
   			<asp:Label ID="Label1" Runat="server">Domain:</asp:Label>
   			<asp:TextBox ID="txtDomain" Runat="server"></asp:TextBox><br>
   			<asp:Label ID="Label2" Runat="server">Username:</asp:Label>
   			<asp:TextBox ID="txtUsername" Runat="server"></asp:TextBox><br>
   			<asp:Label ID="Label3" Runat="server">Password:</asp:Label>
   			<asp:TextBox ID="txtPassword" Runat="server" TextMode="Password"></asp:TextBox><br>
   			<asp:Button ID="btnLogin" Runat="server" Text="Login" OnClick="Login_Click"></asp:Button><br>
   			<asp:Label ID="errorLabel" Runat="server" ForeColor="#ff3300"></asp:Label><br>
   			<asp:CheckBox ID="chkPersist" Runat="server" Text="Persist Cookie" />
   		</form>
   	</body>
   </html>
   <script runat="server">
   sub Login_Click(sender as object,e as EventArgs)
     Dim adPath as String = "LDAP://DC=..,DC=.." 'Path to your LDAP directory server
     Dim adAuth as LdapAuthentication = new LdapAuthentication(adPath)
     try
       if(true = adAuth.IsAuthenticated(txtDomain.Text, txtUsername.Text, txtPassword.Text)) then
         Dim groups as string = adAuth.GetGroups()
   
         'Create the ticket, and add the groups.
         Dim isCookiePersistent as boolean = chkPersist.Checked
         Dim authTicket as FormsAuthenticationTicket = new FormsAuthenticationTicket(1, _
              txtUsername.Text,DateTime.Now, DateTime.Now.AddMinutes(60), isCookiePersistent, groups)
   	
         'Encrypt the ticket.
         Dim encryptedTicket as String = FormsAuthentication.Encrypt(authTicket)
   		
         'Create a cookie, and then add the encrypted ticket to the cookie as data.
         Dim authCookie as HttpCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket)
   
         if(isCookiePersistent = true) then
   		authCookie.Expires = authTicket.Expiration
         end if				
         'Add the cookie to the outgoing cookies collection.
         Response.Cookies.Add(authCookie)	
   
         'You can redirect now.
         Response.Redirect(FormsAuthentication.GetRedirectUrl(txtUsername.Text, false))
       
       else
         errorLabel.Text = "Authentication did not succeed. Check user name and password."
       end if
    
     catch ex as Exception
       errorLabel.Text = "Error authenticating. " & ex.Message
     end try
   end sub
   </script>
   					

6. Ãéá íá ôñïðïðïéÞóåôå ôç äéáäñïìÞ óôç óåëßäá Logon.aspx þóôå íá äåß÷íåé ðñïò ôï äéáêïìéóôÞ êáôáëüãïõ LDAP.

• äçìéïõñãåß ÝíáFormsAuthenticationTicketôï áíôéêåßìåíï;
• êñõðôïãñáöåß ôï åéóéôÞñéï;
• ÐñïóèÝôåé ôï åéóéôÞñéï êñõðôïãñáöçìÝíï cookie;
• ÐñïóèÝôåé ôï cookie ôïõHttpResponse.CookiesóõëëïãÞ;
• áíáêáôåõèýíåé ôçí áßôçóç óôç äéåýèõíóç URL ðïõ æçôÞèçêå áñ÷éêÜ.

ÅðéóôñïöÞ óôçí áñ÷Þ

ÔñïðïðïéÞóôå ôç óåëßäá WebForm1.aspx

1. Óôçí Åîåñåýíçóç ôùí ëýóåùí, êÜíôå äåîéü êëéêWebForm1.aspx, êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÐñïâïëÞ "Ó÷åäßáóç".
2. ÊÜíôå êëéê óôçí êáñôÝëáHTMLêáñôÝëá óôç ó÷åäßáóç.
3. ÁíôéêáôáóôÞóôå ôïí õðÜñ÷ïíôá êùäéêü ìå ôïí áêüëïõèï êþäéêá:

   <%@ Page language="vb" AutoEventWireup="true" %>
   <%@ Import Namespace="System.Security.Principal" %>
   <html>
   	<body>
   		<form id="Form1" method="post" runat="server">
   			<asp:Label ID="lblName" Runat="server" /><br>
   			<asp:Label ID="lblAuthType" Runat="server" />
   		</form>
   	</body>
   </html>
   <script runat="server">
   sub Page_Load(sender as object, e as EventArgs)
     lblName.Text = "Hello " + Context.User.Identity.Name & "."
     lblAuthType.Text = "You were authenticated using " &   Context.User.Identity.AuthenticationType & "."
   end sub
   </script>
   					

4. Áðïèçêåýóôå üëá ôá áñ÷åßá êáé óôç óõíÝ÷åéá íá ìåôáãëùôôßóåôå ôï Ýñãï.
5. Áßôçóç ãéá ôç óåëßäá WebForm1.aspx. ÐáñáôçñÞóôå üôé èá ìåôáöåñèåßôå óå Logon.aspx.
6. ÐëçêôñïëïãÞóôå ôéò ðéóôïðïéÞóåéò óýíäåóçò êáé óôç óõíÝ÷åéá êÜíôå êëéê óôï êïõìðßÕðïâïëÞ. ¼ôáí ãßíåé áíáêáôåýèõíóç óå WebForm1.aspx, ðáñáôçñÞóôå üôé åìöáíßæåôáé ôï üíïìá ÷ñÞóôç óáò êáé ôï ïðïßïLdapAuthenticationåßíáé ï ôýðïò åëÝã÷ïõ ôáõôüôçôáò ãéá ôïContext.User.Identity.AuthenticationTypeÉäéüôçôá.

ÅðéóôñïöÞ óôçí áñ÷Þ