2 Unix SMB/Netbios implementation.
4 SMB parameters and setup
5 Copyright (C) Andrew Tridgell 1992-1997
6 Copyright (C) Luke Kenneth Casson Leighton 1996-1997
7 Copyright (C) Paul Ashton 1997
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 #ifndef _RPC_LSA_H /* _RPC_LSA_H */
31 SID_NAME_USE_NONE
= 0,/* NOTUSED */
32 SID_NAME_USER
= 1, /* user */
33 SID_NAME_DOM_GRP
= 2, /* domain group */
34 SID_NAME_DOMAIN
= 3, /* domain: don't know what this is */
35 SID_NAME_ALIAS
= 4, /* local group */
36 SID_NAME_WKN_GRP
= 5, /* well-known group */
37 SID_NAME_DELETED
= 6, /* deleted account: needed for c2 rating */
38 SID_NAME_INVALID
= 7, /* invalid account */
39 SID_NAME_UNKNOWN
= 8 /* oops. */
42 /* Opcodes available on this pipe */
44 #define LSA_CLOSE 0x00
45 #define LSA_DELETE 0x01
46 #define LSA_ENUM_PRIVS 0x02
47 #define LSA_QUERYSECOBJ 0x03
48 #define LSA_SETSECOBJ 0x04
49 #define LSA_CHANGEPASSWORD 0x05
50 #define LSA_OPENPOLICY 0x06
51 #define LSA_QUERYINFOPOLICY 0x07
52 #define LSA_SETINFOPOLICY 0x08
53 #define LSA_CLEARAUDITLOG 0x09
54 #define LSA_CREATEACCOUNT 0x0a
55 #define LSA_ENUM_ACCOUNTS 0x0b
56 #define LSA_CREATETRUSTDOM 0x0c
57 #define LSA_ENUMTRUSTDOM 0x0d
58 #define LSA_LOOKUPNAMES 0x0e
59 #define LSA_LOOKUPSIDS 0x0f
60 #define LSA_CREATESECRET 0x10
61 #define LSA_OPENACCOUNT 0x11
62 #define LSA_ENUMPRIVSACCOUNT 0x12
63 #define LSA_ADDPRIVS 0x13
64 #define LSA_REMOVEPRIVS 0x14
65 #define LSA_GETQUOTAS 0x15
66 #define LSA_SETQUOTAS 0x16
67 #define LSA_GETSYSTEMACCOUNT 0x17
68 #define LSA_SETSYSTEMACCOUNT 0x18
69 #define LSA_OPENTRUSTDOM 0x19
70 #define LSA_QUERYTRUSTDOM 0x1a
71 #define LSA_SETINFOTRUSTDOM 0x1b
72 #define LSA_OPENSECRET 0x1c
73 #define LSA_SETSECRET 0x1d
74 #define LSA_QUERYSECRET 0x1e
75 #define LSA_LOOKUPPRIVVALUE 0x1f
76 #define LSA_LOOKUPPRIVNAME 0x20
77 #define LSA_PRIV_GET_DISPNAME 0x21
78 #define LSA_DELETEOBJECT 0x22
79 #define LSA_ENUMACCTWITHRIGHT 0x23
80 #define LSA_ENUMACCTRIGHTS 0x24
81 #define LSA_ADDACCTRIGHTS 0x25
82 #define LSA_REMOVEACCTRIGHTS 0x26
83 #define LSA_QUERYTRUSTDOMINFO 0x27
84 #define LSA_SETTRUSTDOMINFO 0x28
85 #define LSA_DELETETRUSTDOM 0x29
86 #define LSA_STOREPRIVDATA 0x2a
87 #define LSA_RETRPRIVDATA 0x2b
88 #define LSA_OPENPOLICY2 0x2c
89 #define LSA_UNK_GET_CONNUSER 0x2d /* LsaGetConnectedCredentials ? */
91 /* XXXX these are here to get a compile! */
92 #define LSA_LOOKUPRIDS 0xFD
94 #define LSA_MAX_GROUPS 96
95 #define LSA_MAX_SIDS 128
97 /* DOM_QUERY - info class 3 and 5 LSA Query response */
98 typedef struct dom_query_info
100 uint16 uni_dom_max_len
; /* domain name string length * 2 */
101 uint16 uni_dom_str_len
; /* domain name string length * 2 */
102 uint32 buffer_dom_name
; /* undocumented domain name string buffer pointer */
103 uint32 buffer_dom_sid
; /* undocumented domain SID string buffer pointer */
104 UNISTR2 uni_domain_name
; /* domain name (unicode string) */
105 DOM_SID2 dom_sid
; /* domain SID */
109 /* level 5 is same as level 3. we hope. */
