2 Unix SMB/CIFS implementation.
3 SMB parameters and setup
4 Copyright (C) Andrew Tridgell 1992-1997
5 Copyright (C) Luke Kenneth Casson Leighton 1996-1997
6 Copyright (C) Paul Ashton 1997
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
23 #ifndef _RPC_LSA_H /* _RPC_LSA_H */
28 /* Opcodes available on PIPE_LSARPC */
30 #define LSA_CLOSE 0x00
31 #define LSA_DELETE 0x01
32 #define LSA_ENUM_PRIVS 0x02
33 #define LSA_QUERYSECOBJ 0x03
34 #define LSA_SETSECOBJ 0x04
35 #define LSA_CHANGEPASSWORD 0x05
36 #define LSA_OPENPOLICY 0x06
37 #define LSA_QUERYINFOPOLICY 0x07
38 #define LSA_SETINFOPOLICY 0x08
39 #define LSA_CLEARAUDITLOG 0x09
40 #define LSA_CREATEACCOUNT 0x0a
41 #define LSA_ENUM_ACCOUNTS 0x0b
42 #define LSA_CREATETRUSTDOM 0x0c
43 #define LSA_ENUMTRUSTDOM 0x0d
44 #define LSA_LOOKUPNAMES 0x0e
45 #define LSA_LOOKUPSIDS 0x0f
46 #define LSA_CREATESECRET 0x10
47 #define LSA_OPENACCOUNT 0x11
48 #define LSA_ENUMPRIVSACCOUNT 0x12
49 #define LSA_ADDPRIVS 0x13
50 #define LSA_REMOVEPRIVS 0x14
51 #define LSA_GETQUOTAS 0x15
52 #define LSA_SETQUOTAS 0x16
53 #define LSA_GETSYSTEMACCOUNT 0x17
54 #define LSA_SETSYSTEMACCOUNT 0x18
55 #define LSA_OPENTRUSTDOM 0x19
56 #define LSA_QUERYTRUSTDOM 0x1a
57 #define LSA_SETINFOTRUSTDOM 0x1b
58 #define LSA_OPENSECRET 0x1c
59 #define LSA_SETSECRET 0x1d
60 #define LSA_QUERYSECRET 0x1e
61 #define LSA_LOOKUPPRIVVALUE 0x1f
62 #define LSA_LOOKUPPRIVNAME 0x20
63 #define LSA_PRIV_GET_DISPNAME 0x21
64 #define LSA_DELETEOBJECT 0x22
65 #define LSA_ENUMACCTWITHRIGHT 0x23
66 #define LSA_ENUMACCTRIGHTS 0x24
67 #define LSA_ADDACCTRIGHTS 0x25
68 #define LSA_REMOVEACCTRIGHTS 0x26
69 #define LSA_QUERYTRUSTDOMINFO 0x27
70 #define LSA_SETTRUSTDOMINFO 0x28
71 #define LSA_DELETETRUSTDOM 0x29
72 #define LSA_STOREPRIVDATA 0x2a
73 #define LSA_RETRPRIVDATA 0x2b
74 #define LSA_OPENPOLICY2 0x2c
75 #define LSA_UNK_GET_CONNUSER 0x2d /* LsaGetConnectedCredentials ? */
76 #define LSA_QUERYINFO2 0x2e
78 /* XXXX these are here to get a compile! */
79 #define LSA_LOOKUPRIDS 0xFD
81 /* DOM_QUERY - info class 3 and 5 LSA Query response */
82 typedef struct dom_query_info
84 uint16 uni_dom_max_len
; /* domain name string length * 2 */
85 uint16 uni_dom_str_len
; /* domain name string length * 2 */
86 uint32 buffer_dom_name
; /* undocumented domain name string buffer pointer */
87 uint32 buffer_dom_sid
; /* undocumented domain SID string buffer pointer */
88 UNISTR2 uni_domain_name
; /* domain name (unicode string) */
89 DOM_SID2 dom_sid
; /* domain SID */
93 /* level 5 is same as level 3. */
94 typedef DOM_QUERY DOM_QUERY_3
;
95 typedef DOM_QUERY DOM_QUERY_5
;
97 /* level 2 is auditing settings */
98 typedef struct dom_query_2
100 uint32 auditing_enabled
;
101 uint32 count1
; /* usualy 7, at least on nt4sp4 */
102 uint32 count2
; /* the same */
103 uint32
*auditsettings
;
106 /* level 6 is server role information */
107 typedef struct dom_query_6
109 uint16 server_role
; /* 2=backup, 3=primary */
112 typedef struct seq_qos_info
115 uint16 sec_imp_level
