UserPrincipal.IsMemberOf returns false
I am trying to check that the user is in the "TestGroup" or not. User is in "TestGroup", even I get retval = false @line (retVal = user.IsMemberOf (groupPrincipal);) and in Event Viewer it shows msg as "Username or password is incorrect".
Can you help me with this.
string userName = this.Request.ServerVariables["AUTH_USER"];
if (ValidateUser(userName) == false)
Response.Redirect("Error.aspx?errormsg=" + userName + " does not have permission to view this page");
public static bool ValidateUser(String userName)
{
bool useGroupAuthorization = true;
if (useGroupAuthorization)
return GroupLookup(userName, "TestGroup");
}
private static bool GroupLookup(string userName, string groupName)
{
System.Diagnostics.EventLog appLog = new System.Diagnostics.EventLog();
appLog.Source = "Test App";
bool retVal = false;
PrincipalContext pc = null;
UserPrincipal user = null;
GroupPrincipal groupPrincipal = null;
try
{
string strdomain = "TestDomain";
pc = new PrincipalContext(ContextType.Domain,strdomain);
user = UserPrincipal.FindByIdentity(pc, userName);
groupPrincipal = GroupPrincipal.FindByIdentity(pc, groupName);
retVal = user.IsMemberOf(groupPrincipal);
}
catch (NoMatchingPrincipalException nmpx)
{
appLog.WriteEntry(nmpx.Message);
}
catch (PrincipalOperationException pox)
{
appLog.WriteEntry(pox.Message);
}
catch (Exception ex)
{
if (user == null)
{
appLog.WriteEntry(ex.Message);
}
else
{
appLog.WriteEntry(ex.Message);
}
}
return retVal;
}
// when i tried with below code i am getting userPrincipal is null
// bool retVal = false; string strdomain = "TestDomain";
// PrincipalContext principalCtx = new PrincipalContext(ContextType.Domain, strdomain);
// UserPrincipal queryByExampleUser = new UserPrincipal ( principalCtx );
// queryByExampleUser.SamAccountName = userName;
// PrincipalSearcher principalSearcher = new PrincipalSearcher ( );
// principalSearcher.QueryFilter = queryByExampleUser;
// UserPrincipal userPrincipal = principalSearcher.FindOne ( ) as UserPrincipal;
// retVal = IsUserInGroup("TestGroup", userPrincipal);
// return retVal;
// }
//static bool IsUserInGroup(string groupName, UserPrincipal user)
//{
// PrincipalContext principalContext = new PrincipalContext(ContextType.Domain);
// GroupPrincipal groupPrincipal = GroupPrincipal.FindByIdentity(principalContext, groupName);
// if (user.IsMemberOf(groupPrincipal))
// {
// return true;
// }
// return false;
//}
source to share
UserPrincipal.IsMemberOf (GroupPrincipal) seems to work with some groups and not others. On my domain, it worked with the \ Developers (custom group) domain, but not the \ Domain Users domain. Go figure. I stopped the code in the debugger and looked through the list of domain user group members and found my user there, but IsMemberOf still returned false. However, I found that if I looped through the collection of UserPrincipal objects in GroupPrincipal.Members, I could test this method by comparing the UserPrincipal in the collection to the one I was looking for. Crappy, but the only reliable solution I could find.
Sample code:
string sAccountToCheckSID = upAccountToCheck.Sid.Value;
foreach(UserPrincipal up in gpKnownAccountToCheck.Members)
{
string sKnownSIDInGroup = up.Sid.Value;
if(sKnownSIDInGroup.Equals(sAccountToCheckSID))
{
userMatchingUserObject = userKnownUser;
return true;
}
}
So, I don't have a WHY. But this is my job.
source to share