如何进行WINDOWS集成身份验证? ( 积分: 200 )

bundur · 2005-08-17

客户机A 已经登录到域 X 问题: 在 DELPHI 中如何进行确认 A 已经登录到 X ? 还有,如果 X 相对于 A 是在一个远程域, A 先登录到本地的域, 再通过VPN登录到 X 这时在 DELPHI 中如何进行确认 A 已经登录到 X ? 不够分可再加分!

bundur · 2005-08-17

客户机A 已经登录到域 X 问题: 在 DELPHI 中如何进行确认 A 已经登录到 X ? 还有,如果 X 相对于 A 是在一个远程域, A 先登录到本地的域, 再通过VPN登录到 X 这时在 DELPHI 中如何进行确认 A 已经登录到 X ? 不够分可再加分!

chenybin · 2005-08-17

不错的问题，帮你找找资料看

chenybin · 2005-08-18

MSDN里面介绍ADSI就是所谓Active Directory Server Interfce，面向活动目录的编程接口 下面是整理的一些资料 1、获得AD对象 var  OU : OleVariant; begin  OU := GetObject("ou=Finance, dc=fabrikam, dc=com&quot

; {参数含义 User               cn Group/Container              Cn organizationalUnit           Ou Domain            Dc } 获得之后 操作      方法 Read      Get   Create    Createt Modify    Put   Delete    Delete   如果打算使用其中任何一种方法，还需要在语句中以参数的形式提供相应的信息，比如“创建什么内容？”之类的。假设现在我们要在acme.com的Marketing OU中创建一个名为MSmith的用户，我们可以使用这段代码。 OU ：=  GetObject("LDAP://ou=Marketing, dc=acme, dc=com&quot

; User := OU.Create("user", "cn=MSmith&quot

; User.Put（"sAMAccountName", "MSmith&quot

; User.SetInfo; 详细请看 http://www.zdnet.com.cn/techupdate/implement/system/windows/story/0,3800072540,39292066,00.htm 2、刚刚找到的大牛的文章，还是Delphi的，里面有介绍使用这个ADSI的 http://www.csdn.com.cn/zmogxsojxzocxvoj/sjxxouofdzdsdsdd/vfovouxzojodxvogxzxu/dfdzdsdsdj/dsdx/cxdzdsdsdjdsdxdcdodcdrdvdrdzdxdzdvdodjdd.html http://hubdog.csdn.net/Hubdog/AD.htm 里面写了如何获得用户，既然能获得用户了，当然知道他是否登录了，你只需要这个用户的用户名，然后去查询相应的LDAP（这里是AD）服务器就可以了，如果已经登录就不需要重新登录了 下面是个人看法： LDAP的目的似乎为了单点登录，用户共享，某个LDAP服务器开起来之后，其他系统就可以不用自己建立用户权限了，因为这个LDAP服务器里面有了用户权限，只要引用就可以了，用户只要在一个地方登录，其他的地方就不需要重复登录了，所以如果能直接使用LDAP的服务协议可能根好，就象HTTP协议，FTP协议那样。这些估计是废话了，抛砖引玉，等楼下个高手

Bruce.xm · 2005-08-18

思路是对的，使用API取得连接相应的接口，不过GetObject是VB的。 你可以用ADsGetObject等系列的API。 有Delphi已经写好的API，要得话给个email，给你发过去

bundur · 2005-08-22

多谢上述各位指点, 但 ADsGetObject 只能取得域上的用户, 并不能说明当前用户是否登录,并且, 不是所有的用户都可以取得域的用户.

