active directory - Issue Querying LDAP DirectoryEntry in ASP.NET -
i have users login application via active directory , pull ad information garner information user so:
dim id formsidentity = directcast(user.identity, formsidentity) dim ticket formsauthenticationticket = id.ticket dim addirectory new directoryentry("ldap://dc=my,dc=domain,dc=com") dim adticketid string = ticket.name.substring(0, 5) session("people_id") = addirectory.children.find("cn=" & adticketid).properties("employeeid").value session("person_name") = addirectory.children.find("cn=" & adticketid).properties("displayname").value
now, want able impersonate other users...so can "test" application them, added textbox , button page , when button clicked text assigned session variable so:
session("impersonate_user") = textbox1.text
when page reloads check see if session("impersonate_user") has value other "" , attempt query active directory using session variable so:
if cstr(session("impersonate_user")) <> "" dim addirectory new directoryentry(ldap://dc=my,dc=domain,dc=com") dim adticketid string = cstr(session("impersonate_user")) session("people_id") = addirectory.children.find("cn=" & adticketid).properties("employeeid").value session("person_name")= addirectory.children.find("cn=" & adticketid).properties("displayname").value else [use actual ticket.name info.] end if
but doesn't work. instead, throws error on first session line stating, "directoryservicescomexception unhandled user code there no such object on server." why? know i'm giving valid username! strange happening in casting of session? code same between each method except in 1 method rather pulling ticket.name pull session variable login i'll looking ad.
maybe identity process running under needs permissions access active directory. changing identity application runs under in iis application pool.
what entered in textbox?
Comments
Post a Comment