Reading Active Directory parameters on ASP.net

Question

0.00/5 (No votes)

See more:

Hi ,
I Stuck in Somthing :

I wanna Read an attribute which is related with logged on user which is Employee ID ,
My Code is :
Importing two libraries :

VB

Imports System.Security.Principal
Imports System.DirectoryServices.AccountManagement

Then Reading Parameter EmployeeID :

VB

Dim currentADUser As System.DirectoryServices.AccountManagement.UserPrincipal
currentADUser = System.DirectoryServices.AccountManagement.UserPrincipal.Current



Session("UserEmpID") = currentADUser.EmployeeId

When I Run this on visual studio , it works Perfectly , but when I Published it on IIS , this Error Shown :

Unable to cast object of type 'System.DirectoryServices.AccountManagement.GroupPrincipal' to type 'System.DirectoryServices.AccountManagement.UserPrincipal'

When I searched deep I find out that this website should have a credential to access Active Directory database , but how I couldn't know.

Please help I Am Stuck.

Thanks

Posted 29-Nov-15 1:53am

besthms

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

besthms · Accepted Answer · 2015-12-16T23:03:00

I found the solution:
First : IIS authentication should be Windows Authentication
Second : a Domain user should be inserted in web.config in this format :

HTML

<configuration><appsettings>
   <add key="LDAPsvcAcct" value="domain\username" />
   <add key="LDAPsvcPass" value="user_password" />
    </appsettings></configuration>

Third : then you can use this code:

VB

Dim Username As String = ""
       Dim identityName = User.Identity.Name


       Using HostingEnvironment.Impersonate()
           Using context = New PrincipalContext(ContextType.Domain, "Domain.com", Nothing, ContextOptions.Negotiate Or ContextOptions.SecureSocketLayer)
               Using userPrincipal__1 = UserPrincipal.FindByIdentity(context, IdentityType.SamAccountName, identityName)
                   EmpID = userPrincipal__1.EmployeeId
                   Session("EmpID") = userPrincipal__1.EmployeeId 'To Read attributes
                   Username = userPrincipal__1.DisplayName
               End Using
           End Using
       End Using