Bug Fix #31: Restrict AD User Search to Users

Added "objectClass=user" LDAP filter which excludes AD Contacts.
This commit is contained in:
Gary Sharp
2013-12-03 09:37:21 +11:00
parent fad8eae9f4
commit 214ecf6212
@@ -235,7 +235,7 @@ namespace Disco.BI.Interop.ActiveDirectory
term = ActiveDirectoryHelpers.EscapeLdapQuery(term);
using (DirectoryEntry entry = new DirectoryEntry(string.Format("LDAP://{0}", defaultQualifiedDomainName)))
{
using (DirectorySearcher searcher = new DirectorySearcher(entry, string.Format("(&(objectCategory=Person)(objectCategory=Person)(|(sAMAccountName=*{0}*)(displayName=*{0}*)))", term), UserLoadProperties, SearchScope.Subtree))
using (DirectorySearcher searcher = new DirectorySearcher(entry, string.Format("(&(objectCategory=Person)(objectClass=user)(|(sAMAccountName=*{0}*)(displayName=*{0}*)))", term), UserLoadProperties, SearchScope.Subtree))
{
searcher.SizeLimit = 30;
SearchResultCollection results = searcher.FindAll();