Use lsa_PolicyInfo enum in lsa policy info calls.
[Samba/gebeck_regimport.git] / source / librpc / idl / lsa.idl
blob7daf648a63cc669ce16865ec0cff0fc260e1aa9e
1 #include "idl_types.h"
3 /*
4 lsa interface definition
5 */
7 import "security.idl";
9 [ uuid("12345778-1234-abcd-ef00-0123456789ab"),
10 version(0.0),
11 endpoint("ncacn_np:[\\pipe\\lsarpc]","ncacn_np:[\\pipe\\netlogon]","ncacn_np:[\\pipe\\lsass]", "ncacn_ip_tcp:", "ncalrpc:"),
12 pointer_default(unique),
13 helpstring("Local Security Authority")
14 ] interface lsarpc
16 typedef bitmap security_secinfo security_secinfo;
18 typedef [public,noejs] struct {
19 [value(2*strlen_m(string))] uint16 length;
20 [value(2*strlen_m(string))] uint16 size;
21 [charset(UTF16),size_is(size/2),length_is(length/2)] uint16 *string;
22 } lsa_String;
24 typedef [public] struct {
25 [value(2*strlen_m(string))] uint16 length;
26 [value(2*(strlen_m(string)+1))] uint16 size;
27 [charset(UTF16),size_is(size/2),length_is(length/2)] uint16 *string;
28 } lsa_StringLarge;
30 typedef [public] struct {
31 uint32 count;
32 [size_is(count)] lsa_String *names;
33 } lsa_Strings;
35 typedef [public] struct {
36 [value(strlen_m(string))] uint16 length;
37 [value(strlen_m(string))] uint16 size;
38 ascstr_noterm *string;
39 } lsa_AsciiString;
41 /******************/
42 /* Function: 0x00 */
43 NTSTATUS lsa_Close (
44 [in,out] policy_handle *handle
48 /******************/
49 /* Function: 0x01 */
50 NTSTATUS lsa_Delete (
51 [in] policy_handle *handle
55 /******************/
56 /* Function: 0x02 */
57 typedef struct {
58 uint32 low;
59 uint32 high;
60 } lsa_LUID;
62 typedef struct {
63 lsa_StringLarge name;
64 lsa_LUID luid;
65 } lsa_PrivEntry;
67 typedef struct {
68 uint32 count;
69 [size_is(count)] lsa_PrivEntry *privs;
70 } lsa_PrivArray;
72 NTSTATUS lsa_EnumPrivs (
73 [in] policy_handle *handle,
74 [in,out] uint32 *resume_handle,
75 [in] uint32 max_count,
76 [out] lsa_PrivArray *privs
79 /******************/
80 /* Function: 0x03 */
82 NTSTATUS lsa_QuerySecurity (
83 [in] policy_handle *handle,
84 [in] security_secinfo sec_info,
85 [out,unique] sec_desc_buf *sdbuf
89 /******************/
90 /* Function: 0x04 */
91 NTSTATUS lsa_SetSecObj ();
94 /******************/
95 /* Function: 0x05 */
96 NTSTATUS lsa_ChangePassword ();
99 /******************/
100 /* Function: 0x06 */
101 typedef struct {
102 uint32 len; /* ignored */
103 uint16 impersonation_level;
104 uint8 context_mode;
105 uint8 effective_only;
106 } lsa_QosInfo;
108 typedef struct {
109 uint32 len; /* ignored */
110 uint8 *root_dir;
111 [string,charset(UTF16)] uint16 *object_name;
112 uint32 attributes;
113 security_descriptor *sec_desc;
114 lsa_QosInfo *sec_qos;
115 } lsa_ObjectAttribute;
117 /* notice the screwup with the system_name - thats why MS created
118 OpenPolicy2 */
119 NTSTATUS lsa_OpenPolicy (
120 [in,unique] uint16 *system_name,
121 [in] lsa_ObjectAttribute *attr,
122 [in] uint32 access_mask,
123 [out] policy_handle *handle
128 /******************/
129 /* Function: 0x07 */
131 typedef struct {
132 uint32 percent_full;
133 uint32 log_size;
134 NTTIME retention_time;
135 uint8 shutdown_in_progress;
136 NTTIME time_to_shutdown;
137 uint32 next_audit_record;
138 uint32 unknown;
139 } lsa_AuditLogInfo;
141 typedef struct {
142 uint32 auditing_mode;
143 [size_is(count)] uint32 *settings;
144 uint32 count;
145 } lsa_AuditEventsInfo;
147 typedef struct {
148 lsa_StringLarge name;
149 dom_sid2 *sid;
150 } lsa_DomainInfo;
152 typedef struct {
153 lsa_String name;
154 } lsa_PDAccountInfo;
156 typedef struct {
157 uint16 unknown; /* an midl padding bug? */
158 uint16 role;
159 } lsa_ServerRole;
161 typedef struct {
162 lsa_String source;
163 lsa_String account;
164 } lsa_ReplicaSourceInfo;
166 typedef struct {
167 uint32 paged_pool;
168 uint32 non_paged_pool;
169 uint32 min_wss;
170 uint32 max_wss;
171 uint32 pagefile;
172 hyper unknown;
173 } lsa_DefaultQuotaInfo;
175 typedef struct {
176 hyper modified_id;
177 NTTIME db_create_time;
178 } lsa_ModificationInfo;
180 typedef struct {
181 uint8 shutdown_on_full;
182 } lsa_AuditFullSetInfo;
184 typedef struct {
185 uint16 unknown; /* an midl padding bug? */
186 uint8 shutdown_on_full;
187 uint8 log_is_full;
188 } lsa_AuditFullQueryInfo;
190 typedef struct {