Bruce.xm · 2005-08-30

看来你还是不明白，去好好看看Binding to AD，怎样使用ADsGetObject、ADsOpenObject，DsBind等也瞧瞧

bundur · 2005-08-31

to: Bruce.xm, 您可能误解我的意思了, 我的目的是做到当一个用户登录后, 把他登录所用的用户名发到目标域上进行验证, 看他当前登录的域是否就是该域. 比如, 用户 A 在域 Y 上有用户名, 但操作员 M 没有用户 A 在 Y 上的密码, 并想进入 XXX 系统, 可该系统是WINDOWS集成身份验证的, 这时如果 M 就在域 Z 上创建了一个用户 A, 他登录到 Z 上了, XXX系统进行身份验证时, 如何确认 A 登录的不是 Y 域, 以拒绝 A 运行系统 ? 现在我要做的就是 XXX 系统的身份验证模块, 如何实现? 另. 我的 Email 地址是: ben1999@21cn.com 烦请把相关API发给我, 谢谢

Bruce.xm · 2005-09-01

NetWkstaUserGetInfo可以让你取得当前登陆的User和Domain和Server

Bruce.xm · 2005-09-01

WKSTA_USER_INFO_1 ------------------------- wkui1_username Specifies the name of the user currently logged on to the workstation. wkui1_logon_domain Specifies the name of the domain in which the user is currently logged on. wkui1_oth_domains Specifies the list of operating system domains browsed by the workstation. The domain names are separated by blanks. wkui1_logon_server Specifies the name of the server that authenticated the user.

willing66 · 2005-09-01

我的 Email 地址是: willing66@163.com 烦请把相关API发给我, 谢谢

chenybin · 2005-09-01

邮件已发，希望对你有用

bundur · 2005-09-02

NetWkstaUserGetInfo 取不到 9x 下的登录用户．因为它只适用于 NT 架构的平台

keer5201314 · 2005-09-02

欢迎加入Borland 一线程序员，参与群里技术讨论！欢迎女孩子，也欢迎男孩子参与技术讨论！群号15154361

Bruce.xm · 2005-09-02

这个好办，你参考下以下就可以了，祝你好运： Determining the Validating Server on Windows 95/98/Me Determining the Windows Server 2003 family, Windows 2000, or Windows NT domain server that validates a user's logon password from Windows 95/98/Me is an involved task. The code sample in this topic demonstrates how to determine the validating server for a Windows Me/98/95 user, using the 16-bit network management functions. On Windows Server 2003 family, Windows XP, Windows 2000, and Windows NT, the 32-bit NetWkstaUserGetInfo function determines the validating server. The function uses level 1 to return a WKSTA_USER_INFO_1 structure. The wkui1_logon_server member will contain a pointer to a Unicode string specifying the validating server. On Windows Me/98/95, there is no 32-bit function that will return the same information. You must use the 16-bit network management functions to retrieve the same information. The functions are exported from Netapi.dll. The link libraries are included with the 16-bit version of Microsoft&reg; Visual C++ (version 1.5x). To determine the validating server on Windows Me/98/95 Use the following basic steps, making calls to the 16-bit network management functions: 1、Determine the user's logon domain using NetWkstaGetInfo. 2、Find the primary domain controller (PDC) using NetGetDCName. 3、Get the user information from the PDC for comparison to the backup domain controller (BDC) data using NetUserGetInfo. 4、Get a list of BDCs using the NetServerEnum function. 5、Loop through the list of BDCs, using NetUserGetInfo to retrieve the specific user information, comparing each last logon time, searching for the greatest value. The largest last logon value will be the latest logon time; it will be associated with the last server to validate the user's logon password.

