使用 LDAP/AD 设置静默身份验证
任何人都可以帮助解决上述问题。我们正在使用名为 Immediacy 的 CMS 产品，该产品声称可以使用 LDAP/AD 处理静默身份验证，但就是无法让其正常工作。
忽略即时性，任何人都可以向我指出一篇好文章或帖子，其中列出了执行上述操作的步骤（假设可以实现）吗？
基本上，我们需要保护内联网上的页面，而且，由于我们公司充满了“没有时间登录”的“非常重要的人”，这几乎是一项基本要求。
提前致谢。 抢
Can anybody help with the above. We're using a CMS product called Immediacy, which claims it can handle silent authentication using LDAP / AD but just can't get the thing to work.
Ignoring Immediacy, can anybody point me to a good article or post that lays out the steps to do the above (assuming it's achievable)?
Basically, we need to secure pages on our intranet, and, as our firm is full of 'very important people' who 'don't have time to log in' this is an almost essential requirement.
Thanks in advance.
Rob
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
System.DirectoryServices就是你用什么就用什么。它允许您创建一个DirectoryEntry对象，该对象将 LDAP 服务器的位置、用户名和密码作为构造函数。实例化 DirectoryEntry 对象后，您可以检查其
Children集合是否为null；如果是，则意味着该用户不存在并且不应被授予访问权限。如果您愿意，您可以比这更高级，因为
Children集合返回 LDAP 中为该个体设置的所有属性（包括自定义属性），并且获得比“存在或不存在”更大的访问粒度，但是这将帮助您开始。关于即时性，它可能无法自动知道您的 LDAP 服务器所在的位置，因此可能是某个位置的设置未正确配置。
System.DirectoryServicesis what you what to use. It lets you create aDirectoryEntryobject which takes the location of your LDAP server, the username and password as constructors.Once you've instantiated your DirectoryEntry object, you can check to see if its
Childrencollection isnullor not; if it is, that means the user isn't there and shouldn't be granted access.You can go fancier than that if you want, since the
Childrencollection returns all the properties set for that individual in LDAP (including custom ones), and get greater access granularity than "there or not", but this will get you started.Regarding Immediacy, it probably can't automatically know where your LDAP server is located, so it may be that that's a setting somewhere that isn't configured properly.