Delphi深度探索-活动目录开发

本文为【Delphi深度探索-活动目录开发】的汉字拼音对照版显示拼音

活huo动dong目mu录lu是shi Windows NT 4.0 和he Windows 2000 使shi用yong的de目mu录lu服fu务wu。要yao想xiang使shi用yong活huo动dong目mu录lu服fu务wu，需xu要yao调tiao用yong ADSI( 活huo动dong目mu录lu服fu务wu接jie口kou ) 。 ADSI 是shi一yi组zu以yi COM 接jie口kou的de形xing式shi提ti供gong目mu录lu服fu务wu的de，程cheng序xu员yuan可ke以yi通tong过guo ADSI 存cun取qu四si种zhong网wang络luo目mu录lu结jie构gou： WinNT (Microsoft SAM 数shu据ju库ku ) 、 LDAP ( 轻qing量liang目mu录lu存cun取qu协xie议yi ) 、 NDS (NetWare 目mu录lu服fu务wu ) 和he NWCOMPAT (Novell NetWare 3.x) 。

ADSI 可ke以yi使shi Windows NT 管guan理li员yuan的de工gong作zuo变bian得de轻qing松song。 ADSI 支zhi持chi管guan理li员yuan执zhi行xing一yi些xie一yi般ban的de管guan理li任ren务wu，比bi如ru添tian加jia新xin用yong户hu、管guan理li打da印yin机ji、安an全quan设she定ding和he控kong制zhi NT 域yu。因yin为wei ADSI 使shi用yong COM 接jie口kou，任ren何he支zhi持chi COM 的de编bian程cheng语yu言yan像xiang Delphi 、 BCB 、 VB 、 VC 等deng都dou可ke以yi调tiao用yong ADSI 。

图tu 1.111

活huo动dong目mu录lu运yun行xing在zai Windows NT 4.0 和he Windows 2000 上shang。客ke户hu端duan程cheng序xu可ke以yi运yun行xing在zai Windows 95 、 Windows 98 、 Windows NT 4.0 和he Windows 2000 上shang。为wei了le使shi用yong ADSI ，必bi须xu安an装zhuang ADSI COM 接jie口kou。 ADSI 2.5 SDK 可ke以yi从cong Microsoft ADSI 网wang址zhi [url=http://www.pccode.net]下xia载zai"http://www.microsoft.com/adsi 下xia载zai 。 SDK 包bao括kuo文wen档dang、在zai线xian帮bang助zhu和he很hen多duo例li子zi，不bu过guo不bu幸xing的de是shi这zhe些xie例li子zi都dou是shi针zhen对dui VB 和he VC 的de，这zhe里li我wo们men将jiang演yan示shi如ru何he使shi用yong Delphi 调tiao用yong ADSI 。

程cheng序xu演yan示shi

图tu 1.111 所suo示shi的de程cheng序xu演yan示shi了le如ru何he调tiao用yong WinNT provider 提ti供gong的de功gong能neng。演yan示shi程cheng序xu用yong来lai连lian接jie到dao一yi个ge域yu，一yi旦dan连lian接jie到dao域yu，程cheng序xu将jiang会hui列lie出chu在zai PDC 上shang找zhao到dao的de NT 的de用yong户hu和he组zu以yi及ji域yu中zhong的de计ji算suan机ji。同tong时shi这zhe个ge程cheng序xu还huan演yan示shi了le如ru何he察cha看kan域yu中zhong计ji算suan机ji上shang的de服fu务wu和he察cha看kan、添tian加jia、删shan除chu NT 组zu中zhong的de用yong户hu。