Bruce.xm · 2005-09-02

它的例子也给你： #include <windows.h> #include <stdio.h> #include <string.h> #include <stdlib.h> #include <time.h> #define INCL_NET #include <lan.h> // Constant definitions. #define LEVEL_01 1 #define LEVEL_11 11 #define LEVEL_10 10 #define LEVEL_00 0 #define SMALL_BUFFER 1024 #define MEDIUM_BUFFER 4*1024 #define SERVER_NAME  50 // Buffer allocation performed globally for simplicity. LPSTR bdcNames[SMALL_BUFFER]; LPSTR UserData[MEDIUM_BUFFER]; LPSTR WrkSta[SMALL_BUFFER]; LPSTR pdcName[SERVER_NAME]; LPSTR servername[SERVER_NAME]; // Create a structure to hold the current server and //  the logon time so the values are together. typedef struct svr_usr {    LPSTR server;    long logon_time; } SVR_USR; // Create typedefs for the larger structure names to //  shorten the number of characters to type. typedef struct user_info_11  USER11; typedef struct wksta_info_10 WORK10; typedef struct wksta_info_1 WORK01; typedef struct server_info_100 SERVER100; typedef struct tm TIMER; // Declare pointers so the buffers returned from the system //  functions can be cast to an appropriate value. //   Global variable descriptions. //     Users:   Pointer to a USER_INFO_11 structure that contains user //              information about the username derived from the Wksta //              array. The element of interest is usri11_last_logon, the //              time that the server last validated the user's //              password. //     Wksta:   Pointer to the WKSTA_INFO_10 structure that contains //              information about the WFW workstation. This structure is //              filled first, and the information placed there is used //              to get additional information. The domain name is used //              to get a list of BDCs that will be queried for user //              data. The username is the element that will qualify the //              user data request. The elements of interest are //              wki10_username, the current logged-on user, and //              wki10_logon_domain, the domain in which the user //              has logged on. //     Servers: List of BDCs for the user's logon domain. Each //              server in the array will be queried for information //              about the current logged-on user as described //              in the user's variable comments. // TIMER  *lpTime; USER11  far *Users; WORK10  far *Wksta; SERVER0 far *Servers; WORK01  far *Wksta01; char * lpszTime; // Declare values for use with the network management functions. unsigned short svrEntries; unsigned short svrRead; unsigned short usrEntries; unsigned short wkstaEntries; // Create a temporary variable to use as a loop control variable. unsigned short i; char Message[256]; // Define a global variable to hold the validating server //  and the time the user last logged on. SVR_USR validate = { NULL, 0 }; // Create a global variable for the return value of the function; //  this is used in error checking. DWORD netRet; // Bogus WinMain so you can step through the sample //  in a 16-bit debugger. int PASCAL WinMain(hInstance, hPrevInstance, lpCmdLine, nCmdShow) HANDLE hInstance;                // current instance HANDLE hPrevInstance;            // previous instance LPSTR lpCmdLine;                 // command line int nCmdShow;                    // show-window type (open/icon) {   // First, get the workstation information calling   //  the NetWkstaGetInfo function at level 10.   //  This will return the domain in which the user logged on.   netRet = NetWkstaGetInfo( NULL,  // This workstation                         LEVEL_10,  // Information requested               (char far *)WrkSta,  // Buffer                     SMALL_BUFFER,                    &wkstaEntries); // Expecting only 1 entry                               if( netRet != NERR_Success )   {      // A network error occurred. Print it to the stdout.      sprintf(Message,"ERROR: NetWkstaGetInfo API Failed. Error Code: %d/n", netRet);      MessageBox( NULL, Message, "NetWkstaGetInfo Error", MB_OK);      return(0);   }   // Now we must retrieve the BDCs and the PDC to check   //  when the last user logon was validated.   //   // The argument list is set as follows:   //   Execute on the local machine ( NULL )   //   Pass the domain name of interest (Wksta[0].wki10_logon_domain)   //   Pass a buffer to receive the PDC name   //   Pass the size of the PDC name buffer   Wksta = (WORK10 *)WrkSta;   netRet = NetGetDCName( NULL,                            Wksta[0].wki10_logon_domain,                          (char far *)pdcName,                          SERVER_NAME);   if(netRet != NERR_Success )   {      // Could not locate a PDC. Something is wrong; end the program.      sprintf(Message,"ERROR: NetGetDCName API Failed. Error Code: %d/n", netRet);      MessageBox( NULL, Message, "NetGetDCName Error", MB_OK);      return(0);   }   // We have the PDC. Now, query for the user information,   //   and store it temporarily for comparison to the BDC's data.   netRet = NetUserGetInfo( (char far *)pdcName,  // Execute on the PDC                            Wksta[0].wki10_username, // User's name                            LEVEL_11,                            (char far *)UserData, // Put structures here                            SMALL_BUFFER,                            &usrEntries); // Expecting only one entry   if( netRet != NERR_Success )   {       // No user account on the PDC. End the program.      sprintf(Message,"ERROR: NetUserGetInfo API Failed on PDC. Error Code: %d/n", netRet);      MessageBox( NULL, Message, "NetUserGetInfo Error", MB_OK);      return(0);   }   // Set the structure so the PDC is the starting validating server.   validate.server =  (char far *)pdcName;   Users = (USER11 * )UserData;   validate.logon_time = Users[0].usri11_last_logon;   // Now retrieve all of the BDCs.   netRet = NetServerEnum2(  NULL,                             LEVEL_00,                             (char far *)bdcNames,                             SMALL_BUFFER,                             &svrRead,                             &svrEntries,                             SV_TYPE_DOMAIN_BAKCTRL,                             Wksta[0].wki10_logon_domain);                               if( netRet != NERR_Success )   {      // No BDCs. This could be an error.      sprintf(Message,"ERROR: NetServerEnum2 API Failed. Error Code: %d", netRet);      MessageBox( NULL, Message, "NetServerEnum2", MB_OK);      return( 0 );   }   // We have a list of BDCs.   // If svrEntries > 1   //    loop through the list, checking the last logon against the   //     current logon stored in validate.logon_time.   Servers =( SERVER0 * )bdcNames;   for( i = 0; i < svrEntries; i++ )   {      // Must add the // to the names returned from the NetServerEnum function.      _fstrcpy( (LPSTR)servername,"////&quot

