?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Use smbcli dead transport handler in vfs_proxy
[Samba/vfs_proxy.git] / librpc / idl / netlogon.idl
blobcf4da7adfa9475702f9b4c2411fd1ce16fb3ebe9
1 /*
2 netlogon interface
3 much of this was derived from the ethereal sources - thanks to everyone
4 who contributed!
5 */
6
7 import "misc.idl", "lsa.idl", "samr.idl", "security.idl", "nbt.idl";
8
9 #include "idl_types.h"
10
11 cpp_quote("#define netr_DeltaEnum8Bit netr_DeltaEnum")
12 cpp_quote("#define netr_SamDatabaseID8Bit netr_SamDatabaseID")
13
14 [
15 uuid("12345678-1234-abcd-ef00-01234567cffb"),
16 version(1.0),
17 endpoint("ncacn_np:[\\pipe\\netlogon]","ncacn_ip_tcp:","ncalrpc:"),
18 helper("../librpc/ndr/ndr_netlogon.h"),
19 pointer_default(unique)
20 ]
21
22 interface netlogon
23 {
24 typedef bitmap samr_AcctFlags samr_AcctFlags;
25 typedef bitmap samr_GroupAttrs samr_GroupAttrs;
26 typedef enum netr_DeltaEnum8Bit netr_DeltaEnum8Bit;
27 typedef enum netr_SamDatabaseID8Bit netr_SamDatabaseID8Bit;
28
29 /*****************/
30 /* Function 0x00 */
31
32 typedef struct {
33 [string,charset(UTF16)] uint16 *account_name;
34 uint32 priv;
35 uint32 auth_flags;
36 uint32 logon_count;
37 uint32 bad_pw_count;
38 time_t last_logon;
39 time_t last_logoff;
40 time_t logoff_time;
41 time_t kickoff_time;
42 uint32 password_age;
43 time_t pw_can_change;
44 time_t pw_must_change;
45 [string,charset(UTF16)] uint16 *computer;
46 [string,charset(UTF16)] uint16 *domain;
47 [string,charset(UTF16)] uint16 *script_path;
48 uint32 unknown;
49 } netr_UasInfo;
50
51 WERROR netr_LogonUasLogon(
52 [in,unique] [string,charset(UTF16)] uint16 *server_name,
53 [in] [string,charset(UTF16)] uint16 account_name[],
54 [in] [string,charset(UTF16)] uint16 workstation[],
55 [out,ref] netr_UasInfo **info
56 );
57
58
59 /*****************/
60 /* Function 0x01 */
61
62 typedef struct {
63 uint32 duration;
64 uint16 logon_count;
65 } netr_UasLogoffInfo;
66
67 WERROR netr_LogonUasLogoff(
68 [in,unique] [string,charset(UTF16)] uint16 *server_name,
69 [in] [string,charset(UTF16)] uint16 account_name[],
70 [in] [string,charset(UTF16)] uint16 workstation[],
71 [out,ref] netr_UasLogoffInfo *info
72 );
73
74
75 /*****************/
76 /* Function 0x02 */
77
78 /* in netr_AcctLockStr size seems to be be 24, and rrenard thinks
79 that the structure of the bindata looks like this:
80
81 dlong lockout_duration;
82 udlong reset_count;
83 uint32 bad_attempt_lockout;
84 uint32 dummy;
85
86 but it doesn't look as though this structure is reflected at the
87 NDR level. Maybe it is left to the application to decode the bindata array.
88 */
89 typedef [public] struct {
90 dlong lockout_duration;
91 udlong reset_count;
92 uint32 bad_attempt_lockout;
93 uint32 dummy;
94 } netr_AcctLockStr;
95
96 /* - MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
97 * sets the NETLOGON_SERVER_TRUST_ACCOUNT user_flag
98 * - MSV1_0_UPDATE_LOGON_STATISTICS
99 * sets the logon time on network logon
100 * - MSV1_0_RETURN_USER_PARAMETERS
101 * sets the user parameters in the driveletter
102 * - MSV1_0_RETURN_PROFILE_PATH
103 * returns the profilepath in the driveletter and
104 * sets LOGON_PROFILE_PATH_RETURNED user_flag
105 */
106
107 typedef [public,bitmap32bit] bitmap {
108 MSV1_0_CLEARTEXT_PASSWORD_ALLOWED = 0x00000002,
109 MSV1_0_UPDATE_LOGON_STATISTICS = 0x00000004,
110 MSV1_0_RETURN_USER_PARAMETERS = 0x00000008,
111 MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT = 0x00000020,
112 MSV1_0_RETURN_PROFILE_PATH = 0x00000200,
113 MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT = 0x00000800
114 } netr_LogonParameterControl;
115
116 typedef struct {
117 lsa_String domain_name;
118 netr_LogonParameterControl parameter_control; /* see MSV1_0_* */
119 uint32 logon_id_low;
120 uint32 logon_id_high;
121 lsa_String account_name;
122 lsa_String workstation;
123 } netr_IdentityInfo;
124
125 typedef struct {
126 netr_IdentityInfo identity_info;
127 samr_Password lmpassword;
128 samr_Password ntpassword;
129 } netr_PasswordInfo;
130
131 typedef [flag(NDR_PAHEX)] struct {
132 uint16 length;
133 [value(length)] uint16 size;
134 [size_is(length),length_is(length)] uint8 *data;
135 } netr_ChallengeResponse;
136
137 typedef [flag(NDR_PAHEX)] struct {
138 netr_IdentityInfo identity_info;
139 uint8 challenge[8];
140 netr_ChallengeResponse nt;
141 netr_ChallengeResponse lm;
142 } netr_NetworkInfo;
143
144 typedef [flag(NDR_PAHEX)] struct {
145 netr_IdentityInfo identity_info;
146 lsa_String package_name;
147 uint32 length;
148 [size_is(length)] uint8 *data;
149 } netr_GenericInfo;
150
151 typedef enum {
152 NetlogonInteractiveInformation = 1,
153 NetlogonNetworkInformation = 2,
154 NetlogonServiceInformation = 3,
155 NetlogonGenericInformation = 4,
156 NetlogonInteractiveTransitiveInformation = 5,
157 NetlogonNetworkTransitiveInformation = 6,
158 NetlogonServiceTransitiveInformation = 7
159 } netr_LogonInfoClass;
160
161 typedef [public,switch_type(netr_LogonInfoClass)] union {
162 [case(NetlogonInteractiveInformation)] netr_PasswordInfo *password;
163 [case(NetlogonNetworkInformation)] netr_NetworkInfo *network;
164 [case(NetlogonServiceInformation)] netr_PasswordInfo *password;
165 [case(NetlogonGenericInformation)] netr_GenericInfo *generic;
166 [case(NetlogonInteractiveTransitiveInformation)] netr_PasswordInfo *password;
167 [case(NetlogonNetworkTransitiveInformation)] netr_NetworkInfo *network;
168 [case(NetlogonServiceTransitiveInformation)] netr_PasswordInfo *password;
169 } netr_LogonLevel;
170
171 typedef [public,flag(NDR_PAHEX)] struct {
172 uint8 key[16];
173 } netr_UserSessionKey;
174
175 typedef [public,flag(NDR_PAHEX)] struct {
176 uint8 key[8];
177 } netr_LMSessionKey;
178
179 /* Flags for user_flags below */
180 typedef [public,bitmap32bit] bitmap {
181 NETLOGON_GUEST = 0x00000001,
182 NETLOGON_NOENCRYPTION = 0x00000002,
183 NETLOGON_CACHED_ACCOUNT = 0x00000004,
184 NETLOGON_USED_LM_PASSWORD = 0x00000008,
185 NETLOGON_EXTRA_SIDS = 0x00000020,