; /* 0x02 - impersonation level */
116 uint8 sec_ctxt_mode
; /* 0x01 - context tracking mode */
117 uint8 effective_only
; /* 0x00 - effective only */
121 typedef struct obj_attr_info
123 uint32 len
; /* 0x18 - length (in bytes) inc. the length field. */
124 uint32 ptr_root_dir
; /* 0 - root directory (pointer) */
125 uint32 ptr_obj_name
; /* 0 - object name (pointer) */
126 uint32 attributes
; /* 0 - attributes (undocumented) */
127 uint32 ptr_sec_desc
; /* 0 - security descriptior (pointer) */
128 uint32 ptr_sec_qos
; /* security quality of service */
129 LSA_SEC_QOS
*sec_qos
;
133 /* LSA_Q_OPEN_POL - LSA Query Open Policy */
134 typedef struct lsa_q_open_pol_info
136 uint32 ptr
; /* undocumented buffer pointer */
137 uint16 system_name
; /* 0x5c - system name */
138 LSA_OBJ_ATTR attr
; /* object attributes */
140 uint32 des_access
; /* desired access attributes */
144 /* LSA_R_OPEN_POL - response to LSA Open Policy */
145 typedef struct lsa_r_open_pol_info
147 POLICY_HND pol
; /* policy handle */
148 NTSTATUS status
; /* return code */
152 /* LSA_Q_OPEN_POL2 - LSA Query Open Policy */
153 typedef struct lsa_q_open_pol2_info
155 uint32 ptr
; /* undocumented buffer pointer */
156 UNISTR2 uni_server_name
; /* server name, starting with two '\'s */
157 LSA_OBJ_ATTR attr
; /* object attributes */
159 uint32 des_access
; /* desired access attributes */
163 /* LSA_R_OPEN_POL2 - response to LSA Open Policy */
164 typedef struct lsa_r_open_pol2_info
166 POLICY_HND pol
; /* policy handle */
167 NTSTATUS status
; /* return code */
172 #define POLICY_VIEW_LOCAL_INFORMATION 0x00000001
173 #define POLICY_VIEW_AUDIT_INFORMATION 0x00000002
174 #define POLICY_GET_PRIVATE_INFORMATION 0x00000004
175 #define POLICY_TRUST_ADMIN 0x00000008
176 #define POLICY_CREATE_ACCOUNT 0x00000010
177 #define POLICY_CREATE_SECRET 0x00000020
178 #define POLICY_CREATE_PRIVILEGE 0x00000040
179 #define POLICY_SET_DEFAULT_QUOTA_LIMITS 0x00000080
180 #define POLICY_SET_AUDIT_REQUIREMENTS 0x00000100
181 #define POLICY_AUDIT_LOG_ADMIN 0x00000200
182 #define POLICY_SERVER_ADMIN 0x00000400
183 #define POLICY_LOOKUP_NAMES 0x00000800
185 #define POLICY_ALL_ACCESS ( STANDARD_RIGHTS_REQUIRED_ACCESS |\
186 POLICY_VIEW_LOCAL_INFORMATION |\
187 POLICY_VIEW_AUDIT_INFORMATION |\
188 POLICY_GET_PRIVATE_INFORMATION |\
189 POLICY_TRUST_ADMIN |\
190 POLICY_CREATE_ACCOUNT |\
191 POLICY_CREATE_SECRET |\
192 POLICY_CREATE_PRIVILEGE |\
193 POLICY_SET_DEFAULT_QUOTA_LIMITS |\
194 POLICY_SET_AUDIT_REQUIREMENTS |\
195 POLICY_AUDIT_LOG_ADMIN |\
196 POLICY_SERVER_ADMIN |\
197 POLICY_LOOKUP_NAMES )
200 #define POLICY_READ ( STANDARD_RIGHTS_READ_ACCESS |\
201 POLICY_VIEW_AUDIT_INFORMATION |\
202 POLICY_GET_PRIVATE_INFORMATION)
204 #define POLICY_WRITE ( STANDARD_RIGHTS_WRITE_ACCESS |\
205 POLICY_TRUST_ADMIN |\
206 POLICY_CREATE_ACCOUNT |\
207 POLICY_CREATE_SECRET |\
208 POLICY_CREATE_PRIVILEGE |\
209 POLICY_SET_DEFAULT_QUOTA_LIMITS |\
210 POLICY_SET_AUDIT_REQUIREMENTS |\
211 POLICY_AUDIT_LOG_ADMIN |\
