librpc/idl/gmsa.idl

   1 /*
   2  * Type definitions for Group Managed Service Accounts
   3  *
   4  * Derived from [MS-ADTS] 2.2.19 MSDS-MANAGEDPASSWORD_BLOB.
   5  */
   6
   7 #include "idl_types.h"
   8
   9 [
  10   uuid("e43b8cf6-1ead-11ee-aed1-e3597136ce70"),
  11   version(0.0),
  12   pointer_default(unique),
  13   helpstring("Active Directory Group Managed Service Accounts")
  14 ]
  15 interface gmsa
  16 {
  17         /* Public structures. */
  18
  19         typedef [gensize] struct {
  20                 [relative_short] secret_u16string *current;
  21                 [relative_short] secret_u16string *previous;
  22                 /*
  23                  * MS-ADTS states that these fields must be placed on a 64‐bit
  24                  * boundary, but samples obtained from Windows are found not to
  25                  * be so. In practice, they’re offset by two bytes. That’s why
  26                  * we need NOALIGN.
  27                  */
  28                 [relative_short, flag(NDR_NOALIGN)] hyper *query_interval;
  29                 [relative_short, flag(NDR_NOALIGN)] hyper *unchanged_interval;
  30         } MANAGEDPASSWORD_BLOB_PASSWORDS;
  31
  32         typedef [public] struct {
  33                 [value(1)] uint16 version;
  34                 [value(0)] uint16 reserved;
  35                 /*
  36                  * The size of the entire blob. 8 bytes account for the
  37                  * ‘version’ field, the ‘reserved’ field, and the ‘length’ field
  38                  * itself.
  39                  */
  40                 [value(8 + ndr_size_MANAGEDPASSWORD_BLOB_PASSWORDS(&passwords,
  41                                                                    ndr->flags))] uint32 length;
  42                 MANAGEDPASSWORD_BLOB_PASSWORDS passwords;
  43         } MANAGEDPASSWORD_BLOB;
  44 }