问题描述
我工作的一个网站，以管理Active Directory。
我要检查用户是否有权更改密码或者没有。
所以，我必须找到ntSecurityDescriptor中属性值之后，我不得不扔在IADsSecurityDescriptor。
现在，如果我使用DirectorySearcher类则属性值的类型为 System._ComObject ，然后轻松地铸造为 IADsSecurityDescriptor 。
但是，当我使用LdapConnection和SearchResponse我得到的类型
的属性值
I am working on a website to manage active directory.
I want to check that whether user has permission to change password or not.
So I have to find "ntSecurityDescriptor" property value after that I have to cast it into IADsSecurityDescriptor.
Now if I use DirectorySearcher class then property value is of type System._ComObject and easily casted to IADsSecurityDescriptor.
But when I use LdapConnection and SearchResponse I get property value of type
byte[] array which is unale to cast to IADsSecityDescriptor.
我收到错误
Unable to cast System.Byte[] to IADsSecurityDescriptor
有一些问题，SearchResponse或我使用某种铸造技术来实现这一目标。我有一些问题要使用的DirectoryEntry类，所以我只能用LdapConnction类。
Is there some problem with SearchResponse or I have use some kind of casting technique to achieve this. I have some problem to use DirectoryEntry class so I can only use LdapConnction class.
请帮助其紧迫。谢谢你。
Please help its urgent.Thanks.
推荐答案
最后，我发现我的问题的答案。此类转换的byte []，以有效的安全decriptor comobject。
At last I find the answer of my question. This class convert the byte[] to valid security decriptor comobject.
ActiveDs.ADsSecurityUtility secUtility = new ActiveDs.ADsSecurityUtility();
ActiveDs.IADsSecurityDescriptor sd = (IADsSecurityDescriptor)secUtility.ConvertSecurityDescriptor((byte[])attribute[0], (int)ADS_SD_FORMAT_ENUM.ADS_SD_FORMAT_RAW, (int)ADS_SD_FORMAT_ENUM.ADS_SD_FORMAT_IID);
这篇关于由DirectorySearcher从和SearchResponse返回属性值是不同的类型System._comobject和字节数组的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！