186 NETLOGON_SUBAUTH_SESSION_KEY = 0x00000040,
187 NETLOGON_SERVER_TRUST_ACCOUNT = 0x00000080,
188 NETLOGON_NTLMV2_ENABLED = 0x00000100,
189 NETLOGON_RESOURCE_GROUPS = 0x00000200,
190 NETLOGON_PROFILE_PATH_RETURNED = 0x00000400,
191 NETLOGON_GRACE_LOGON = 0x01000000
192 } netr_UserFlags;
193
194 typedef struct {
195 NTTIME last_logon;
196 NTTIME last_logoff;
197 NTTIME acct_expiry;
198 NTTIME last_password_change;
199 NTTIME allow_password_change;
200 NTTIME force_password_change;
201 lsa_String account_name;
202 lsa_String full_name;
203 lsa_String logon_script;
204 lsa_String profile_path;
205 lsa_String home_directory;
206 lsa_String home_drive;
207 uint16 logon_count;
208 uint16 bad_password_count;
209 uint32 rid;
210 uint32 primary_gid;
211 samr_RidWithAttributeArray groups;
212 netr_UserFlags user_flags;
213 netr_UserSessionKey key;
214 lsa_StringLarge logon_server;
215 lsa_StringLarge domain;
216 dom_sid2 *domain_sid;
217 netr_LMSessionKey LMSessKey;
218 samr_AcctFlags acct_flags;
219 uint32 unknown[7];
220 } netr_SamBaseInfo;
221
222 typedef struct {
223 netr_SamBaseInfo base;
224 } netr_SamInfo2;
225
226 typedef struct {
227 dom_sid2 *sid;
228 samr_GroupAttrs attributes;
229 } netr_SidAttr;
230
231 typedef [public] struct {
232 netr_SamBaseInfo base;
233 uint32 sidcount;
234 [size_is(sidcount)] netr_SidAttr *sids;
235 } netr_SamInfo3;
236
237 typedef struct {
238 netr_SamBaseInfo base;
239 uint32 sidcount;
240 [size_is(sidcount)] netr_SidAttr *sids;
241 lsa_String forest;
242 lsa_String principle;
243 uint32 unknown4[20];
244 } netr_SamInfo6;
245
246 typedef struct {
247 uint32 pac_size;
248 [size_is(pac_size)] uint8 *pac;
249 lsa_String logon_domain;
250 lsa_String logon_server;
251 lsa_String principal_name;
252 uint32 auth_size;
253 [size_is(auth_size)] uint8 *auth;
254 netr_UserSessionKey user_session_key;
255 uint32 expansionroom[10];
256 lsa_String unknown1;
257 lsa_String unknown2;
258 lsa_String unknown3;
259 lsa_String unknown4;
260 } netr_PacInfo;
261
262 typedef [flag(NDR_PAHEX)] struct {
263 uint32 length;
264 [size_is(length)] uint8 *data;
265 } netr_GenericInfo2;
266
267 typedef enum {
268 NetlogonValidationUasInfo = 1,
269 NetlogonValidationSamInfo = 2,
270 NetlogonValidationSamInfo2 = 3,
271 NetlogonValidationGenericInfo2 = 5,
272 NetlogonValidationSamInfo4 = 6
273 } netr_ValidationInfoClass;
274
275 typedef [public,switch_type(uint16)] union {
276 [case(NetlogonValidationSamInfo)] netr_SamInfo2 *sam2;
277 [case(NetlogonValidationSamInfo2)] netr_SamInfo3 *sam3;
278 [case(4)] netr_PacInfo *pac;
279 [case(NetlogonValidationGenericInfo2)] netr_GenericInfo2 *generic;
280 [case(NetlogonValidationSamInfo4)] netr_SamInfo6 *sam6;
281 } netr_Validation;
282
283 typedef [public, flag(NDR_PAHEX)] struct {
284 uint8 data[8];
285 } netr_Credential;
286
287 typedef [public] struct {
288 netr_Credential cred;
289 time_t timestamp;
290 } netr_Authenticator;
291
292 NTSTATUS netr_LogonSamLogon(
293 [in,unique] [string,charset(UTF16)] uint16 *server_name,
294 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
295 [in,unique] netr_Authenticator *credential,
296 [in,out,unique] netr_Authenticator *return_authenticator,
297 [in] netr_LogonInfoClass logon_level,
298 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
299 [in] uint16 validation_level,
300 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
301 [out,ref] uint8 *authoritative
302 );
303
304
305 /*****************/
306 /* Function 0x03 */
307
308 NTSTATUS netr_LogonSamLogoff(
309 [in,unique] [string,charset(UTF16)] uint16 *server_name,
310 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
311 [in,unique] netr_Authenticator *credential,
312 [in,out,unique] netr_Authenticator *return_authenticator,
313 [in] netr_LogonInfoClass logon_level,
314 [in] [switch_is(logon_level)] netr_LogonLevel logon
315 );
316
317
318
319 /*****************/
320 /* Function 0x04 */
321
322 [public] NTSTATUS netr_ServerReqChallenge(
323 [in,unique,string,charset(UTF16)] uint16 *server_name,
324 [in,string,charset(UTF16)] uint16 computer_name[],
325 [in,ref] netr_Credential *credentials,
326 [out,ref] netr_Credential *return_credentials
327 );
328
329
330 /*****************/
331 /* Function 0x05 */
332
333 typedef enum netr_SchannelType netr_SchannelType;
334
335 NTSTATUS netr_ServerAuthenticate(
336 [in,unique,string,charset(UTF16)] uint16 *server_name,
337 [in,string,charset(UTF16)] uint16 account_name[],
338 [in] netr_SchannelType secure_channel_type,
339 [in,string,charset(UTF16)] uint16 computer_name[],
340 [in,ref] netr_Credential *credentials,
341 [out,ref] netr_Credential *return_credentials
342 );
343
344
345 /*****************/
346 /* Function 0x06 */
347
348 NTSTATUS netr_ServerPasswordSet(
349 [in,unique] [string,charset(UTF16)] uint16 *server_name,
350 [in] [string,charset(UTF16)] uint16 account_name[],
351 [in] netr_SchannelType secure_channel_type,
352 [in] [string,charset(UTF16)] uint16 computer_name[],
353 [in,ref] netr_Authenticator *credential,
354 [out,ref] netr_Authenticator *return_authenticator,
355 [in,ref] samr_Password *new_password
356 );
357
358
359 /*****************/
360 /* Function 0x07 */
361
362 typedef enum netr_SamDatabaseID netr_SamDatabaseID;
363
364 typedef struct {
365 [string,charset(UTF16)] uint16 *account_name;
366 lsa_String unknown1;
367 lsa_String unknown2;
368 lsa_String unknown3;
369 lsa_String unknown4;
370 uint32 unknown5;
371 uint32 unknown6;
372 uint32 unknown7;
373 uint32 unknown8;
374 } netr_DELTA_DELETE_USER;
375
376 typedef struct {
377 uint16 length;
378 [value(length)] uint16 size;
379 uint32 flags;
380 samr_Password pwd;
381 } netr_USER_KEY16;
382
383 typedef struct {
384 uint16 nt_length;
385 [value(nt_length)] uint16 nt_size;
386 uint32 nt_flags;
387 uint16 lm_length;
388 [value(lm_length)] uint16 lm_size;
389 uint32 lm_flags;
390 uint8 nt_history[nt_length];
391 uint8 lm_history[lm_length];
392 } netr_PasswordHistory;
393
394 typedef struct {
