How to check if a user exists on LDAP

Question

I need to verify users in the company using only their username - not their password.

So I need a method like this

public bool UserExists(string username)
{ ... }

I am aware of the System.DirectoryServices namespace but don't know where to start.

Any ideas?

There are 80,000+ records so try to bear that in mind.

Thank you.

Edit:

I have done it - my code is:

private bool UserExists(string userName, string domain)
{
    try
    {
        DirectoryEntry.Exists("WinNT://" + domain + ".[hidden].com/" + userName);
        return true;
    }
    catch (COMException)
    {
        return false;
    }
}

I don't know if it is correct, but it seems to work so far.

Michael's answer has two relevant parts:

Update #2:

I actually used this:

public static bool LoggedOnUserExists()
{
    var domain = new PrincipalContext(ContextType.Domain);

    UserPrincipal foundUser = UserPrincipal.FindByIdentity(domain, IdentityType.SamAccountName, Environment.UserName);

    return foundUser != null;
}

You should NOT use the WinNT provider anymore - it's strictly for backwards compatibility, but it typically doesn't work well in a AD network — marc_s
– marc_s, Commented Nov 29, 2010 at 15:47

marc_s · Accepted Answer · 2016-09-30 15:48:44Z

6

In .NET 3.5 and up, you can use the System.DirectoryServices.AccountManagement namespaces to do this quite simply:

public bool UserExists(string username)
{
   // create your domain context
   using (PrincipalContext domain = new PrincipalContext(ContextType.Domain))
   {
       // find the user
       UserPrincipal foundUser = UserPrincipal.FindByIdentity(domain, IdentityType.Name, username);

       return foundUser != null;
    }
}

This will work with the regular user name John Doe, or alternatively you can use the user's e-mail address ([email protected]), or his distinguished name (CN=John Doe) - see what the IdentityType enumeration has to offer :-)

edited Sep 30, 2016 at 15:48

answered Nov 29, 2010 at 15:50

marc_s

760k186 gold badges1.4k silver badges1.5k bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Eddie Over a year ago

I assume this searches on the current domain? Is there anyway to use this method and specify a domain?

marc_s Over a year ago

@Eddie: sure - the PrincipalContext has numerous overloaded constructors (perfectly documented on MSDN), which allow you to specify a domain and/or a container in that domain to use for searching

Collectives™ on Stack Overflow

How to check if a user exists on LDAP

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related