code_junkie

Request a user's roles in AD when caller is not in domain

Nov 14th, 2011
411
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.12 KB | None | 0 0
  1. var context = new PrincipalContext(ContextType.Domain);
  2. var principal = UserPrincipal.FindByIdentity(context, IdentityType.Name, "administrator");
  3.  
  4. foreach (var authorizationGroup in principal.GetAuthorizationGroups())
  5. {
  6. Console.WriteLine(authorizationGroup.Name);
  7. }
  8.  
  9. var context = new PrincipalContext(ContextType.Domain, "10.0.1.255", "DC=test,DC=ad,DC=be", "administrator", "password");
  10.  
  11. System.DirectoryServices.AccountManagement.PrincipalOperationException: Information about the domain could not be retrieved (1355).
  12. at System.DirectoryServices.AccountManagement.Utils.GetDcName(String computerName, String domainName, String siteName, Int32 flags)
  13. at System.DirectoryServices.AccountManagement.ADStoreCtx.LoadDomainInfo()
  14. at System.DirectoryServices.AccountManagement.ADStoreCtx.get_DnsDomainName()
  15. at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
  16. at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
  17. at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroups()
  18.  
  19. ["memberOf"] = "CN=TestGroup,CN=Users,DC=test,DC=ad,DC=be"
Add Comment
Please, Sign In to add comment