395 netr_USER_KEY16 lmpassword;
396 netr_USER_KEY16 ntpassword;
397 netr_PasswordHistory history;
398 } netr_USER_KEYS2;
399
400 typedef struct { /* TODO: make this a union! */
401 netr_USER_KEYS2 keys2;
402 } netr_USER_KEY_UNION;
403
404 typedef [public] struct {
405 uint32 version;
406 netr_USER_KEY_UNION keys;
407 } netr_USER_KEYS;
408
409 typedef struct {
410 boolean8 SensitiveDataFlag;
411 uint32 DataLength;
412
413 /* netr_USER_KEYS encrypted with the session key */
414 [size_is(DataLength)][flag(NDR_PAHEX)] uint8 *SensitiveData;
415 } netr_USER_PRIVATE_INFO;
416
417 typedef struct {
418 lsa_String account_name;
419 lsa_String full_name;
420 uint32 rid;
421 uint32 primary_gid;
422 lsa_String home_directory;
423 lsa_String home_drive;
424 lsa_String logon_script;
425 lsa_String description;
426 lsa_String workstations;
427 NTTIME last_logon;
428 NTTIME last_logoff;
429 samr_LogonHours logon_hours;
430 uint16 bad_password_count;
431 uint16 logon_count;
432 NTTIME last_password_change;
433 NTTIME acct_expiry;
434 samr_AcctFlags acct_flags;
435 samr_Password lmpassword;
436 samr_Password ntpassword;
437 boolean8 nt_password_present;
438 boolean8 lm_password_present;
439 boolean8 password_expired;
440 lsa_String comment;
441 lsa_BinaryString parameters;
442 uint16 country_code;
443 uint16 code_page;
444 netr_USER_PRIVATE_INFO user_private_info;
445 uint32 SecurityInformation;
446 sec_desc_buf sdbuf;
447 lsa_String profile_path;
448 lsa_String unknown2;
449 lsa_String unknown3;
450 lsa_String unknown4;
451 uint32 unknown5;
452 uint32 unknown6;
453 uint32 unknown7;
454 uint32 unknown8;
455 } netr_DELTA_USER;
456
457 typedef struct {
458 lsa_String domain_name;
459 lsa_String oem_information; /* comment */
460 dlong force_logoff_time;
461 uint16 min_password_length;
462 uint16 password_history_length;
463 /* yes, these are signed. They are in negative 100ns */
464 dlong max_password_age;
465 dlong min_password_age;
466 udlong sequence_num;
467 NTTIME domain_create_time;
468 uint32 SecurityInformation;
469 sec_desc_buf sdbuf;
470 lsa_BinaryString account_lockout;
471 lsa_String unknown2;
472 lsa_String unknown3;
473 lsa_String unknown4;
474 uint32 logon_to_chgpass;
475 uint32 unknown6;
476 uint32 unknown7;
477 uint32 unknown8;
478 } netr_DELTA_DOMAIN;
479
480 typedef struct {
481 lsa_String group_name;
482 uint32 rid;
483 uint32 attributes;
484 lsa_String description;
485 uint32 SecurityInformation;
486 sec_desc_buf sdbuf;
487 lsa_String unknown1;
488 lsa_String unknown2;
489 lsa_String unknown3;
490 lsa_String unknown4;
491 uint32 unknown5;
492 uint32 unknown6;
493 uint32 unknown7;
494 uint32 unknown8;
495 } netr_DELTA_GROUP;
496
497 typedef struct {
498 lsa_String OldName;
499 lsa_String NewName;
500 lsa_String unknown1;
501 lsa_String unknown2;
502 lsa_String unknown3;
503 lsa_String unknown4;
504 uint32 unknown5;
505 uint32 unknown6;
506 uint32 unknown7;
507 uint32 unknown8;
508 } netr_DELTA_RENAME;
509
510 typedef struct {
511 [size_is(num_rids)] uint32 *rids;
512 [size_is(num_rids)] uint32 *attribs;
513 uint32 num_rids;
514 uint32 unknown1;
515 uint32 unknown2;
516 uint32 unknown3;
517 uint32 unknown4;
518 } netr_DELTA_GROUP_MEMBER;
519
520 typedef struct {
521 lsa_String alias_name;
522 uint32 rid;
523 uint32 SecurityInformation;
524 sec_desc_buf sdbuf;
525 lsa_String description;
526 lsa_String unknown2;
527 lsa_String unknown3;
528 lsa_String unknown4;
529 uint32 unknown5;
530 uint32 unknown6;
531 uint32 unknown7;
532 uint32 unknown8;
533 } netr_DELTA_ALIAS;
534
535 typedef struct {
536 lsa_SidArray sids;
537 uint32 unknown1;
538 uint32 unknown2;
539 uint32 unknown3;
540 uint32 unknown4;
541 } netr_DELTA_ALIAS_MEMBER;
542
543 typedef struct {
544 uint32 pagedpoollimit;
545 uint32 nonpagedpoollimit;
546 uint32 minimumworkingsetsize;
547 uint32 maximumworkingsetsize;
548 uint32 pagefilelimit;
549 NTTIME timelimit;
550 } netr_QUOTA_LIMITS;
551
552 typedef struct {
553 uint32 maxlogsize;
554 NTTIME auditretentionperiod;
555 boolean8 auditingmode;
556 uint32 maxauditeventcount;
557 [size_is(maxauditeventcount+1)] uint32 *eventauditoptions;
558 lsa_String primary_domain_name;
559 dom_sid2 *sid;
560 netr_QUOTA_LIMITS quota_limits;
561 udlong sequence_num;
562 NTTIME db_create_time;
563 uint32 SecurityInformation;
564 sec_desc_buf sdbuf;
565 lsa_String unknown1;
566 lsa_String unknown2;
567 lsa_String unknown3;
568 lsa_String unknown4;
569 uint32 unknown5;
570 uint32 unknown6;
571 uint32 unknown7;
572 uint32 unknown8;
573 } netr_DELTA_POLICY;
574
575 typedef struct {
576 lsa_String domain_name;
577 uint32 num_controllers;
578 [size_is(num_controllers)] lsa_String *controller_names;
579 uint32 SecurityInformation;
580 sec_desc_buf sdbuf;
581 lsa_String unknown1;
582 lsa_String unknown2;
583 lsa_String unknown3;
584 lsa_String unknown4;
585 uint32 posix_offset;
586 uint32 unknown6;
587 uint32 unknown7;
588 uint32 unknown8;
589 } netr_DELTA_TRUSTED_DOMAIN;
590
591 typedef struct {
592 uint16 unknown;
593 } netr_DELTA_DELETE_TRUST;
594
595 typedef struct {
596 uint32 privilege_entries;
597 uint32 privilege_control;
598 [size_is(privilege_entries)] uint32 *privilege_attrib;
599 [size_is(privilege_entries)] lsa_String *privilege_name;
600 netr_QUOTA_LIMITS quotalimits;
601 uint32 system_flags;
602 uint32 SecurityInformation;
603 sec_desc_buf sdbuf;
604 lsa_String unknown1;
605 lsa_String unknown2;
606 lsa_String unknown3;
607 lsa_String unknown4;
608 uint32 unknown5;
609 uint32 unknown6;
610 uint32 unknown7;
611 uint32 unknown8;
612 } netr_DELTA_ACCOUNT;
613
614 typedef struct {
615 uint16 unknown;
616 } netr_DELTA_DELETE_ACCOUNT;
617
618 typedef struct {
619 uint16 unknown;
620 } netr_DELTA_DELETE_SECRET;
621
622 typedef struct {
623 uint32 len;
624 uint32 maxlen;
625 [size_is(maxlen)][length_is(len)] uint8 *cipher_data;
626 } netr_CIPHER_VALUE;
627
628 typedef struct {
629 netr_CIPHER_VALUE current_cipher;
630 NTTIME current_cipher_set_time;
631 netr_CIPHER_VALUE old_cipher;
