使用C#验证来自LDAP服务器上特定组的用户

string ldapPath = "LDAP://ldap.example.com:389";
DirectoryEntry ldapConnection = new DirectoryEntry(ldapPath);

ldapConnection.Username = "username";
ldapConnection.Password = "password";

string searchBase = "OU=Groups,DC=example,DC=com";
string searchFilter = "(&(objectClass=group)(cn=GroupName))";

DirectorySearcher searcher = new DirectorySearcher(ldapConnection, searchFilter);
SearchResultCollection results = searcher.FindAll();

bool isMember = false;
foreach (SearchResult result in results)
{
    DirectoryEntry group = result.GetDirectoryEntry();
    PropertyValueCollection members = group.Properties["member"];
    foreach (string member in members)
    {
        if (member.Equals("userDN", StringComparison.OrdinalIgnoreCase))
        {
            isMember = true;
            break;
        }
    }
    group.Dispose();
    if (isMember)
    {
        break;
    }
}

if (isMember)
{
    Console.WriteLine("用户属于特定组");
}
else
{
    Console.WriteLine("用户不属于特定组");
}