使shi用yong ADSI 控kong制zhi Windows NT/2000

ADSI 可ke以yi使shi我wo们men控kong制zhi用yong户hu、组zu、计ji算suan机ji、文wen件jian共gong享xiang、打da印yin任ren务wu、打da印yin队dui列lie和he服fu务wu等deng系xi统tong资zi源yuan。要yao想xiang在zai Delphi 中zhong调tiao用yong ADSI ，需xu要yao引yin入ru活huo动dong目mu录lu类lei型xing库ku，调tiao用yong菜cai单dan Project | Import Type Library 命ming令ling，选xuan择ze ActiveDs (Version 1.0) 点dian确que认ren， Delphi 会hui生sheng成cheng相xiang应ying的de封feng装zhuang文wen件jian。

绑bang定ding Win NT 目mu录lu服fu务wu

连lian接jie Win NT 目mu录lu服fu务wu就jiu是shi找zhao到dao域yu控kong制zhi器qi然ran后hou绑bang定ding到dao相xiang应ying的de对dui象xiang上shang。绑bang定ding可ke以yi通tong过guo ADsGetObject 或huo ADsOpenObject 函han数shu来lai实shi现xian。 ADsGetObject 函han数shu声sheng明ming如ru下xia：

function ADsGetObject(lpszPathName: PWideChar; const riid: TIID; out obj): HResult; stdcall; external 'activeds.dll';

第di一yi个ge参shen数shu是shi对dui象xiang的de路lu径jing名ming，第di二er个ge参shen数shu是shi对dui象xiang的de接jie口kou标biao识shi符fu，第di三san个ge参shen数shu用yong于yu返fan回hui得de到dao的de被bei请qing求qiu的de接jie口kou指zhi针zhen。缺que省sheng条tiao件jian下xia，函han数shu根gen据ju当dang前qian用yong户hu进jin行xing安an全quan认ren证zheng。

ADsOpenObject 函han数shu在zai不bu同tong的de安an全quan认ren证zheng机ji制zhi下xia绑bang定ding ADSI 对dui象xiang，它ta主zhu要yao是shi通tong过guo调tiao用yong参shen数shu返fan回hui的de用yong户hu名ming和he口kou令ling来lai认ren证zheng的de。函han数shu声sheng明ming如ru下xia：

function ADsOpenObject(lpszPathName: PWideChar; lpszUserName: PWideChar; lpszPassword: PWideChar; dwReserved: LongInt; const riid: TIID; out obj): HResult; stdcall; external 'activeds.dll';

第di一yi个ge参shen数shu意yi义yi同tong上shang，第di二er、三san个ge参shen数shu是shi调tiao用yong者zhe提ti供gong的de用yong户hu名ming和he口kou令ling，第di四si个ge参shen数shu是shi一yi个ge保bao留liu的de provider 标biao识shi，用yong来lai确que定ding绑bang定ding的de认ren证zheng方fang法fa，第di五wu个ge参shen数shu是shi请qing求qiu接jie口kou的de接jie口kou标biao识shi符fu，最zui后hou一yi个ge参shen数shu用yong来lai返fan回hui请qing求qiu的de接jie口kou指zhi针zhen。

第di一yi个ge函han数shu使shi用yong登deng录lu用yong户hu缺que省sheng的de信xin任ren级ji别bie，而er第di二er个ge函han数shu允yuan许xu开kai发fa者zhe指zhi定ding特te殊shu的de安an全quan信xin任ren机ji制zhi来lai绑bang定ding ADSI 对dui象xiang。下xia面mian代dai码ma演yan示shi了le两liang种zhong不bu同tong的de绑bang定ding方fang式shi：

procedure TMainFrm.actOpenWinNTExecute(Sender: TObject);

var

UnknownObject: IUnknown;

DomainPath: WideString;

Domain: IADsContainer;

begin

// 指zhi定ding域yu路lu径jing

DomainPath := 'WinNT://' + ADSIDomainName.Text;

// 如ru果guo使shi用yong用yong户hu登deng录lu了le信xin息xi

if cbUseLogin.Checked then

// 使shi用yong用yong户hu登deng录lu的de信xin息xi创chuang建jian域yu对dui象xiang

OleCheck(AdsOpenObject(PWideChar(DomainPath),

PWideChar(ADSIUsername.Text),

PWideChar(ADSIPassword.Text), 0, IID_IADsContainer,

UnknownObject));

else

OleCheck(ADsGetObject(PWideChar(DomainPath),

IID_IADsContainer, UnknownObject));