110 typedef DOM_QUERY DOM_QUERY_3
;
111 typedef DOM_QUERY DOM_QUERY_5
;
113 /* level 2 is auditing settings */
114 typedef struct dom_query_2
116 uint32 auditing_enabled
;
117 uint32 count1
; /* usualy 7, at least on nt4sp4 */
118 uint32 count2
; /* the same */
119 uint32
*auditsettings
;
122 /* level 6 is server role information */
123 typedef struct dom_query_6
125 uint16 server_role
; /* 2=backup, 3=primary */
128 typedef struct seq_qos_info
131 uint16 sec_imp_level
; /* 0x02 - impersonation level */
132 uint8 sec_ctxt_mode
; /* 0x01 - context tracking mode */
133 uint8 effective_only
; /* 0x00 - effective only */
134 uint32 unknown
; /* 0x2000 0000 - not known */
138 typedef struct obj_attr_info
140 uint32 len
; /* 0x18 - length (in bytes) inc. the length field. */
141 uint32 ptr_root_dir
; /* 0 - root directory (pointer) */
142 uint32 ptr_obj_name
; /* 0 - object name (pointer) */
143 uint32 attributes
; /* 0 - attributes (undocumented) */
144 uint32 ptr_sec_desc
; /* 0 - security descriptior (pointer) */
145 uint32 ptr_sec_qos
; /* security quality of service */
146 LSA_SEC_QOS
*sec_qos
;
150 /* LSA_Q_OPEN_POL - LSA Query Open Policy */
151 typedef struct lsa_q_open_pol_info
153 uint32 ptr
; /* undocumented buffer pointer */
154 uint16 system_name
; /* 0x5c - system name */
155 LSA_OBJ_ATTR attr
; /* object attributes */
157 uint32 des_access
; /* desired access attributes */
161 /* LSA_R_OPEN_POL - response to LSA Open Policy */
162 typedef struct lsa_r_open_pol_info
164 POLICY_HND pol
; /* policy handle */
165 NTSTATUS status
; /* return code */
169 /* LSA_Q_OPEN_POL2 - LSA Query Open Policy */
170 typedef struct lsa_q_open_pol2_info
172 uint32 ptr
; /* undocumented buffer pointer */
173 UNISTR2 uni_server_name
; /* server name, starting with two '\'s */
174 LSA_OBJ_ATTR attr
; /* object attributes */
176 uint32 des_access
; /* desired access attributes */
180 /* LSA_R_OPEN_POL2 - response to LSA Open Policy */
181 typedef struct lsa_r_open_pol2_info
183 POLICY_HND pol
; /* policy handle */
184 NTSTATUS status
; /* return code */
188 /* LSA_Q_QUERY_SEC_OBJ - LSA query security */
189 typedef struct lsa_query_sec_obj_info
191 POLICY_HND pol
; /* policy handle */
194 } LSA_Q_QUERY_SEC_OBJ
;
196 /* LSA_R_QUERY_SEC_OBJ - probably an open */
197 typedef struct r_lsa_query_sec_obj_info
202 NTSTATUS status
; /* return status */
204 } LSA_R_QUERY_SEC_OBJ
;
206 /* LSA_Q_QUERY_INFO - LSA query info policy */
207 typedef struct lsa_query_info
209 POLICY_HND pol
; /* policy handle */
210 uint16 info_class
; /* info class */
215 typedef union lsa_info_union
223 /* LSA_R_QUERY_INFO - response to LSA query info policy */
224 typedef struct lsa_r_query_info
226 uint32 undoc_buffer
; /* undocumented buffer pointer */
227 uint16 info_class
; /* info class (same as info class in request) */
231 NTSTATUS status
; /* return code */
235 /* LSA_Q_ENUM_TRUST_DOM - LSA enumerate trusted domains */
236 typedef struct lsa_enum_trust_dom_info
238 POLICY_HND pol
; /* policy handle */
