.NET中通过域验证用户名和密码
类代码：
using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Runtime.InteropServices; //必要引用
using System.Security.Principal; //必要引用
/**//// <summary>
/// UserLoginForDomain 的摘要说明
/// 适用ASP.NET 2.0
/// Windows XP 调试成功
/// 调用”advapi32.dll“win32 API
/// </summary>
public class UserLoginForDomain
{
public UserLoginForDomain()
{
//
// TODO: 在此处添加构造函数逻辑
//
}
【用户登录域】方法#region【用户登录域】方法
public const int LOGON32_LOGON_INTERACTIVE = 2;
public const int LOGON32_PROVIDER_DEFAULT = 0;
WindowsImpersonationContext impersonationContext;
[DllImport("advapi32.dll", CharSet = CharSet.Auto)]
public static extern int LogonUser(String lpszUserName,
String lpszDomain,
String lpszPassword,
int dwLogonType,
int dwLogonProvider,
ref IntPtr phToken);
[DllImport("advapi32.dll", CharSet = System.Runtime.InteropServices.CharSet.Auto, SetLastError = true)]
public extern static int DuplicateToken(IntPtr hToken,
int impersonationLevel,
ref IntPtr hNewToken);
/**//// <summary>
/// 输入用户名、密码、登录域判断是否成功
/// </summary>
/// <example>
/// if (impersonateValidUser(UserName, Domain, Password)){}
/// </example>
/// <param name="userName">账户名称，如：string UserName = UserNameTextBox.Text;</param>
/// <param name="domain">要登录的域，如：string Domain = DomainTextBox.Text;</param>
/// <param name="password">账户密码, 如：string Password = PasswordTextBox.Text;</param>
/// <returns>成功返回true,否则返回false</returns>
public bool impersonateValidUser(String userName, String domain, String password)
{
WindowsIdentity tempWindowsIdentity;
IntPtr token = IntPtr.Zero;
IntPtr tokenDuplicate = IntPtr.Zero;
if (LogonUser(userName, domain, password, LOGON32_LOGON_INTERACTIVE,
LOGON32_PROVIDER_DEFAULT, ref token) != 0)
{
if (DuplicateToken(token, 2, ref tokenDuplicate) != 0)
{
tempWindowsIdentity = new WindowsIdentity(tokenDuplicate);
impersonationContext = tempWindowsIdentity.Impersonate();
if (impersonationContext != null)
return true;
else
return false;
}
else
return false;
}
else
return false;
}
public void undoImpersonation()
{
impersonationContext.Undo();
}
#endregion
前台事例:
【用户登录域】示例#region【用户登录域】示例
<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Default6.aspx.cs" Inherits="Default6" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" >
<head id="Head1" runat="server">
<title>ASP.NET模拟登录验证</title>
</head>
<body>
<form id="form1" runat="server">
<div>
账户：<asp:TextBox ID="UserNameTextBox" runat="server"></asp:TextBox><br />
密码：<asp:TextBox ID="PasswordTextBox" runat="server"></asp:TextBox><br />
域名：<asp:TextBox ID="DomainTextBox" runat="server"></asp:TextBox><br />
<asp:Button ID="OKButton" runat="server" OnClick="OKButton_Click" Text="Button" /></div>
</form>
</body>
</html>
=========================================================================
protected void OKButton_Click(object sender, EventArgs e)
{
string UserName = UserNameTextBox.Text;
string Domain = DomainTextBox.Text;
string Password = PasswordTextBox.Text;
UserLoginForDomain CheckUserLogin = new UserLoginForDomain();
if (CheckUserLogin.impersonateValidUser(UserName, Domain, Password))
Response.Write(UserNameTextBox.Text + " is OK");
else
Response.Write(UserNameTextBox.Text + " is Error");
}
#endregion
原文地址：https://www.cnblogs.com/Hdsome/p/1227575.html