我有一些代码(下面)每15分钟运行一次.有时它将无法使用以下错误查询AD:
System.DirectoryServices.Protocols.DirectoryOperationException: The server does not support the control. The control is critical. at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request,TimeSpan requestTimeout)
>当它成功运行时,整个过程大约需要一分钟才能运行,AD查询大约需要30秒,32页.
>当它失败时,它始终在第一页上.
>就我所知,它似乎没有在一个模式中失败(总是在一天的不同时间).
在谷歌搜索该错误后,我发现了两个SO问题(one,two),指向使用AuthType.Ntlm来解决问题.但这对我来说并没有解决. Another说检查服务器是否支持分页(确实如此).
关于为什么会发生这种情况的任何想法?
var attributesToReturn = new[] { "givenName","sn","middleName","extensionAttribute8","department","sAMAccountName","userAccountControl" }; var filter = "(&(objectclass=user)(!(objectclass=computer))(sn=*)(givenName=*)(extensionAttribute8=*)(|(sn=a*)(sn=b*)(sn=c*)(sn=d*)(sn=e*)(sn=f*)(sn=g*)(sn=h*)(sn=i*)(sn=j*)(sn=k*)(sn=l*)(sn=m*)(sn=n*)(sn=o*)(sn=p*)(sn=q*)(sn=r*)(sn=s*)(sn=t*)(sn=u*)(sn=v*)(sn=w*)(sn=x*)(sn=y*)(sn=z*)))"; var currentBatch = 1; var searchRequest = new SearchRequest("DC=foo,DC=bar,DC=baz",filter,SearchScope.Subtree,attributesToReturn); var pageRequestControl = new PageResultRequestControl(500); searchRequest.Controls.Add(pageRequestControl); using (var ldapConnection = new LdapConnection("server.foo.bar.baz")) { ldapConnection.Credential = new NetworkCredential("user","pass","domain"); ldapConnection.Timeout = new TimeSpan(0,4,0); ldapConnection.AuthType = AuthType.Ntlm; // https://stackoverflow.com/a/14255413 while (true) { log.Debug("Fetching batch {0} from AD",currentBatch); var searchResponse = (SearchResponse)ldapConnection.SendRequest(searchRequest); var pageResultResponse = (PageResultResponseControl)searchResponse.Controls[0]; log.Debug("Parsing AD response for batch {0}",currentBatch); ParseResponse(_return,searchResponse,includeDisabled); if (pageResultResponse.Cookie.Length == 0) break; pageRequestControl.Cookie = pageResultResponse.Cookie; currentBatch++; } }