239 uint32 enum_context
; /* enumeration context handle */
240 uint32 preferred_len
; /* preferred maximum length */
242 } LSA_Q_ENUM_TRUST_DOM
;
244 /* LSA_R_ENUM_TRUST_DOM - response to LSA enumerate trusted domains */
245 typedef struct lsa_r_enum_trust_dom_info
247 uint32 enum_context
; /* enumeration context handle */
248 uint32 num_domains
; /* number of domains */
249 uint32 ptr_enum_domains
; /* buffer pointer to num domains */
251 /* this lot is only added if ptr_enum_domains is non-NULL */
252 uint32 num_domains2
; /* number of domains */
253 UNIHDR2
*hdr_domain_name
;
254 UNISTR2
*uni_domain_name
;
255 DOM_SID2
*domain_sid
;
257 NTSTATUS status
; /* return code */
259 } LSA_R_ENUM_TRUST_DOM
;
262 typedef struct lsa_q_close_info
264 POLICY_HND pol
; /* policy handle */
269 typedef struct lsa_r_close_info
271 POLICY_HND pol
; /* policy handle. should be all zeros. */
273 NTSTATUS status
; /* return code */
278 #define MAX_REF_DOMAINS 32
281 typedef struct dom_trust_hdr
283 UNIHDR hdr_dom_name
; /* referenced domain unicode string headers */
289 typedef struct dom_trust_info
291 UNISTR2 uni_dom_name
; /* domain name unicode string */
292 DOM_SID2 ref_dom
; /* referenced domain SID */
297 typedef struct dom_ref_info
299 uint32 num_ref_doms_1
; /* num referenced domains */
300 uint32 ptr_ref_dom
; /* pointer to referenced domains */
301 uint32 max_entries
; /* 32 - max number of entries */
302 uint32 num_ref_doms_2
; /* num referenced domains */
304 DOM_TRUST_HDR hdr_ref_dom
[MAX_REF_DOMAINS
]; /* referenced domains */
305 DOM_TRUST_INFO ref_dom
[MAX_REF_DOMAINS
]; /* referenced domains */
309 /* the domain_idx points to a SID associated with the name */
311 /* LSA_TRANS_NAME - translated name */
312 typedef struct lsa_trans_name_info
314 uint16 sid_name_use
; /* value is 5 for a well-known group; 2 for a domain group; 1 for a user... */
316 uint32 domain_idx
; /* index into DOM_R_REF array of SIDs */
320 #define MAX_LOOKUP_SIDS 30
322 /* LSA_TRANS_NAME_ENUM - LSA Translated Name Enumeration container */
323 typedef struct lsa_trans_name_enum_info
326 uint32 ptr_trans_names
;
329 LSA_TRANS_NAME
*name
; /* translated names */
332 } LSA_TRANS_NAME_ENUM
;
334 /* LSA_SID_ENUM - LSA SID enumeration container */
335 typedef struct lsa_sid_enum_info
341 uint32
*ptr_sid
; /* domain SID pointers to be looked up. */
342 DOM_SID2
*sid
; /* domain SIDs to be looked up. */
346 /* LSA_Q_LOOKUP_SIDS - LSA Lookup SIDs */
347 typedef struct lsa_q_lookup_sids
349 POLICY_HND pol
; /* policy handle */
351 LSA_TRANS_NAME_ENUM names
;
357 /* LSA_R_LOOKUP_SIDS - response to LSA Lookup SIDs */
358 typedef struct lsa_r_lookup_sids
361 DOM_R_REF
*dom_ref
; /* domain reference info */
363 LSA_TRANS_NAME_ENUM
*names
;
366 NTSTATUS status
; /* return code */
370 /* LSA_Q_LOOKUP_NAMES - LSA Lookup NAMEs */
371 typedef struct lsa_q_lookup_names
373 POLICY_HND pol
; /* policy handle */
376 UNIHDR
*hdr_name
; /* name buffer pointers */
377 UNISTR2
*uni_name
