C# Webform中读取Windows AD/LDAP域用户清单

直接上干货，核心代码如下，读取出来相应的用户清单到DataTable中。需要其它字段可以自己增加，别忘了引用using System.DirectoryServices。

#region private DataTable GetData(int pageIndex, int pageSize, out int recordCount) 获取数据

    /// <summary>
    /// 获取数据
    /// </summary>
    private DataTable GetData(int pageIndex, int pageSize, out int recordCount)
    {
        string ldapPath = this.txtLDAPPath.Text.Trim();
        string ldapDomain = this.txtLDAPDomain.Text.Trim();
        string ldapUserName = this.txtLDAPUserName.Text.Trim();
        string ldapPassword = this.txtLDAPPassword.Text.Trim();
        string searchValue = this.txtSearch.Text.Trim();

        //总记录数量
        int iRecordCount = 0;
        //BaseUserManager manager = new BaseUserManager(this.UserCenterDbHelper, this.UserInfo);
        //自定义LDAP用户表
        DataTable dtLdapUser = null;
        dtLdapUser = new DataTable();
        DataColumn[] columns =
        {
            new DataColumn(BaseUserEntity.FieldId),
            new DataColumn(BaseUserEntity.FieldUserName),
            new DataColumn(BaseUserEntity.FieldRealName),
            new DataColumn(BaseUserEntity.FieldUserFrom)
        };
        dtLdapUser.Columns.AddRange(columns);
        try
        {
            // 读取用户
            using (var de = new DirectoryEntry())
            {
                de.Path = ldapPath;
                if (!string.IsNullOrEmpty(ldapUserName))
                {
                    if (string.IsNullOrEmpty(ldapDomain))
                    {
                        de.Username = ldapUserName;
                    }
                    else
                    {
                        de.Username = ldapDomain + "\" + ldapUserName;
                    }
                }
                //密码为空就默认不验证用户密码
                if (!string.IsNullOrEmpty(ldapPassword))
                {
                    de.Password = ldapPassword;
                    de.AuthenticationType = AuthenticationTypes.Secure;
                }
                //刷新缓存
                de.RefreshCache();

                using (DirectorySearcher searcher = new DirectorySearcher())
                {
                    searcher.SearchRoot = de;
                    searcher.Filter = "(objectClass=user)";
                    searcher.SearchScope = SearchScope.Subtree;

                    //需要导入的属性
                    //登录名
                    searcher.PropertiesToLoad.Add("userprincipalname");
                    //姓名
                    searcher.PropertiesToLoad.Add("name");

                    //定义排序方式
                    searcher.Sort = new SortOption("givenName", System.DirectoryServices.SortDirection.Ascending);

                    SearchResultCollection results = searcher.FindAll();
                    int i = 0;
                    foreach (SearchResult result in results)
                    {
                        DataRow row = dtLdapUser.NewRow();

                        ResultPropertyCollection props = result.Properties;
                        string[] userNameArray = null;
                        if (props.PropertyNames != null)
                        {
                            foreach (string propName in props.PropertyNames)
                            {
                                if (propName == "userprincipalname")
                                {
                                    userNameArray = props[propName][0].ToString().Split('@');
                                    //只保留@前的用户名
                                    row[BaseUserEntity.FieldUserName] = userNameArray[0].ToString();
                                }
                                if (propName == "name")
                                {
                                    row[BaseUserEntity.FieldRealName] = props[propName][0];
                                }
                            }
                        }
                        row[BaseUserEntity.FieldUserFrom] = "AD";
                        if (userNameArray != null && !string.IsNullOrEmpty(userNameArray[0].ToString()))
                        {
                            i++;
                            row[BaseUserEntity.FieldId] = i;
                            dtLdapUser.Rows.Add(row);
                        }
                    }
                }
            }

            recordCount = dtLdapUser.Rows.Count;

        }
        catch (Exception e)
        {
            recordCount = 0;
        }
        return dtLdapUser;
    }
    #endregion

我还增加了LDAP(Windows AD域)用户一键导入的功能，截图如下，代码核心就是循环读取上述获取的DataTable，记得判断一下用户是否已经存在即可。