Active Directory 自定义用户配置文件/属性？
我目前仅使用 ActiveDirectoryMembershipProvider 对 asp.net 内置的内部业务应用程序进行身份验证。这就像一个魅力。
我现在希望添加一些功能来处理用户的自定义配置文件信息，最好也存储在 Active Directory 中。
举一个简单的例子，我们假设自定义属性是FavoriteColor。然后，我的应用程序的目标是能够读取经过身份验证的用户的此自定义属性。
我对 ADAM 进行了一些研究。看起来这对于角色提供程序来说非常有用，但我还没有真正找到任何表明它对于配置文件提供程序可以很好地工作的东西，或者它是否甚至可以让我存储自定义属性（例如FavoriteColor）。也许有人更了解？
我对 Active Directory 也很陌生，所以也许甚至可以选择在其中存储自定义用户属性（如“FavoriteColor”）？
一般来说，我只是在寻找关于实现此目的的最佳方法的想法？
谢谢！
I am currently using the ActiveDirectoryMembershipProvider just for authentication on an internal business app built in asp.net. This works like a charm.
I am now looking to add some functionality to handle custom profile information for a user, ideally also stored in Active Directory.
For a simple example let's just say the custom attribute is FavoriteColor. Then the goal would be for my app to be able to read in this custom attribute for the authenticated user.
I have looked into ADAM a bit. That looks like it would be great for a Role Provider, but I haven't really found anything that indicates it would work well for a Profile Provider or if it would even let me store custom attributes like FavoriteColor. Maybe someone knows better?
I'm also pretty new to Active Directory so maybe there is even an option to store custom user attributes (like FavoriteColor) within it?
In general I am just looking for ideas about the best way to implement this?
Thanks!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
是的，可以向 AD 用户对象添加这样的属性，但是您必须非常谨慎。修改架构时所做的更改无法撤消。严重损坏您的 Active Directory 树太容易了。
要进行架构更改，您可以使用 Active Directory 架构编辑器 MMC 管理单元。您必须先注册该管理单元才能使用它。要注册 Active Directory 架构编辑器，请打开命令提示符，键入
regsvr32 schmmgmt.dll然后您可以在 MMC 中加载管理单元，添加新的 FavouriteColour 属性，并将其链接到用户类。
除非您真的知道自己在做什么，否则对此类字段使用数据库表可能更安全。 这个 网站有更多信息。
Yes, it is possible to add such an attribute to the AD user object, but you have to be very cautious. Changes made when modifying the schema cannot be undone. It is all too easy to severely damage your Active Directory tree.
To make schema changes, you can use the Active Directory Schema Editor MMC snap-in. You must register the snap-in before you can use it. To register the Active Directory Schema Editor, open a command prompt, type
regsvr32 schmmgmt.dllThen you can load the snap-in in MMC, add a new FavouriteColour attribute, and link it to the user class.
Unless you really know what you are doing though, it's probably safer to use a DB table for such fields. This site has some more information.