; /* names to be looked up */
379 uint32 num_trans_entries
;
380 uint32 ptr_trans_sids
; /* undocumented domain SID buffer pointer */
384 } LSA_Q_LOOKUP_NAMES
;
386 /* LSA_R_LOOKUP_NAMES - response to LSA Lookup NAMEs by name */
387 typedef struct lsa_r_lookup_names
390 DOM_R_REF
*dom_ref
; /* domain reference info */
395 DOM_RID2
*dom_rid
; /* domain RIDs being looked up */
399 NTSTATUS status
; /* return code */
400 } LSA_R_LOOKUP_NAMES
;
402 /* This is probably a policy handle but at the moment we
403 never read it - so use a dummy struct. */
405 typedef struct lsa_q_open_secret
410 /* We always return "not found" at present - so just marshal the minimum. */
412 typedef struct lsa_r_open_secret
421 typedef struct lsa_enum_priv_entry
430 /* LSA_Q_ENUM_PRIVS - LSA enum privileges */
431 typedef struct lsa_q_enum_privs
433 POLICY_HND pol
; /* policy handle */
435 uint32 pref_max_length
;
438 typedef struct lsa_r_enum_privs
445 LSA_PRIV_ENTRY
*privs
;
450 /* LSA_Q_PRIV_GET_DISPNAME - LSA get privilege display name */
451 typedef struct lsa_q_priv_get_dispname
453 POLICY_HND pol
; /* policy handle */
458 } LSA_Q_PRIV_GET_DISPNAME
;
460 typedef struct lsa_r_priv_get_dispname
469 } LSA_R_PRIV_GET_DISPNAME
;
471 /* LSA_Q_ENUM_ACCOUNTS */
472 typedef struct lsa_q_enum_accounts
474 POLICY_HND pol
; /* policy handle */
476 uint32 pref_max_length
;
477 } LSA_Q_ENUM_ACCOUNTS
;
479 /* LSA_R_ENUM_ACCOUNTS */
480 typedef struct lsa_r_enum_accounts
485 } LSA_R_ENUM_ACCOUNTS
;
487 /* LSA_Q_UNK_GET_CONNUSER - gets username\domain of connected user
488 called when "Take Ownership" is clicked -SK */
489 typedef struct lsa_q_unk_get_connuser
492 UNISTR2 uni2_srvname
;
493 uint32 unk1
; /* 3 unknown uint32's are seen right after uni2_srvname */
494 uint32 unk2
; /* unk2 appears to be a ptr, unk1 = unk3 = 0 usually */
496 } LSA_Q_UNK_GET_CONNUSER
;
498 /* LSA_R_UNK_GET_CONNUSER */
499 typedef struct lsa_r_unk_get_connuser
501 uint32 ptr_user_name
;
502 UNIHDR hdr_user_name
;
503 UNISTR2 uni2_user_name
;
509 UNISTR2 uni2_dom_name
;
512 } LSA_R_UNK_GET_CONNUSER
;
515 typedef struct lsa_q_openaccount
517 POLICY_HND pol
; /* policy handle */
519 uint32 access
; /* desired access */
522 typedef struct lsa_r_openaccount
524 POLICY_HND pol
; /* policy handle */
528 typedef struct lsa_q_enumprivsaccount
530 POLICY_HND pol
; /* policy handle */
531 } LSA_Q_ENUMPRIVSACCOUNT
;
540 typedef struct LUID_ATTR
546 typedef struct privilege_set
553 typedef struct lsa_r_enumprivsaccount
559 } LSA_R_ENUMPRIVSACCOUNT
;
561 typedef struct lsa_q_getsystemaccount
563 POLICY_HND pol
; /* policy handle */
564 } LSA_Q_GETSYSTEMACCOUNT
;
566 typedef struct lsa_r_getsystemaccount
570 } LSA_R_GETSYSTEMACCOUNT
;
573 #endif /* _RPC_LSA_H */
576 opnum 11: opensid: query: handle du domaine, sid du user
577 reply: handle, status
579 opnum 12: getlistofprivs: query: handle du user
580 reply: ptr, nombre, nombre, tableau de 3 uint32: flag+priv.low+priv.high
583 opnum 17: ?? query: handle
584 reply: uint32 + status