632 NTTIME old_cipher_set_time;
633 uint32 SecurityInformation;
634 sec_desc_buf sdbuf;
635 lsa_String unknown1;
636 lsa_String unknown2;
637 lsa_String unknown3;
638 lsa_String unknown4;
639 uint32 unknown5;
640 uint32 unknown6;
641 uint32 unknown7;
642 uint32 unknown8;
643 } netr_DELTA_SECRET;
644
645 typedef enum {
646 NETR_DELTA_DOMAIN = 1,
647 NETR_DELTA_GROUP = 2,
648 NETR_DELTA_DELETE_GROUP = 3,
649 NETR_DELTA_RENAME_GROUP = 4,
650 NETR_DELTA_USER = 5,
651 NETR_DELTA_DELETE_USER = 6,
652 NETR_DELTA_RENAME_USER = 7,
653 NETR_DELTA_GROUP_MEMBER = 8,
654 NETR_DELTA_ALIAS = 9,
655 NETR_DELTA_DELETE_ALIAS = 10,
656 NETR_DELTA_RENAME_ALIAS = 11,
657 NETR_DELTA_ALIAS_MEMBER = 12,
658 NETR_DELTA_POLICY = 13,
659 NETR_DELTA_TRUSTED_DOMAIN = 14,
660 NETR_DELTA_DELETE_TRUST = 15,
661 NETR_DELTA_ACCOUNT = 16,
662 NETR_DELTA_DELETE_ACCOUNT = 17,
663 NETR_DELTA_SECRET = 18,
664 NETR_DELTA_DELETE_SECRET = 19,
665 NETR_DELTA_DELETE_GROUP2 = 20,
666 NETR_DELTA_DELETE_USER2 = 21,
667 NETR_DELTA_MODIFY_COUNT = 22
668 } netr_DeltaEnum;
669
670 typedef [switch_type(netr_DeltaEnum)] union {
671 [case(NETR_DELTA_DOMAIN)] netr_DELTA_DOMAIN *domain;
672 [case(NETR_DELTA_GROUP)] netr_DELTA_GROUP *group;
673 [case(NETR_DELTA_DELETE_GROUP)] ; /* rid only */
674 [case(NETR_DELTA_RENAME_GROUP)] netr_DELTA_RENAME *rename_group;
675 [case(NETR_DELTA_USER)] netr_DELTA_USER *user;
676 [case(NETR_DELTA_DELETE_USER)] ; /* rid only */
677 [case(NETR_DELTA_RENAME_USER)] netr_DELTA_RENAME *rename_user;
678 [case(NETR_DELTA_GROUP_MEMBER)] netr_DELTA_GROUP_MEMBER *group_member;
679 [case(NETR_DELTA_ALIAS)] netr_DELTA_ALIAS *alias;
680 [case(NETR_DELTA_DELETE_ALIAS)] ; /* rid only */
681 [case(NETR_DELTA_RENAME_ALIAS)] netr_DELTA_RENAME *rename_alias;
682 [case(NETR_DELTA_ALIAS_MEMBER)] netr_DELTA_ALIAS_MEMBER *alias_member;
683 [case(NETR_DELTA_POLICY)] netr_DELTA_POLICY *policy;
684 [case(NETR_DELTA_TRUSTED_DOMAIN)] netr_DELTA_TRUSTED_DOMAIN *trusted_domain;
685 [case(NETR_DELTA_DELETE_TRUST)] netr_DELTA_DELETE_TRUST delete_trust;
686 [case(NETR_DELTA_ACCOUNT)] netr_DELTA_ACCOUNT *account;
687 [case(NETR_DELTA_DELETE_ACCOUNT)] netr_DELTA_DELETE_ACCOUNT delete_account;
688 [case(NETR_DELTA_SECRET)] netr_DELTA_SECRET *secret;
689 [case(NETR_DELTA_DELETE_SECRET)] netr_DELTA_DELETE_SECRET delete_secret;
690 [case(NETR_DELTA_DELETE_GROUP2)] netr_DELTA_DELETE_USER *delete_group;
691 [case(NETR_DELTA_DELETE_USER2)] netr_DELTA_DELETE_USER *delete_user;
692 [case(NETR_DELTA_MODIFY_COUNT)] udlong *modified_count;
693 } netr_DELTA_UNION;
694
695 typedef [switch_type(netr_DeltaEnum)] union {
696 [case(NETR_DELTA_DOMAIN)] uint32 rid;
697 [case(NETR_DELTA_GROUP)] uint32 rid;
698 [case(NETR_DELTA_DELETE_GROUP)] uint32 rid;
699 [case(NETR_DELTA_RENAME_GROUP)] uint32 rid;
700 [case(NETR_DELTA_USER)] uint32 rid;
701 [case(NETR_DELTA_DELETE_USER)] uint32 rid;
702 [case(NETR_DELTA_RENAME_USER)] uint32 rid;
703 [case(NETR_DELTA_GROUP_MEMBER)] uint32 rid;
704 [case(NETR_DELTA_ALIAS)] uint32 rid;
705 [case(NETR_DELTA_DELETE_ALIAS)] uint32 rid;
706 [case(NETR_DELTA_RENAME_ALIAS)] uint32 rid;
707 [case(NETR_DELTA_ALIAS_MEMBER)] uint32 rid;
708 [case(NETR_DELTA_POLICY)] dom_sid2 *sid;
709 [case(NETR_DELTA_TRUSTED_DOMAIN)] dom_sid2 *sid;
710 [case(NETR_DELTA_DELETE_TRUST)] dom_sid2 *sid;
711 [case(NETR_DELTA_ACCOUNT)] dom_sid2 *sid;
712 [case(NETR_DELTA_DELETE_ACCOUNT)] dom_sid2 *sid;
713 [case(NETR_DELTA_SECRET)] [string,charset(UTF16)] uint16 *name;
714 [case(NETR_DELTA_DELETE_SECRET)] [string,charset(UTF16)] uint16 *name;
715 [case(NETR_DELTA_DELETE_GROUP2)] uint32 rid;
716 [case(NETR_DELTA_DELETE_USER2)] uint32 rid;
717 [case(NETR_DELTA_MODIFY_COUNT)] ;
718 } netr_DELTA_ID_UNION;
719
720 typedef struct {
721 netr_DeltaEnum delta_type;
722 [switch_is(delta_type)] netr_DELTA_ID_UNION delta_id_union;
723 [switch_is(delta_type)] netr_DELTA_UNION delta_union;
724 } netr_DELTA_ENUM;
725
726 typedef struct {
727 uint32 num_deltas;
728 [size_is(num_deltas)] netr_DELTA_ENUM *delta_enum;
729 } netr_DELTA_ENUM_ARRAY;
730
731
732 NTSTATUS netr_DatabaseDeltas(
733 [in] [string,charset(UTF16)] uint16 logon_server[],
734 [in] [string,charset(UTF16)] uint16 computername[],
735 [in,ref] netr_Authenticator *credential,
736 [in,out,ref] netr_Authenticator *return_authenticator,
737 [in] netr_SamDatabaseID database_id,
738 [in,out,ref] udlong *sequence_num,
739 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array,
740 [in] uint32 preferredmaximumlength
741 );
742
743
744 /*****************/
745 /* Function 0x08 */
746
747 NTSTATUS netr_DatabaseSync(
748 [in] [string,charset(UTF16)] uint16 logon_server[],
749 [in] [string,charset(UTF16)] uint16 computername[],
750 [in,ref] netr_Authenticator *credential,
751 [in,out,ref] netr_Authenticator *return_authenticator,
752 [in] netr_SamDatabaseID database_id,
753 [in,out,ref] uint32 *sync_context,
754 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array,
755 [in] uint32 preferredmaximumlength
756 );
757
758
759 /*****************/
760 /* Function 0x09 */
761
762 /* w2k3 returns NT_STATUS_NOT_IMPLEMENTED for this call */
763
764 typedef [flag(NDR_PAHEX)] struct {
765 uint8 computer_name[16];
766 uint32 timecreated;
767 uint32 serial_number;
768 } netr_UAS_INFO_0;
769
770 typedef struct {
771 [flag(NDR_REMAINING)] DATA_BLOB blob;
772 } netr_AccountBuffer;
773
774 NTSTATUS netr_AccountDeltas(
775 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
776 [in] [string,charset(UTF16)] uint16 computername[],
777 [in] netr_Authenticator credential,
778 [in,out,ref] netr_Authenticator *return_authenticator,
779 [in] netr_UAS_INFO_0 uas,
780 [in] uint32 count,
781 [in] uint32 level,
782 [in] uint32 buffersize,
783 [out,ref,subcontext(4)] netr_AccountBuffer *buffer,
784 [out,ref] uint32 *count_returned,
785 [out,ref] uint32 *total_entries,
786 [out,ref] netr_UAS_INFO_0 *recordid
787 );
788
789
790 /*****************/
791 /* Function 0x0A */
792
793 NTSTATUS netr_AccountSync(
794 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
