CODEWITHSUNDEEP
.netactive-directoryadlds
Tarun Arora
Tarun Arora

Reputation: 4822

Get all roles from AD LDS Programmatically

I am looking for some guidance on how I can connect to AD LDS programmatically. I am trying to retrieve all AD LDS roles using a C# program.

Any pointers on where to get started will be much appreciated.

Upvotes: 0

Views: 1666

Answers (1)

marc_s
marc_s

Reputation: 755381

According to this, AD LDS roles are AD groups that reside in the CN=Roles container of your LDS instance - right?

With the classes in the System.DirectoryServices.AccountManagement (S.DS.AM) namespace, you can get those groups pretty easily:

// set up the "ApplicationDirectory" context and use the "CN=Roles" container
PrincipalContext ctx = new PrincipalContext(ContextType.ApplicationDirectory, "ldsserver:389", "CN=Roles,DC=YourCompany,DC=com");

// set up a "QBE" group principal
GroupPrincipal qbeGroup = new GroupPrincipal(ctx);

// create your principal searcher passing in the QBE principal    
PrincipalSearcher srch = new PrincipalSearcher(qbeGroup);

// find all matches
foreach(var found in srch.FindAll())
{
    // do whatever here - "found" should be "GroupPrincipal" types only
}

Read all about the System.DirectoryServices.AccountManagement (S.DS.AM) namespace here:

The new S.DS.AM makes it really easy to play around with users and groups in AD (and AD LDS)!

Upvotes: 3

Related Questions