且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

从AD获取用户详细信息的速度很慢

更新时间:2023-01-30 08:00:13

您的问题是您正在使用System.DirectoryServices.AccountManagement ...虽然我讨厌这么说,但这真是可惜. AccountManagement的工作方式是运行单独的LDAP查询以分别检索每个项目.因此,当您遍历成员时,它会通过LDAP为每个成员进行单独的回调.您要做的是使用System.DirectoryServices.DirectorySearcher运行LDAP查询.

Your problem is that you are using System.DirectoryServices.AccountManagement... While I hate saying it, it's sadly the truth. The way AccountManagement works under the hood is that it runs a seperate LDAP query to retrieve each item seperately. So when you iterate through members it's making a seperate call back through LDAP for each member. What you want to do instead is run an LDAP query using System.DirectoryServices.DirectorySearcher.

我的假设是,部门是一个小组,取决于您的使用方式.这就是我要怎么做. (我的代码在VB.Net中...对不起).确保获取您组的完全合格的DN,或者提前查找并将其插入查询中.

My assumption is that department is a group, based on how you are using it. Here is how I would do it. (my code is in VB.Net... sorry). Make sure to get the fully qualified DN for your group, or look it up in advance and plug it into the query.

Dim results = LDAPQuery("(memberOf=CN=Fully,OU=Qualified,DC=Group,DC=Distinguished,DC=Name)", New String() {"mobile", "description"})

Dim emps = (from c as System.DirectoryServices.SearchResult in results _
             Select New Employee() {.Name = c.Properties("description"), .Mobile = c.Properties("mobile")}).ToList()

Public Function LDAPQuery(ByVal query As String, ByVal attributes As String()) As SearchResultCollection
    'create directory searcher from CurrentADContext (no special security available)
    Dim ds As New DirectorySearcher(System.DirectoryServices.ActiveDirectory.Domain.GetCurrentDomain().GetDirectoryEntry())
    ds.PageSize = 1000

    'set filter string
    ds.Filter = query

    'specify properties to retrieve
    ds.PropertiesToLoad.AddRange(attributes)

    'get results
    Dim results As SearchResultCollection = ds.FindAll()

    Return results
End Function