;      _fstrcat( (LPSTR)servername,Servers.sv0_name);      netRet = NetUserGetInfo( (LPSTR)servername,  // Execute on a BDC                         Wksta[0].wki10_username,  // User's name                         LEVEL_11,                         (char far *)UserData,                         SMALL_BUFFER,                         &usrEntries); // Expecting only one entry      Users = (USER11 *)UserData;      if( netRet == NERR_Success )      {         // We found a user entry on this BDC. Compare the         //  last logon time to the stored time. Replace the stored         //  time if the time is greater.         //         // Replace the servername so the time and the server match.         if( Users[0].usri11_last_logon > validate.logon_time)         {            validate.server = (char far *)&Servers;            validate.logon_time = Users[0].usri11_last_logon;         }         else if( Users[0].usri11_last_logon == validate.logon_time )         {            // This could indicate a problem.            sprintf(Message,"Values are the same. %ls %ls", Servers.sv0_name, validate.server);            MessageBox( NULL, Message, "HMMMM...........",MB_OK);         }      }   }   // Convert the time in seconds to a time structure for display;   //  build the output string.    lpTime = gmtime( &validate.logon_time);    lpszTime = asctime( lpTime );    _fstrcpy((LPSTR)Message, (LPSTR)"Username: "    _fstrcat((LPSTR)Message, (LPSTR)Wksta[0].wki10_username);    _fstrcat((LPSTR)Message, (LPSTR)"/nLast Logon: "    _fstrcat((LPSTR)Message, (LPSTR)lpszTime);    _fstrcat((LPSTR)Message, (LPSTR)"Logon Server: "    _fstrcat((LPSTR)Message, (LPSTR)validate.server);    // Display the information.    MessageBox(NULL,Message,"Logon Validation Information", MB_OK);    return(0); }

chenybin · 2005-09-04

http://www.delphibbs.com/delphibbs/dispq.asp?lid=3188621 可能有点参考价值

如何进行WINDOWS集成身份验证? ( 积分: 200 )

bundur

Unregistered / Unconfirmed

bundur

Unregistered / Unconfirmed

chenybin

Unregistered / Unconfirmed

chenybin

Unregistered / Unconfirmed

Bruce.xm

Unregistered / Unconfirmed

bundur

Unregistered / Unconfirmed

Bruce.xm

Unregistered / Unconfirmed

bundur

Unregistered / Unconfirmed

Bruce.xm

Unregistered / Unconfirmed

Bruce.xm

Unregistered / Unconfirmed

willing66

Unregistered / Unconfirmed

chenybin

Unregistered / Unconfirmed

bundur

Unregistered / Unconfirmed

keer5201314

Unregistered / Unconfirmed

Bruce.xm

Unregistered / Unconfirmed

Bruce.xm

Unregistered / Unconfirmed

chenybin

Unregistered / Unconfirmed

Similar threads