// 设she定ding域yu对dui象xiang

Domain := UnknownObject as IADsContainer;

// 从cong域yu中zhong获huo得de信xin息xi列lie表biao

GetDomainInformation(Domain);

end;

下xia面mian我wo们men需xu要yao声sheng明ming三san个ge变bian量liang ：

第di一yi个ge是shi接jie口kou变bian量liang , 用yong来lai绑bang定ding由you指zhi定ding的de对dui象xiang路lu径jing返fan回hui的de函han数shu。

UnknownObject: IUnknown;

第di二er个ge参shen数shu是shi WideString 类lei型xing的de变bian量liang ， 用yong来lai在zai绑bang定ding函han数shu中zhong产chan生sheng一yi个ge对dui象xiang路lu径jing。

DomainPath: WideString;

第di三san是shi一yi个ge IADsContainer 接jie口kou类lei型xing变bian量liang ， 用yong来lai保bao存cun返fan回hui的de接jie口kou变bian量liang。

Domain: IADsContainer;

IADsContainer 变bian量liang将jiang被bei用yong来lai从cong指zhi定ding的de ADSI 对dui象xiang中zhong获huo得de全quan部bu用yong户hu、组zu和he计ji算suan机ji。当dang然ran也ye可ke以yi使shi用yong IADsDomain 类lei型xing的de变bian量liang，但dan它ta不bu适shi合he枚mei举ju域yu中zhong的de子zi对dui象xiang。

下xia面mian指zhi定ding想xiang要yao获huo得de的de对dui象xiang路lu径jing ， 如ru果guo域yu名ming是shi "PRISMA" ， 要yao想xiang获huo得de ADSI 对dui象xiang ， 就jiu需xu要yao指zhi定ding路lu径jing为wei "WinNT://PRISMA" ：

// 设she定ding域yu名ming路lu径jing

DomainPath := 'WinNT://' + ADSIDomainName.Text;

下xia面mian代dai码ma使shi用yong不bu同tong的de安an全quan认ren证zheng方fang式shi：

// 如ru果guo使shi用yong登deng录lu信xin息xi

if cbUseLogin.Checked then

// 使shi用yong登deng录lu并bing创chuang建jian域yu对dui象xiang

OleCheck(AdsOpenObject(PWideChar(DomainPath),

PWideChar(ADSIUsername.Text),

PWideChar(ADSIPassword.Text), 0, IID_IADsContainer,

UnknownObject));

else

// 创chuang建jian域yu对dui象xiang

OleCheck(ADsGetObject(PWideChar(DomainPath),

IID_IADsContainer, UnknownObject));

然ran后hou我wo们men获huo取qu IADsContainer 指zhi针zhen，以yi便bian查cha询xun域yu中zhong的de子zi对dui象xiang：

// 获huo取qu域yu对dui象xiang

Domain := UnknownObject as IADsContainer;

最zui后hou ， 把ba IADsContainer 接jie口kou指zhi针zhen作zuo为wei参shen数shu调tiao用yong来lai获huo得de域yu中zhong的de子zi对dui象xiang ：

GetDomainInformation(Domain);

在zai域yu中zhong查cha找zhao

要yao想xiang在zai域yu中zhong查cha找zhao子zi对dui象xiang ， 可ke以yi使shi用yong GetDomainInformation 过guo程cheng ， 代dai码ma如ru下xia ：

// 获huo取qu域yu信xin息xi

procedure TMainFrm.GetDomainInformation(

Domain: IADsContainer);

var

Enum: IEnumVariant;

ADsTempObj: OLEVariant;

ADsObj: IADs;

Value: LongWord;

begin

// 清qing空kong用yong户hu、组zu和he计ji算suan机ji列lie表biao

UserListView.Items.Clear;