795 [in] [string,charset(UTF16)] uint16 computername[],
796 [in] netr_Authenticator credential,
797 [in,out,ref] netr_Authenticator *return_authenticator,
798 [in] uint32 reference,
799 [in] uint32 level,
800 [in] uint32 buffersize,
801 [out,ref,subcontext(4)] netr_AccountBuffer *buffer,
802 [out,ref] uint32 *count_returned,
803 [out,ref] uint32 *total_entries,
804 [out,ref] uint32 *next_reference,
805 [in,out,ref] netr_UAS_INFO_0 *recordid
806 );
807
808
809 /*****************/
810 /* Function 0x0B */
811
812 WERROR netr_GetDcName(
813 [in] [string,charset(UTF16)] uint16 logon_server[],
814 [in,unique] [string,charset(UTF16)] uint16 *domainname,
815 [out,ref] [string,charset(UTF16)] uint16 **dcname
816 );
817
818 /*****************/
819 /* Function 0x0C */
820
821 typedef [bitmap32bit] bitmap {
822 NETLOGON_CTRL_REPL_NEEDED = 0x0001,
823 NETLOGON_CTRL_REPL_IN_PROGRESS = 0x0002,
824 NETLOGON_CTRL_REPL_FULL_SYNC = 0x0004
825 } netr_InfoFlags;
826
827 typedef struct {
828 netr_InfoFlags flags;
829 uint32 pdc_connection_status;
830 } netr_NETLOGON_INFO_1;
831
832 typedef struct {
833 netr_InfoFlags flags;
834 uint32 pdc_connection_status;
835 [string,charset(UTF16)] uint16 *trusted_dc_name;
836 uint32 tc_connection_status;
837 } netr_NETLOGON_INFO_2;
838
839 typedef struct {
840 netr_InfoFlags flags;
841 uint32 logon_attempts;
842 uint32 unknown1;
843 uint32 unknown2;
844 uint32 unknown3;
845 uint32 unknown4;
846 uint32 unknown5;
847 } netr_NETLOGON_INFO_3;
848
849 typedef union {
850 [case(1)] netr_NETLOGON_INFO_1 *info1;
851 [case(2)] netr_NETLOGON_INFO_2 *info2;
852 [case(3)] netr_NETLOGON_INFO_3 *info3;
853 } netr_CONTROL_QUERY_INFORMATION;
854
855 /* function_code values */
856 typedef [v1_enum] enum {
857 NETLOGON_CONTROL_SYNC = 2,
858 NETLOGON_CONTROL_REDISCOVER = 5,
859 NETLOGON_CONTROL_TC_QUERY = 6,
860 NETLOGON_CONTROL_TRANSPORT_NOTIFY = 7,
861 NETLOGON_CONTROL_SET_DBFLAG = 65534
862 } netr_LogonControlCode;
863
864 WERROR netr_LogonControl(
865 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
866 [in] netr_LogonControlCode function_code,
867 [in] uint32 level,
868 [out,ref,switch_is(level)] netr_CONTROL_QUERY_INFORMATION *info
869 );
870
871
872 /*****************/
873 /* Function 0x0D */
874
875 WERROR netr_GetAnyDCName(
876 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
877 [in,unique] [string,charset(UTF16)] uint16 *domainname,
878 [out,ref] [string,charset(UTF16)] uint16 **dcname
879 );
880
881
882 /*****************/
883 /* Function 0x0E */
884
885 typedef union {
886 [case(NETLOGON_CONTROL_REDISCOVER)] [string,charset(UTF16)] uint16 *domain;
887 [case(NETLOGON_CONTROL_TC_QUERY)] [string,charset(UTF16)] uint16 *domain;
888 [case(NETLOGON_CONTROL_TRANSPORT_NOTIFY)] [string,charset(UTF16)] uint16 *domain;
889 [case(NETLOGON_CONTROL_SET_DBFLAG)] uint32 debug_level;
890 } netr_CONTROL_DATA_INFORMATION;
891
892 WERROR netr_LogonControl2(
893 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
894 [in] netr_LogonControlCode function_code,
895 [in] uint32 level,
896 [in,ref][switch_is(function_code)] netr_CONTROL_DATA_INFORMATION *data,
897 [out,ref][switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
898 );
899
900
901 /* If NETLOGON_NEG_ARCFOUR flag is not set, then the passwords and LM
902 * session keys are encrypted with DES calls. (And the user session key
903 * is unencrypted) */
904
905 /*****************/
906 /* Function 0x0F */
907
908 typedef [bitmap32bit] bitmap {
909 NETLOGON_NEG_ACCOUNT_LOCKOUT = 0x00000001,
910 NETLOGON_NEG_PERSISTENT_SAMREPL = 0x00000002,
911 NETLOGON_NEG_ARCFOUR = 0x00000004,
912 NETLOGON_NEG_PROMOTION_COUNT = 0x00000008,
913 NETLOGON_NEG_CHANGELOG_BDC = 0x00000010,
914 NETLOGON_NEG_FULL_SYNC_REPL = 0x00000020,
915 NETLOGON_NEG_MULTIPLE_SIDS = 0x00000040,
916 NETLOGON_NEG_REDO = 0x00000080,
917 NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL = 0x00000100,
918 NETLOGON_NEG_SEND_PASSWORD_INFO_PDC = 0x00000200,
919 NETLOGON_NEG_GENERIC_PASSTHROUGH = 0x00000400,
920 NETLOGON_NEG_CONCURRENT_RPC = 0x00000800,
921 NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL = 0x00001000,
922 NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL = 0x00002000,
923 NETLOGON_NEG_128BIT = 0x00004000, /* STRONG_KEYS */
924 NETLOGON_NEG_TRANSITIVE_TRUSTS = 0x00008000,
925 NETLOGON_NEG_DNS_DOMAIN_TRUSTS = 0x00010000,
926 NETLOGON_NEG_PASSWORD_SET2 = 0x00020000,
927 NETLOGON_NEG_GETDOMAININFO = 0x00040000,
928 NETLOGON_NEG_CROSS_FOREST_TRUSTS = 0x00080000,
929 NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION = 0x00100000,
930 NETLOGON_NEG_RODC_PASSTHROUGH = 0x00200000,
931 NETLOGON_NEG_AUTHENTICATED_RPC_LSASS = 0x20000000,
932 NETLOGON_NEG_SCHANNEL = 0x40000000 /* AUTHENTICATED_RPC */
933 } netr_NegotiateFlags;
934
935 NTSTATUS netr_ServerAuthenticate2(
936 [in,unique] [string,charset(UTF16)] uint16 *server_name,
937 [in] [string,charset(UTF16)] uint16 account_name[],
938 [in] netr_SchannelType secure_channel_type,
939 [in] [string,charset(UTF16)] uint16 computer_name[],
940 [in,ref] netr_Credential *credentials,
941 [out,ref] netr_Credential *return_credentials,
942 [in,out,ref] netr_NegotiateFlags *negotiate_flags
943 );
944
945
946 /*****************/
947 /* Function 0x10 */
948
949 NTSTATUS netr_DatabaseSync2(
950 [in] [string,charset(UTF16)] uint16 logon_server[],
951 [in] [string,charset(UTF16)] uint16 computername[],
952 [in,ref] netr_Authenticator *credential,
953 [in,out,ref] netr_Authenticator *return_authenticator,
954 [in] netr_SamDatabaseID database_id,
955 [in] uint16 restart_state,
956 [in,out,ref] uint32 *sync_context,
957 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array,
958 [in] uint32 preferredmaximumlength
959 );
960
961
962 /*****************/
963 /* Function 0x11 */
964
965 /* i'm not at all sure how this call works */
966
967 typedef [bitmap16bit] bitmap {
968 NETR_CHANGELOG_IMMEDIATE_REPL_REQUIRED = 0x0001,
969 NETR_CHANGELOG_CHANGED_PASSWORD = 0x0002,
