将我的应用程序与Active Directory同步 [英] Syncing my Application with Active Directory

问题描述

您好，



我有一个应用程序，它有自己的数据库和身份验证方案logion（表单身份验证）

现在出现了需要与Active Directory集成。

我对这个主题进行了一些研究，发现首先要从AD存储用户帐户的GUID。我需要做的是在AD和我的应用程序之间进行同步。



我看到我需要在sql server和sql作业中使用CLR库来定期同步AD和用户数据库之间的帐户。



我也可以使用一个组，clr库可以查找，拉入所有成员，然后自动同步 - 这是更新/创建/非活动帐户根据他们的所有权AD组。然后管理员只需要在AD中创建用户，授予他们访问该组的权限，并等待该作业开始。 （或者手动开始）



但我不知道如何解决这个问题。我想就这个主题提供一些指导，从哪里开始，如果已经有我应该开始的教程。

注意：我正在使用asp.net（会员）数据库和我的数据库与用户合作并为他们提供角色，权限等。

Hello,

I have an application with its own database and authentication scheme logion (form authentication)
now appeared a need for integration with Active Directory.
I did some research on the subject and saw that first have to store the GUID of the User's account from AD. I need to do is sync between AD and my application.

I saw that I need to use a CLR library within sql server and a sql job to periodically sync accounts between AD and the user database.

also i could use a group, which the clr library can look for, pull in all the members, and then automatically sync - that is update/create/deactive accounts according to their ownership of the AD group. Then the admin will only need to create the user in AD, give them access to the group, and wait for the job to kick off. (or go kick it off manually)

but I do not know how to solve this problem. I would like some guidance on this subject, where to start, if there is already a tutorial where I should start.
Note:i'm using the database of asp.net (membership) along with my database to work with users and provide them with the roles, permissions, among others.

推荐答案

这篇关于将我的应用程序与Active Directory同步的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！