如何知道用户在Active Directory中处于活动状态还是非活动状态 [英] how to know user is active or inactive in Active Directory
问题描述
我已连接到Active Directory,因此可以验证用户名,但是我怎么知道用户在AD中是活动的还是非活动的?
I have connected to Active Directory ,so that I was validate user name, but how can I know user is active or inactive in AD?
示例代码:
private Properties properties;
private DirContext dirContext;
private SearchControls searchCtls;
private String[] returnAttributes = { "sAMAccountName", "givenName", "cn", "mail"};
private String domainBase;
private String baseFilter = "(&((&(objectCategory=Person)(objectClass=User)))";
public ActiveDirectory(String username, String password, String domainController,String url) {
properties = new Properties();
properties.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
properties.put(Context.PROVIDER_URL, url);
properties.put(Context.SECURITY_AUTHENTICATION,"simple");
properties.put(Context.SECURITY_PRINCIPAL,username+"@"+domainController);
properties.put(Context.SECURITY_CREDENTIALS, password);
//initializing active directory LDAP connection
try {
dirContext = new InitialDirContext(properties);
System.out.println("dirContext: "+dirContext);
} catch (NamingException e) {
e.printStackTrace();
log.severe(e.getMessage());
} catch (Exception e) {
e.printStackTrace();
}
domainBase = getDomainBase(domainController);
//initializing search controls
searchCtls = new SearchControls();
searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
searchCtls.setReturningAttributes(returnAttributes);
}
public NamingEnumeration<SearchResult> searchUser(String searchValue, String searchBy, String searchBase) throws NamingException {
System.out.println("search value :: "+searchValue);
System.out.println("search base111 :: "+ ((null == searchBase) ? domainBase : getDomainBase(searchBase)));
String filter = getFilter(searchValue, searchBy);
String base = (null == searchBase) ? domainBase : getDomainBase(searchBase); // for eg.: "DC=myjeeva,DC=com";
System.out.println("this.dirContext : "+this.dirContext);
return this.dirContext.search(base, filter, this.searchCtls);
}
private String getFilter(String searchValue, String searchBy) {
String filter = this.baseFilter;
if(searchBy.equals("email")) {
filter += "(mail=" + searchValue + "))";
} else if(searchBy.equals("username")) {
filter += "(samaccountname=" + searchValue + "))";
}
System.out.println("filter : "+filter);
return filter;
}
我已经使用此this.dirContext.search(base, filter, this.searchCtls);
我怎么知道用户活动或不活动?
我发现Google吸引了active
个用户(!(useraccountcontrol:1.2.840.113556.1.4.803:=2))
和deactive
个用户(useraccountcontrol:1.2.840.113556.1.4.803:=2)
如何在Java代码中实现这两个目标.
I found google to get active
users (!(useraccountcontrol:1.2.840.113556.1.4.803:=2))
and deactive
users (useraccountcontrol:1.2.840.113556.1.4.803:=2)
How to Implements those two in JAVA code.
推荐答案
1)从广告中获取"userAccountControl"属性:
1) take the "userAccountControl" attribute from the AD:
String s = (String) getAttribute(attrs, "userAccountControl");
2)将其解析为long值:
2) parse it to long value:
// 0 means not disabled (any value where value & 2 == 0 will do)
userAccountControl = StringUtils.isEmpty(s) ? 0 : Long.parseLong(s);
3)如果用户被禁用,则返回:
3) return if the user is disabled:
public boolean isDisabled() {
return ((userAccountControl & 2) != 0);
}
这篇关于如何知道用户在Active Directory中处于活动状态还是非活动状态的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!