GroupListView.Items.Clear;

ComputerListView.Items.Clear;

// 获huo取qu枚mei举ju对dui象xiang

Enum := (Domain._NewEnum) as IEnumVariant;

// 利li用yong枚mei举ju对dui象xiang查cha找zhao

while (Enum.Next(1, ADsTempObj, Value) = S_OK) do begin

// 获huo得de临lin时shi对dui象xiang

ADsObj := IUnknown(ADsTempObj) as IADs;

// 如ru果guo是shi用yong户hu对dui象xiang

if AdsObj.Class_ = 'User' then

AddUserToList(ADsObj);

// 如ru果guo是shi组zu对dui象xiang

if AdsObj.Class_ = 'Group' then

AddGroupToList(ADsObj);

// 如ru果guo是shi计ji算suan机ji对dui象xiang

if AdsObj.Class_ = 'Computer' then

AddComputerToList(ADsObj);

end;

end;

下xia面mian是shi对dui程cheng序xu流liu程cheng的de详xiang细xi说shuo明ming，首shou先xian获huo得de枚mei举ju对dui象xiang，并bing赋fu值zhi给gei Enum 变bian量liang：

Enum := (Domain._NewEnum) as IEnumVariant;

然ran后hou利li用yong枚mei举ju变bian量liang进jin行xing查cha找zhao并bing把ba每mei个ge子zi对dui象xiang赋fu值zhi给gei临lin时shi的de OLEVariant 对dui象xiang：

while (Enum.Next(1, ADsTempObj, Value) = S_OK) do begin

OLEVariant 变bian量liang赋fu值zhi给gei ADSI 对dui象xiang

ADsObj := IUnknown(ADsTempObj) as IADs;

获huo得de ADSI 对dui象xiang后hou，开kai始shi检jian查cha对dui象xiang类lei，根gen据ju对dui象xiang类lei别bie把ba ADSI 分fen别bie处chu理li，并bing把ba不bu同tong ADSI 对dui象xiang的de属shu性xing添tian加jia到dao各ge自zi的de列lie表biao视shi图tu中zhong去qu：

// 如ru果guo是shi用yong户hu对dui象xiang

if AdsObj.Class_ = 'User' then

AddUserToList(ADsObj);

// 如ru果guo是shi组zu对dui象xiang

if AdsObj.Class_ = 'Group' then

AddGroupToList(ADsObj);

// 如ru果guo是shi计ji算suan机ji对dui象xiang

图tu 1.112

if AdsObj.Class_ = 'Computer' then AddComputerToList(ADsObj);

运yun行xing结jie果guo如ru 图tu 1.112 所suo示shi。

创chuang建jian或huo删shan除chu计ji算suan机ji用yong户hu

通tong过guo WinNT provider ，可ke以yi创chuang建jian或huo删shan除chu域yu中zhong任ren意yi一yi台tai计ji算suan机ji的de用yong户hu，要yao想xiang创chuang建jian一yi个ge域yu中zhong指zhi定ding的de计ji算suan机ji的de用yong户hu，需xu要yao绑bang定ding到dao指zhi定ding的de计ji算suan机ji上shang。一yi旦dan要yao绑bang定ding到dao计ji算suan机ji对dui应ying的de ADSI 容rong器qi对dui象xiang，就jiu需xu要yao调tiao用yong Create 方fang法fa。容rong器qi对dui象xiang的de Create 方fang法fa需xu要yao两liang个ge参shen数shu，一yi个ge是shi要yao创chuang建jian的de ADSI 对dui象xiang的de类lei别bie，一yi个ge是shi要yao用yong来lai描miao述shu ADSI 对dui象xiang的de名ming字zi。调tiao用yong Create 方fang法fa后hou会hui返fan回hui新xin的de ADSI 对dui象xiang的de引yin用yong参shen考kao，下xia面mian代dai码ma演yan示shi了le如ru何he创chuang建jian一yi个ge用yong户hu：