970 NETR_CHANGELOG_SID_INCLUDED = 0x0004,
971 NETR_CHANGELOG_NAME_INCLUDED = 0x0008,
972 NETR_CHANGELOG_FIRST_PROMOTION_OBJ = 0x0010
973 } netr_ChangeLogFlags;
974
975 typedef [nodiscriminant] union {
976 [case(NETR_CHANGELOG_SID_INCLUDED)] dom_sid object_sid;
977 [case(NETR_CHANGELOG_NAME_INCLUDED)] nstring object_name;
978 [default];
979 } netr_ChangeLogObject;
980
981 typedef [public,gensize] struct {
982 uint32 serial_number1;
983 uint32 serial_number2;
984 uint32 object_rid;
985 netr_ChangeLogFlags flags;
986 netr_SamDatabaseID8Bit db_index;
987 netr_DeltaEnum8Bit delta_type;
988 [switch_is(flags & (NETR_CHANGELOG_SID_INCLUDED|NETR_CHANGELOG_NAME_INCLUDED))] netr_ChangeLogObject object;
989 } netr_ChangeLogEntry;
990
991 NTSTATUS netr_DatabaseRedo(
992 [in] [string,charset(UTF16)] uint16 logon_server[],
993 [in] [string,charset(UTF16)] uint16 computername[],
994 [in] netr_Authenticator *credential,
995 [in,out,ref] netr_Authenticator *return_authenticator,
996 [in] [subcontext(4),subcontext_size(change_log_entry_size)] netr_ChangeLogEntry change_log_entry,
997 [in] [value(ndr_size_netr_ChangeLogEntry(&change_log_entry, ndr->flags))] uint32 change_log_entry_size,
998 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array
999 );
1000
1001
1002 /*****************/
1003 /* Function 0x12 */
1004
1005 WERROR netr_LogonControl2Ex(
1006 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
1007 [in] uint32 function_code,
1008 [in] uint32 level,
1009 [in][switch_is(function_code)] netr_CONTROL_DATA_INFORMATION data,
1010 [out,ref][switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
1011 );
1012
1013 /*****************/
1014 /* Function 0x13 */
1015 typedef struct {
1016 uint32 length;
1017 [size_is(length)] uint8 *data;
1018 } netr_Blob;
1019
1020 WERROR netr_NetrEnumerateTrustedDomains(
1021 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1022 [out,ref] netr_Blob *trusted_domains_blob
1023 );
1024
1025 /*****************/
1026 /* Function 0x14 */
1027
1028 /* one unkown bit still: DS_IP_VERSION_AGNOSTIC - gd*/
1029
1030 const int DSGETDC_VALID_FLAGS = (DS_FORCE_REDISCOVERY |
1031 DS_DIRECTORY_SERVICE_REQUIRED |
1032 DS_DIRECTORY_SERVICE_PREFERRED |
1033 DS_GC_SERVER_REQUIRED |
1034 DS_PDC_REQUIRED |
1035 DS_BACKGROUND_ONLY |
1036 DS_IP_REQUIRED |
1037 DS_KDC_REQUIRED |
1038 DS_TIMESERV_REQUIRED |
1039 DS_WRITABLE_REQUIRED |
1040 DS_GOOD_TIMESERV_PREFERRED |
1041 DS_AVOID_SELF |
1042 DS_ONLY_LDAP_NEEDED |
1043 DS_IS_FLAT_NAME |
1044 DS_IS_DNS_NAME |
1045 DS_RETURN_FLAT_NAME |
1046 DS_RETURN_DNS_NAME);
1047
1048 typedef [bitmap32bit] bitmap {
1049 DS_FORCE_REDISCOVERY = 0x00000001,
1050 DS_DIRECTORY_SERVICE_REQUIRED = 0x00000010,
1051 DS_DIRECTORY_SERVICE_PREFERRED = 0x00000020,
1052 DS_GC_SERVER_REQUIRED = 0x00000040,
1053 DS_PDC_REQUIRED = 0x00000080,
1054 DS_BACKGROUND_ONLY = 0x00000100,
1055 DS_IP_REQUIRED = 0x00000200,
1056 DS_KDC_REQUIRED = 0x00000400,
1057 DS_TIMESERV_REQUIRED = 0x00000800,
1058 DS_WRITABLE_REQUIRED = 0x00001000,
1059 DS_GOOD_TIMESERV_PREFERRED = 0x00002000,
1060 DS_AVOID_SELF = 0x00004000,
1061 DS_ONLY_LDAP_NEEDED = 0x00008000,
1062 DS_IS_FLAT_NAME = 0x00010000,
1063 DS_IS_DNS_NAME = 0x00020000,
1064 DS_TRY_NEXTCLOSEST_SITE = 0x00040000,
1065 DS_DIRECTORY_SERVICE_6_REQUIRED = 0x00080000,
1066 DS_RETURN_DNS_NAME = 0x40000000,
1067 DS_RETURN_FLAT_NAME = 0x80000000
1068 } netr_DsRGetDCName_flags;
1069
1070 typedef [v1_enum] enum {
1071 DS_ADDRESS_TYPE_INET = 1,
1072 DS_ADDRESS_TYPE_NETBIOS = 2
1073 } netr_DsRGetDCNameInfo_AddressType;
1074
1075 typedef [bitmap32bit] bitmap {
1076 DS_SERVER_PDC = NBT_SERVER_PDC,
1077 DS_SERVER_GC = NBT_SERVER_GC,
1078 DS_SERVER_LDAP = NBT_SERVER_LDAP,
1079 DS_SERVER_DS = NBT_SERVER_DS,
1080 DS_SERVER_KDC = NBT_SERVER_KDC,
1081 DS_SERVER_TIMESERV = NBT_SERVER_TIMESERV,
1082 DS_SERVER_CLOSEST = NBT_SERVER_CLOSEST,
1083 DS_SERVER_WRITABLE = NBT_SERVER_WRITABLE,
1084 DS_SERVER_GOOD_TIMESERV = NBT_SERVER_GOOD_TIMESERV,
1085 DS_SERVER_NDNC = NBT_SERVER_NDNC,
1086 DS_SERVER_SELECT_SECRET_DOMAIN_6 = NBT_SERVER_SELECT_SECRET_DOMAIN_6,
1087 DS_SERVER_FULL_SECRET_DOMAIN_6 = NBT_SERVER_FULL_SECRET_DOMAIN_6,
1088 DS_DNS_CONTROLLER = 0x20000000,
1089 DS_DNS_DOMAIN = 0x40000000,
1090 DS_DNS_FOREST = 0x80000000
1091 } netr_DsR_DcFlags;
1092
1093 typedef [public] struct {
1094 [string,charset(UTF16)] uint16 *dc_unc;
1095 [string,charset(UTF16)] uint16 *dc_address;
1096 netr_DsRGetDCNameInfo_AddressType dc_address_type;
1097 GUID domain_guid;
1098 [string,charset(UTF16)] uint16 *domain_name;
1099 [string,charset(UTF16)] uint16 *forest_name;
1100 netr_DsR_DcFlags dc_flags;
1101 [string,charset(UTF16)] uint16 *dc_site_name;
1102 [string,charset(UTF16)] uint16 *client_site_name;
1103 } netr_DsRGetDCNameInfo;
1104
1105 WERROR netr_DsRGetDCName(
1106 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1107 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1108 [in,unique] GUID *domain_guid,
1109 [in,unique] GUID *site_guid,
1110 [in] netr_DsRGetDCName_flags flags,
1111 [out,ref] netr_DsRGetDCNameInfo **info
1112 );
1113
1114 /*****************/
1115 /* Function 0x15 */
1116 [todo] WERROR netr_NETRLOGONDUMMYROUTINE1();
1117
1118 /****************/
1119 /* Function 0x16 */
1120 [todo] WERROR netr_NETRLOGONSETSERVICEBITS();
1121
1122 /****************/
1123 /* Function 0x17 */
1124 WERROR netr_LogonGetTrustRid(
1125 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1126 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1127 [out,ref] uint32 *rid
1128 );
1129
1130 /****************/
1131 /* Function 0x18 */
1132 [todo] WERROR netr_NETRLOGONCOMPUTESERVERDIGEST();
1133
1134 /****************/
1135 /* Function 0x19 */
1136 [todo] WERROR netr_NETRLOGONCOMPUTECLIENTDIGEST();
1137
1138 /****************/
1139 /* Function 0x1a */
1140 [public] NTSTATUS netr_ServerAuthenticate3(
1141 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1142 [in] [string,charset(UTF16)] uint16 account_name[],
1143 [in] netr_SchannelType secure_channel_type,