214 #define POLICY_EXECUTE ( STANDARD_RIGHTS_EXECUTE_ACCESS |\
215 POLICY_VIEW_LOCAL_INFORMATION |\
216 POLICY_LOOKUP_NAMES )
218 /* LSA_Q_QUERY_SEC_OBJ - LSA query security */
219 typedef struct lsa_query_sec_obj_info
221 POLICY_HND pol
; /* policy handle */
224 } LSA_Q_QUERY_SEC_OBJ
;
226 /* LSA_R_QUERY_SEC_OBJ - probably an open */
227 typedef struct r_lsa_query_sec_obj_info
232 NTSTATUS status
; /* return status */
234 } LSA_R_QUERY_SEC_OBJ
;
236 /* LSA_Q_QUERY_INFO - LSA query info policy */
237 typedef struct lsa_query_info
239 POLICY_HND pol
; /* policy handle */
240 uint16 info_class
; /* info class */
245 typedef union lsa_info_union
253 /* LSA_R_QUERY_INFO - response to LSA query info policy */
254 typedef struct lsa_r_query_info
256 uint32 undoc_buffer
; /* undocumented buffer pointer */
257 uint16 info_class
; /* info class (same as info class in request) */
261 NTSTATUS status
; /* return code */
265 /* LSA_DNS_DOM_INFO - DNS domain info - info class 12*/
266 typedef struct lsa_dns_dom_info
268 UNIHDR hdr_nb_dom_name
; /* netbios domain name */
269 UNIHDR hdr_dns_dom_name
;
270 UNIHDR hdr_forest_name
;
272 GUID dom_guid
; /* domain GUID */
274 UNISTR2 uni_nb_dom_name
;
275 UNISTR2 uni_dns_dom_name
;
276 UNISTR2 uni_forest_name
;
279 DOM_SID2 dom_sid
; /* domain SID */
282 typedef union lsa_info2_union
284 LSA_DNS_DOM_INFO dns_dom_info
;
287 /* LSA_Q_QUERY_INFO2 - LSA query info */
288 typedef struct lsa_q_query_info2
290 POLICY_HND pol
; /* policy handle */
291 uint16 info_class
; /* info class */
294 typedef struct lsa_r_query_info2
296 uint32 ptr
; /* pointer to info struct */
298 LSA_INFO2_UNION info
; /* so far the only one */
302 /* LSA_Q_ENUM_TRUST_DOM - LSA enumerate trusted domains */
303 typedef struct lsa_enum_trust_dom_info
305 POLICY_HND pol
; /* policy handle */
306 uint32 enum_context
; /* enumeration context handle */
307 uint32 preferred_len
; /* preferred maximum length */
309 } LSA_Q_ENUM_TRUST_DOM
;
311 /* LSA_R_ENUM_TRUST_DOM - response to LSA enumerate trusted domains */
312 typedef struct lsa_r_enum_trust_dom_info
314 uint32 enum_context
; /* enumeration context handle */
315 uint32 num_domains
; /* number of domains */
316 uint32 ptr_enum_domains
; /* buffer pointer to num domains */
318 /* this lot is only added if ptr_enum_domains is non-NULL */
319 uint32 num_domains2
; /* number of domains */
320 UNIHDR2
*hdr_domain_name
;
321 UNISTR2
*uni_domain_name
;
322 DOM_SID2
*domain_sid
;
324 NTSTATUS status
; /* return code */
326 } LSA_R_ENUM_TRUST_DOM
;
329 typedef struct lsa_q_close_info
331 POLICY_HND pol
; /* policy handle */
336 typedef struct lsa_r_close_info
338 POLICY_HND pol
; /* policy handle. should be all zeros. */
340 NTSTATUS status
; /* return code */
345 #define MAX_REF_DOMAINS 32
348 typedef struct dom_trust_hdr
350 UNIHDR hdr_dom_name
; /* referenced domain unicode string headers */
356 typedef struct dom_trust_info
358 UNISTR2 uni_dom_name
; /* domain name unicode string */
359 DOM_SID2 ref_dom
