private Dictionary<string,string> AuthenticateActiveDirectory(string username, string password)

{

    Dictionary<string, string> dic = new Dictionary<string, string>();

    DirectoryEntry entry = new DirectoryEntry(_appConfiguration["LDAP:DE"], username, password);

    try

    {

        DirectorySearcher search = new DirectorySearcher(entry);

        search.Filter = $"(SAMAccountName={username})";

        SearchResult result = search.FindOne();

        if (result != null)

        {

            dic.Add("state","true");

            dic.Add("displayname", result.Properties["displayname"]?[].ToString());

            dic.Add("mail",result.Properties["mail"]?[].ToString());

        }

    }

    catch (Exception ex)

    {

        dic.Add("state", "false");

        dic.Add("errMsg",ex.Message);

    }

    return dic;

}

public Dictionary<string, string> LdapAuthenticate(string username, string password)

{

    Dictionary<string, string> dic = new Dictionary<string, string>();

    var ldapHost = _appConfiguration["LDAP:Host"];

    var ldapPort = _appConfiguration.GetValue<int>("LDAP:Port");

    var mailSuffix = _appConfiguration["LDAP:MailSuffix"];

    var searchBase = _appConfiguration["LDAP:SearchBase"];

    var loginDN = username;

    var sAMAccountName = username;

    if (username.Contains(mailSuffix))

        sAMAccountName = username.Substring(, username.IndexOf(mailSuffix));

    else

        loginDN = $"{username}{mailSuffix}";

    var searchFilter = $"(sAMAccountName={sAMAccountName})";

    var attrs = _appConfiguration["LDAP:Attrs"].Split('|');

    try

    {

        var conn = new LdapConnection();

        conn.Connect(ldapHost, ldapPort);

        conn.Bind(loginDN, password);

        var lsc = conn.Search(searchBase, LdapConnection.SCOPE_SUB, searchFilter, attrs, false);

        while (lsc.hasMore())

        {

            LdapEntry nextEntry = null;

            try

            {

                nextEntry = lsc.next();

            }

            catch (LdapException ex)

            {

                Logger.Debug(ex.ToString(), ex);

                continue;

            }

            var attributeSet = nextEntry.getAttributeSet();

            var ienum = attributeSet.GetEnumerator();

            while (ienum.MoveNext())

            {

                var attribute = (LdapAttribute)ienum.Current;

                var attributeName = attribute.Name.ToLower();

                var attributeVal = attribute.StringValue;

                if (attrs.Contains(attributeName))

                {

                    dic.Add(attributeName, attributeVal);

                }

            }

            dic.Add("state", "true");

        }

        conn.Disconnect();

    }

    catch (Exception ex)

    {

        dic.Add("state", "false");

        dic.Add("errMsg", ex.Message);

        Logger.Debug(ex.ToString(), ex);

    }

    return dic;

}

  "LDAP": {

    "_comment": "域帐号登录配置",

    "DE": "LDAP://xxx.com",

    "Host": "xx.xx.xx.xx",

    "Port": ,

    "MailSuffix": "@xxx.com",

    "Attrs": "displayname|mail|sn",

    "SearchBase": "DC=xxx,DC=com",

    "UserRole": "User"

  },