'''函数功能：查询域用户信息
'''参数说明：strAdmin－域管理账户；Password－域帐户密码；Domain－域服务器。
'''
''' 参考资料：http://www.experts-exchange.com/Web_Development/Web_Languages-Standards/ASP/Q_23947512.html
''' 搜索：Query LDAP For Existing User Classic ASP 在 www.experts-exchange.com
function getADUserData(strAdmin,strPassword,Domain,userName)

If AuthenticateUser(strAdmin,strPassword,Domain)=False Then '如果管理员认证失败则退出此过程
Response.Write "认证失败。"
Exit function
End If

Dim Conn, strRS, RS, strConn
Set Conn = Server.CreateObject("ADODB.Connection")
Set RS = Server.CreateObject("ADODB.Recordset")

Conn.Provider = "ADsDSOObject"
Conn.Properties("User ID") = strAdmin
Conn.Properties("Password") = strPassword
Conn.Properties("Encrypt Password") = True
strConn = "Active Directory Provider"
Conn.Open strConn , strAdmin, strPassword

strRS = "SELECT name FROM 'LDAP://" & Domain & "' WHERE sAMAccountName = '"&userName&"' ORDER by name "
RS.Open strRS, Conn,1,1

While RS.EOF = False
getADUserData=rs.Fields("name")
RS.MoveNext
Wend

End function


'''函数功能：验证域用户账号密码
'''参数说明：UserName－域账户；Password－域帐户密码；Domain－域服务器。
'''返回： 用户存在且账号密码正确则返回True，否则返回False；
''' 参考资料：http://stackoverflow.com/questions/3894835/ldap-asp-classic-adodb-2147217865-using-ldap-to-talk-to-active-directory
''' 搜索：LDAP + ASP Classic + ADODB 在 stackoverflow
''' 搜索：Getting Started with ASP for ADSI 在 微软MSDN
function AuthenticateUser(UserName, Password, Domain)
dim strUser
' assume failure
AuthenticateUser = false
strUser = UserName
strPassword = Password
strQuery = "SELECT cn FROM 'LDAP://" & Domain & "' WHERE objectClass='*' "
set oConn = server.CreateObject("ADODB.Connection")
oConn.Provider = "ADsDSOOBJECT"
oConn.Properties("User ID") = strUser
oConn.Properties("Password") = strPassword
oConn.Properties("Encrypt Password") = true
oConn.open "DS Query", strUser, strPassword
set cmd = server.CreateObject("ADODB.Command")
set cmd.ActiveConnection = oConn
cmd.CommandText = strQuery
on error resume next
set oRS = cmd.Execute
if oRS.bof or oRS.eof then
AuthenticateUser = false
else
AuthenticateUser = True
end if
set oRS = nothing
set oConn = nothing
end function


'''调用：
ADUserName=getADUserData("已知账户","已知密码","yourDomain.com","要查询的域账户")