; /* referenced domain SID */
364 typedef struct dom_ref_info
366 uint32 num_ref_doms_1
; /* num referenced domains */
367 uint32 ptr_ref_dom
; /* pointer to referenced domains */
368 uint32 max_entries
; /* 32 - max number of entries */
369 uint32 num_ref_doms_2
; /* num referenced domains */
371 DOM_TRUST_HDR hdr_ref_dom
[MAX_REF_DOMAINS
]; /* referenced domains */
372 DOM_TRUST_INFO ref_dom
[MAX_REF_DOMAINS
]; /* referenced domains */
376 /* the domain_idx points to a SID associated with the name */
378 /* LSA_TRANS_NAME - translated name */
379 typedef struct lsa_trans_name_info
381 uint16 sid_name_use
; /* value is 5 for a well-known group; 2 for a domain group; 1 for a user... */
383 uint32 domain_idx
; /* index into DOM_R_REF array of SIDs */
387 /* This number purly arbitary - just to prevent a client from requesting large amounts of memory */
388 #define MAX_LOOKUP_SIDS 256
390 /* LSA_TRANS_NAME_ENUM - LSA Translated Name Enumeration container */
391 typedef struct lsa_trans_name_enum_info
394 uint32 ptr_trans_names
;
397 LSA_TRANS_NAME
*name
; /* translated names */
400 } LSA_TRANS_NAME_ENUM
;
402 /* LSA_SID_ENUM - LSA SID enumeration container */
403 typedef struct lsa_sid_enum_info
409 uint32
*ptr_sid
; /* domain SID pointers to be looked up. */
410 DOM_SID2
*sid
; /* domain SIDs to be looked up. */
414 /* LSA_Q_LOOKUP_SIDS - LSA Lookup SIDs */
415 typedef struct lsa_q_lookup_sids
417 POLICY_HND pol
; /* policy handle */
419 LSA_TRANS_NAME_ENUM names
;
425 /* LSA_R_LOOKUP_SIDS - response to LSA Lookup SIDs */
426 typedef struct lsa_r_lookup_sids
429 DOM_R_REF
*dom_ref
; /* domain reference info */
431 LSA_TRANS_NAME_ENUM
*names
;
434 NTSTATUS status
; /* return code */
438 /* LSA_Q_LOOKUP_NAMES - LSA Lookup NAMEs */
439 typedef struct lsa_q_lookup_names
441 POLICY_HND pol
; /* policy handle */
444 UNIHDR
*hdr_name
; /* name buffer pointers */
445 UNISTR2
*uni_name
; /* names to be looked up */
447 uint32 num_trans_entries
;
448 uint32 ptr_trans_sids
; /* undocumented domain SID buffer pointer */
452 } LSA_Q_LOOKUP_NAMES
;
454 /* LSA_R_LOOKUP_NAMES - response to LSA Lookup NAMEs by name */
455 typedef struct lsa_r_lookup_names
458 DOM_R_REF
*dom_ref
; /* domain reference info */
463 DOM_RID2
*dom_rid
; /* domain RIDs being looked up */
467 NTSTATUS status
; /* return code */
468 } LSA_R_LOOKUP_NAMES
;
470 /* This is probably a policy handle but at the moment we
471 never read it - so use a dummy struct. */
473 typedef struct lsa_q_open_secret
478 /* We always return "not found" at present - so just marshal the minimum. */
480 typedef struct lsa_r_open_secret
489 typedef struct lsa_enum_priv_entry
498 /* LSA_Q_ENUM_PRIVS - LSA enum privileges */
499 typedef struct lsa_q_enum_privs
501 POLICY_HND pol
; /* policy handle */
503 uint32 pref_max_length
;
506 typedef struct lsa_r_enum_privs
513 LSA_PRIV_ENTRY
*privs
;
518 /* LSA_Q_ENUM_ACCT_RIGHTS - LSA enum account rights */
521 POLICY_HND pol
; /* policy handle */
523 } LSA_Q_ENUM_ACCT_RIGHTS