1144 [in] [string,charset(UTF16)] uint16 computer_name[],
1145 [in,ref] netr_Credential *credentials,
1146 [out,ref] netr_Credential *return_credentials,
1147 [in,out,ref] netr_NegotiateFlags *negotiate_flags,
1148 [out,ref] uint32 *rid
1149 );
1150
1151 /****************/
1152 /* Function 0x1b */
1153
1154 WERROR netr_DsRGetDCNameEx(
1155 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1156 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1157 [in,unique] GUID *domain_guid,
1158 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1159 [in] netr_DsRGetDCName_flags flags,
1160 [out,ref] netr_DsRGetDCNameInfo **info
1161 );
1162
1163
1164 /****************/
1165 /* Function 0x1c */
1166 WERROR netr_DsRGetSiteName(
1167 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1168 [out,ref] [string,charset(UTF16)] uint16 **site
1169 );
1170
1171 /****************/
1172 /* Function 0x1d */
1173 typedef [bitmap32bit] bitmap {
1174 NETR_TRUST_FLAG_IN_FOREST = 0x00000001,
1175 NETR_TRUST_FLAG_OUTBOUND = 0x00000002,
1176 NETR_TRUST_FLAG_TREEROOT = 0x00000004,
1177 NETR_TRUST_FLAG_PRIMARY = 0x00000008,
1178 NETR_TRUST_FLAG_NATIVE = 0x00000010,
1179 NETR_TRUST_FLAG_INBOUND = 0x00000020,
1180 NETR_TRUST_FLAG_MIT_KRB5 = 0x00000080,
1181 NETR_TRUST_FLAG_AES = 0x00000100
1182 } netr_TrustFlags;
1183
1184 typedef [flag(NDR_PAHEX)] struct {
1185 uint16 length;
1186 uint16 size;
1187 [size_is(size/2),length_is(length/2)] uint16 *data;
1188 } netr_BinaryString;
1189
1190 typedef struct {
1191 netr_Blob blob;
1192 [string,charset(UTF16)] uint16 *workstation_domain;
1193 [string,charset(UTF16)] uint16 *workstation_site;
1194 [string,charset(UTF16)] uint16 *unknown1;
1195 [string,charset(UTF16)] uint16 *unknown2;
1196 [string,charset(UTF16)] uint16 *unknown3;
1197 [string,charset(UTF16)] uint16 *unknown4;
1198 netr_BinaryString blob2;
1199 lsa_String product;
1200 lsa_String unknown5;
1201 lsa_String unknown6;
1202 uint32 unknown7[4];
1203 } netr_DomainQuery1;
1204
1205 typedef union {
1206 [case(1)] netr_DomainQuery1 *query1;
1207 [case(2)] netr_DomainQuery1 *query1;
1208 } netr_DomainQuery;
1209
1210 typedef struct {
1211 /* these first 3 values come from the fact windows
1212 actually encodes this structure as a UNICODE_STRING
1213 - see MS-NRPC section 2.2.1.3.9 */
1214 [value(8)] uint32 length;
1215 [value(0)] uint32 dummy;
1216 [value(8)] uint32 size;
1217 netr_TrustFlags flags;
1218 uint32 parent_index;
1219 uint32 trust_type;
1220 uint32 trust_attributes;
1221 } netr_trust_extension;
1222
1223 typedef struct {
1224 uint16 length; /* value is 16 when info != NULL, otherwise 0 */
1225 [value(length)] uint16 size; /* value is 16 when info != NULL, otherwise 0 */
1226 netr_trust_extension *info;
1227 } netr_trust_extension_container;
1228
1229 typedef struct {
1230 lsa_String domainname;
1231 lsa_String fulldomainname;
1232 lsa_String forest;
1233 GUID guid;
1234 dom_sid2 *sid;
1235 netr_trust_extension_container trust_extension;
1236 lsa_String dummystring[3];
1237 uint32 dummy[4];
1238 } netr_DomainTrustInfo;
1239
1240 typedef struct {
1241 uint32 policy_size;
1242 [size_is(policy_size)] uint8 *policy;
1243 } netr_LsaPolicyInfo;
1244
1245 typedef [public,bitmap32bit] bitmap {
1246 NETR_WS_FLAG_HANDLES_INBOUND_TRUSTS = 0x00000001,
1247 NETR_WS_FLAG_HANDLES_SPN_UPDATE = 0x00000002
1248 } netr_WorkstationFlags;
1249
1250 typedef struct {
1251 netr_DomainTrustInfo domaininfo;
1252 uint32 num_trusts;
1253 [size_is(num_trusts)] netr_DomainTrustInfo *trusts;
1254 netr_LsaPolicyInfo lsa_policy;
1255 lsa_String dns_hostname;
1256 lsa_String dummystring[3];
1257 netr_WorkstationFlags workstation_flags;
1258 uint32 supported_enc_types;
1259 uint32 dummy[2];
1260 } netr_DomainInfo1;
1261
1262 typedef union {
1263 [case(1)] netr_DomainInfo1 *info1;
1264 [case(2)] netr_DomainInfo1 *info2;
1265 } netr_DomainInfo;
1266
1267 NTSTATUS netr_LogonGetDomainInfo(
1268 [in] [string,charset(UTF16)] uint16 server_name[],
1269 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1270 [in,ref] netr_Authenticator *credential,
1271 [in,out,ref] netr_Authenticator *return_authenticator,
1272 [in] uint32 level,
1273 [in,switch_is(level)] netr_DomainQuery query,
1274 [out,ref,switch_is(level)] netr_DomainInfo *info
1275 );
1276
1277 typedef [flag(NDR_PAHEX)] struct {
1278 uint8 data[512];
1279 uint32 length;
1280 } netr_CryptPassword;
1281
1282 /*****************/
1283 /* Function 0x1e */
1284 NTSTATUS netr_ServerPasswordSet2(
1285 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1286 [in] [string,charset(UTF16)] uint16 account_name[],
1287 [in] netr_SchannelType secure_channel_type,
1288 [in] [string,charset(UTF16)] uint16 computer_name[],
1289 [in,ref] netr_Authenticator *credential,
1290 [out,ref] netr_Authenticator *return_authenticator,
1291 [in,ref] netr_CryptPassword *new_password
1292 );
1293
1294 /****************/
1295 /* Function 0x1f */
1296 WERROR netr_ServerPasswordGet(
1297 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1298 [in] [string,charset(UTF16)] uint16 account_name[],
1299 [in] netr_SchannelType secure_channel_type,
1300 [in] [string,charset(UTF16)] uint16 computer_name[],
1301 [in,ref] netr_Authenticator *credential,
1302 [out,ref] netr_Authenticator *return_authenticator,
1303 [out,ref] samr_Password *password
1304 );
1305
1306 /****************/
1307 /* Function 0x20 */
1308 [todo] WERROR netr_NETRLOGONSENDTOSAM();
1309
1310 /****************/
1311 /* Function 0x21 */
1312 typedef struct {
1313 uint32 count;
1314 [size_is(count)] lsa_String *sitename;
1315 } netr_DsRAddressToSitenamesWCtr;
1316
1317 typedef struct {
1318 [size_is(size)] uint8 *buffer;
1319 uint32 size;
1320 } netr_DsRAddress;
1321
1322 WERROR netr_DsRAddressToSitenamesW(
1323 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1324 [in] [range(0,32000)] uint32 count,
1325 [in] [size_is(count)] [ref] netr_DsRAddress *addresses,
1326 [out] [ref] netr_DsRAddressToSitenamesWCtr **ctr
1327 );
1328
1329 /****************/
