检查 Active Directory 角色花费的时间太长

发布于 2024-11-26 04:23:09 字数 714 浏览 0 评论 0原文

我有这段代码来检查组成员资格，但似乎需要很长时间才能响应并减慢我的应用程序的速度，几乎需要 7-12 秒才能响应，我只需要检查一个特定的组成员资格，是否有更快的方法方法来做到这一点？

  public static bool isInRole(UserAccount userAccount, string groupName)
        {


            using (var ctx = new PrincipalContext(ContextType.Domain, userAccount.DomainName))
            {
                using (var grp = GroupPrincipal.FindByIdentity(ctx, IdentityType.Name, groupName))
                {
                    bool isInRole = grp != null &&
                        grp
                        .GetMembers(true)
                        .Any(m => m.SamAccountName == userAccount.UserName);
                    return isInRole;
                }

            }

原文

i have this code to check for group membership but it seems to be taking too long to respond and slowing down my app, it takes almost 7-12 sec to respond, i just need to check for one particular group membership, is there a faster way to do this?

  public static bool isInRole(UserAccount userAccount, string groupName)
        {


            using (var ctx = new PrincipalContext(ContextType.Domain, userAccount.DomainName))
            {
                using (var grp = GroupPrincipal.FindByIdentity(ctx, IdentityType.Name, groupName))
                {
                    bool isInRole = grp != null &&
                        grp
                        .GetMembers(true)
                        .Any(m => m.SamAccountName == userAccount.UserName);
                    return isInRole;
                }

            }

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

呆° 2024-12-03 04:23:09

我手头没有您的特定 AD 来测试这一点 - 但可能值得一试：与其检查特定用户的组成员（可能有数千名成员），不如检查用户的组成员身份以查看用户是否拥有正确的组？

比如：

public static bool isInRole(UserAccount userAccount, string groupName)
{
   using (var ctx = new PrincipalContext(ContextType.Domain, userAccount.DomainName))
   using (var user = UserPrincipal.FindByIdentity(ctx, userAccount.UserName))
   {
      bool isInRole = user != null &&
                      user.GetAuthorizationGroups()
                      .Any(g => g.Name == groupName);
      return isInRole;
   }
}

也许这样事情会更快一点？

I don't have your specific AD at hand to test this - but it might be worth an attempt: instead of checking the group's members for a particular users (there could potentially be thousands of members), why don't you check the user's group membership to see if the user has the right group??

Something like :

public static bool isInRole(UserAccount userAccount, string groupName)
{
   using (var ctx = new PrincipalContext(ContextType.Domain, userAccount.DomainName))
   using (var user = UserPrincipal.FindByIdentity(ctx, userAccount.UserName))
   {
      bool isInRole = user != null &&
                      user.GetAuthorizationGroups()
                      .Any(g => g.Name == groupName);
      return isInRole;
   }
}

Maybe that way around things will be a bit faster?

回复收藏 0 原文