;
525 /* LSA_R_ENUM_ACCT_RIGHTS - LSA enum account rights */
529 UNISTR2_ARRAY rights
;
531 } LSA_R_ENUM_ACCT_RIGHTS
;
534 /* LSA_Q_ADD_ACCT_RIGHTS - LSA add account rights */
537 POLICY_HND pol
; /* policy handle */
539 UNISTR2_ARRAY rights
;
541 } LSA_Q_ADD_ACCT_RIGHTS
;
543 /* LSA_R_ADD_ACCT_RIGHTS - LSA add account rights */
547 } LSA_R_ADD_ACCT_RIGHTS
;
550 /* LSA_Q_REMOVE_ACCT_RIGHTS - LSA remove account rights */
553 POLICY_HND pol
; /* policy handle */
556 UNISTR2_ARRAY rights
;
558 } LSA_Q_REMOVE_ACCT_RIGHTS
;
560 /* LSA_R_REMOVE_ACCT_RIGHTS - LSA remove account rights */
564 } LSA_R_REMOVE_ACCT_RIGHTS
;
567 /* LSA_Q_PRIV_GET_DISPNAME - LSA get privilege display name */
568 typedef struct lsa_q_priv_get_dispname
570 POLICY_HND pol
; /* policy handle */
575 } LSA_Q_PRIV_GET_DISPNAME
;
577 typedef struct lsa_r_priv_get_dispname
586 } LSA_R_PRIV_GET_DISPNAME
;
588 /* LSA_Q_ENUM_ACCOUNTS */
589 typedef struct lsa_q_enum_accounts
591 POLICY_HND pol
; /* policy handle */
593 uint32 pref_max_length
;
594 } LSA_Q_ENUM_ACCOUNTS
;
596 /* LSA_R_ENUM_ACCOUNTS */
597 typedef struct lsa_r_enum_accounts
602 } LSA_R_ENUM_ACCOUNTS
;
604 /* LSA_Q_UNK_GET_CONNUSER - gets username\domain of connected user
605 called when "Take Ownership" is clicked -SK */
606 typedef struct lsa_q_unk_get_connuser
609 UNISTR2 uni2_srvname
;
610 uint32 unk1
; /* 3 unknown uint32's are seen right after uni2_srvname */
611 uint32 unk2
; /* unk2 appears to be a ptr, unk1 = unk3 = 0 usually */
613 } LSA_Q_UNK_GET_CONNUSER
;
615 /* LSA_R_UNK_GET_CONNUSER */
616 typedef struct lsa_r_unk_get_connuser
618 uint32 ptr_user_name
;
619 UNIHDR hdr_user_name
;
620 UNISTR2 uni2_user_name
;
626 UNISTR2 uni2_dom_name
;
629 } LSA_R_UNK_GET_CONNUSER
;
632 typedef struct lsa_q_openaccount
634 POLICY_HND pol
; /* policy handle */
636 uint32 access
; /* desired access */
639 typedef struct lsa_r_openaccount
641 POLICY_HND pol
; /* policy handle */
645 typedef struct lsa_q_enumprivsaccount
647 POLICY_HND pol
; /* policy handle */
648 } LSA_Q_ENUMPRIVSACCOUNT
;
657 typedef struct LUID_ATTR
663 typedef struct privilege_set
670 typedef struct lsa_r_enumprivsaccount
676 } LSA_R_ENUMPRIVSACCOUNT
;
678 typedef struct lsa_q_getsystemaccount
680 POLICY_HND pol
; /* policy handle */
681 } LSA_Q_GETSYSTEMACCOUNT
;
683 typedef struct lsa_r_getsystemaccount
687 } LSA_R_GETSYSTEMACCOUNT
;
690 typedef struct lsa_q_setsystemaccount
692 POLICY_HND pol
; /* policy handle */
694 } LSA_Q_SETSYSTEMACCOUNT
;
696 typedef struct lsa_r_setsystemaccount
699 } LSA_R_SETSYSTEMACCOUNT
;
702 typedef struct lsa_q_lookupprivvalue
704 POLICY_HND pol
; /* policy handle */
707 } LSA_Q_LOOKUPPRIVVALUE
;
709 typedef struct lsa_r_lookupprivvalue
713 } LSA_R_LOOKUPPRIVVALUE
;
716 typedef struct lsa_q_addprivs
718 POLICY_HND pol
; /* policy handle */
723 typedef struct lsa_r_addprivs
729 typedef struct lsa_q_removeprivs
731 POLICY_HND pol
; /* policy handle */
738 typedef struct lsa_r_removeprivs
744 #endif /* _RPC_LSA_H */