1330 /* Function 0x22 */
1331 WERROR netr_DsRGetDCNameEx2(
1332 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1333 [in,unique] [string,charset(UTF16)] uint16 *client_account,
1334 [in] samr_AcctFlags mask,
1335 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1336 [in,unique] GUID *domain_guid,
1337 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1338 [in] netr_DsRGetDCName_flags flags,
1339 [out,ref] netr_DsRGetDCNameInfo **info
1340 );
1341
1342 /****************/
1343 /* Function 0x23 */
1344 [todo] WERROR netr_NETRLOGONGETTIMESERVICEPARENTDOMAIN();
1345
1346 /****************/
1347 /* Function 0x24 */
1348
1349 typedef [v1_enum] enum {
1350 NETR_TRUST_TYPE_DOWNLEVEL = 1,
1351 NETR_TRUST_TYPE_UPLEVEL = 2,
1352 NETR_TRUST_TYPE_MIT = 3,
1353 NETR_TRUST_TYPE_DCE = 4
1354 } netr_TrustType;
1355
1356 typedef [bitmap32bit] bitmap {
1357 NETR_TRUST_ATTRIBUTE_NON_TRANSITIVE = 0x00000001,
1358 NETR_TRUST_ATTRIBUTE_UPLEVEL_ONLY = 0x00000002,
1359 NETR_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN = 0x00000004,
1360 NETR_TRUST_ATTRIBUTE_FOREST_TRANSITIVE = 0x00000008,
1361 NETR_TRUST_ATTRIBUTE_CROSS_ORGANIZATION = 0x00000010,
1362 NETR_TRUST_ATTRIBUTE_WITHIN_FOREST = 0x00000020,
1363 NETR_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL = 0x00000040
1364 } netr_TrustAttributes;
1365
1366 typedef struct {
1367 [string,charset(UTF16)] uint16 *netbios_name;
1368 [string,charset(UTF16)] uint16 *dns_name;
1369 netr_TrustFlags trust_flags;
1370 uint32 parent_index;
1371 netr_TrustType trust_type;
1372 netr_TrustAttributes trust_attributes;
1373 dom_sid2 *sid;
1374 GUID guid;
1375 } netr_DomainTrust;
1376
1377 typedef struct {
1378 uint32 count;
1379 [size_is(count)] netr_DomainTrust *array;
1380 } netr_DomainTrustList;
1381
1382 WERROR netr_NetrEnumerateTrustedDomainsEx(
1383 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1384 [out,ref] netr_DomainTrustList *dom_trust_list
1385 );
1386
1387 /****************/
1388 /* Function 0x25 */
1389 typedef struct {
1390 uint32 count;
1391 [size_is(count)] lsa_String *sitename;
1392 [size_is(count)] lsa_String *subnetname;
1393 } netr_DsRAddressToSitenamesExWCtr;
1394
1395 WERROR netr_DsRAddressToSitenamesExW(
1396 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1397 [in] [range(0,32000)] uint32 count,
1398 [in] [size_is(count)] [ref] netr_DsRAddress *addresses,
1399 [out] [ref] netr_DsRAddressToSitenamesExWCtr **ctr
1400 );
1401
1402 /****************/
1403 /* Function 0x26 */
1404
1405 typedef struct {
1406 uint32 num_sites;
1407 [size_is(num_sites)] [unique] lsa_String *sites;
1408 } DcSitesCtr;
1409
1410 WERROR netr_DsrGetDcSiteCoverageW(
1411 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1412 [out,ref] DcSitesCtr **ctr
1413 );
1414
1415 /****************/
1416 /* Function 0x27 */
1417 NTSTATUS netr_LogonSamLogonEx(
1418 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1419 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1420 [in] netr_LogonInfoClass logon_level,
1421 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
1422 [in] uint16 validation_level,
1423 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
1424 [out,ref] uint8 *authoritative,
1425 [in,out,ref] uint32 *flags
1426 );
1427
1428 /****************/
1429 /* Function 0x28 */
1430
1431 WERROR netr_DsrEnumerateDomainTrusts(
1432 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1433 [in] netr_TrustFlags trust_flags,
1434 [out,ref] netr_DomainTrustList *trusts
1435 );
1436
1437
1438 /****************/
1439 /* Function 0x29 */
1440 WERROR netr_DsrDeregisterDNSHostRecords(
1441 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1442 [in,unique] [string,charset(UTF16)] uint16 *domain,
1443 [in,unique] GUID *domain_guid,
1444 [in,unique] GUID *dsa_guid,
1445 [in,ref] [string,charset(UTF16)] uint16 *dns_host
1446 );
1447
1448 /****************/
1449 /* Function 0x2a */
1450 NTSTATUS netr_ServerTrustPasswordsGet(
1451 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1452 [in] [string,charset(UTF16)] uint16 account_name[],
1453 [in] netr_SchannelType secure_channel_type,
1454 [in] [string,charset(UTF16)] uint16 computer_name[],
1455 [in,ref] netr_Authenticator *credential,
1456 [out,ref] netr_Authenticator *return_authenticator,
1457 [out,ref] samr_Password *password,
1458 [out,ref] samr_Password *password2
1459 );
1460
1461 /****************/
1462 /* Function 0x2b */
1463
1464 const int DS_GFTI_UPDATE_TDO = 0x1;
1465
1466 WERROR netr_DsRGetForestTrustInformation(
1467 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1468 [in,unique] [string,charset(UTF16)] uint16 *trusted_domain_name,
1469 [in] uint32 flags,
1470 [out,ref] lsa_ForestTrustInformation **forest_trust_info
1471 );
1472
1473 /****************/
1474 /* Function 0x2c */
1475 WERROR netr_GetForestTrustInformation(
1476 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1477 [in,ref] [string,charset(UTF16)] uint16 *trusted_domain_name,
1478 [in,ref] netr_Authenticator *credential,
1479 [out,ref] netr_Authenticator *return_authenticator,
1480 [in] uint32 flags,
1481 [out,ref] lsa_ForestTrustInformation **forest_trust_info
1482 );
1483
1484 /****************/
1485 /* Function 0x2d */
1486
1487 /* this is the ADS varient. I don't yet know what the "flags" are for */
1488 NTSTATUS netr_LogonSamLogonWithFlags(
1489 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1490 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1491 [in,unique] netr_Authenticator *credential,
1492 [in,out,unique] netr_Authenticator *return_authenticator,
1493 [in] netr_LogonInfoClass logon_level,
1494 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
1495 [in] uint16 validation_level,
1496 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
1497 [out,ref] uint8 *authoritative,
1498 [in,out,ref] uint32 *flags
1499 );
1500
1501 /****************/
1502 /* Function 0x2e */
1503 [todo] WERROR netr_NETRSERVERGETTRUSTINFO();
1504 }
Proof-of-concept samba4 based caching proxy