191 /* it's important that we use the lsa_StringLarge here,
192 * because otherwise windows clients result with such dns hostnames
193 * e.g. w2k3-client.samba4.samba.orgsamba4.samba.org
194 * where it should be
195 * w2k3-client.samba4.samba.org
197 lsa_StringLarge name;
198 lsa_StringLarge dns_domain;
199 lsa_StringLarge dns_forest;
200 GUID domain_guid;
201 dom_sid2 *sid;
202 } lsa_DnsDomainInfo;
204 typedef enum {
205 LSA_POLICY_INFO_AUDIT_LOG=1,
206 LSA_POLICY_INFO_AUDIT_EVENTS=2,
207 LSA_POLICY_INFO_DOMAIN=3,
208 LSA_POLICY_INFO_PD=4,
209 LSA_POLICY_INFO_ACCOUNT_DOMAIN=5,
210 LSA_POLICY_INFO_ROLE=6,
211 LSA_POLICY_INFO_REPLICA=7,
212 LSA_POLICY_INFO_QUOTA=8,
213 LSA_POLICY_INFO_DB=9,
214 LSA_POLICY_INFO_AUDIT_FULL_SET=10,
215 LSA_POLICY_INFO_AUDIT_FULL_QUERY=11,
216 LSA_POLICY_INFO_DNS=12
217 } lsa_PolicyInfo;
219 typedef [switch_type(uint16)] union {
220 [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log;
221 [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events;
222 [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain;
223 [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd;
224 [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain;
225 [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role;
226 [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica;
227 [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota;
228 [case(LSA_POLICY_INFO_DB)] lsa_ModificationInfo db;
229 [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset;
230 [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery;
231 [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns;
232 } lsa_PolicyInformation;
234 NTSTATUS lsa_QueryInfoPolicy (
235 [in] policy_handle *handle,
236 [in] lsa_PolicyInfo level,
237 [out,unique,switch_is(level)] lsa_PolicyInformation *info
240 /******************/
241 /* Function: 0x08 */
242 NTSTATUS lsa_SetInfoPolicy (
243 [in] policy_handle *handle,
244 [in] lsa_PolicyInfo level,
245 [in,switch_is(level)] lsa_PolicyInformation *info
248 /******************/
249 /* Function: 0x09 */
250 NTSTATUS lsa_ClearAuditLog ();
252 /******************/
253 /* Function: 0x0a */
254 NTSTATUS lsa_CreateAccount (
255 [in] policy_handle *handle,
256 [in] dom_sid2 *sid,
257 [in] uint32 access_mask,
258 [out] policy_handle *acct_handle
261 /******************/
262 /* NOTE: This only returns accounts that have at least
263 one privilege set
265 /* Function: 0x0b */
266 typedef struct {
267 dom_sid2 *sid;
268 } lsa_SidPtr;
270 typedef [public] struct {
271 [range(0,1000)] uint32 num_sids;
272 [size_is(num_sids)] lsa_SidPtr *sids;
273 } lsa_SidArray;
275 NTSTATUS lsa_EnumAccounts (
276 [in] policy_handle *handle,
277 [in,out] uint32 *resume_handle,
278 [in,range(0,8192)] uint32 num_entries,
279 [out] lsa_SidArray *sids
283 /*************************************************/
284 /* Function: 0x0c */
286 NTSTATUS lsa_CreateTrustedDomain(
287 [in] policy_handle *handle,
288 [in] lsa_DomainInfo *info,
289 [in] uint32 access_mask,
290 [out] policy_handle *trustdom_handle
294 /******************/
295 /* Function: 0x0d */
297 /* w2k3 treats max_size as max_domains*60 */
298 const int LSA_ENUM_TRUST_DOMAIN_MULTIPLIER = 60;
300 typedef struct {
301 uint32 count;
302 [size_is(count)] lsa_DomainInfo *domains;
303 } lsa_DomainList;
305 NTSTATUS lsa_EnumTrustDom (
306 [in] policy_handle *handle,
307 [in,out] uint32 *resume_handle,
308 [in,range(0,1000)] uint32 max_size,
309 [out] lsa_DomainList *domains
313 /******************/
314 /* Function: 0x0e */
315 typedef enum {
316 SID_NAME_USE_NONE = 0,/* NOTUSED */
317 SID_NAME_USER = 1, /* user */
318 SID_NAME_DOM_GRP = 2, /* domain group */
319 SID_NAME_DOMAIN = 3, /* domain: don't know what this is */
320 SID_NAME_ALIAS = 4, /* local group */
321 SID_NAME_WKN_GRP = 5, /* well-known group */
322 SID_NAME_DELETED = 6, /* deleted account: needed for c2 rating */
323 SID_NAME_INVALID = 7, /* invalid account */
324 SID_NAME_UNKNOWN = 8, /* oops. */
325 SID_NAME_COMPUTER = 9 /* machine */
326 } lsa_SidType;
328 typedef struct {
329 lsa_SidType sid_type;
330 uint32 rid;
331 uint32 sid_index;
332 } lsa_TranslatedSid;
334 typedef struct {
335 [range(0,1000)] uint32 count;
336 [size_is(count)] lsa_TranslatedSid *sids;
337 } lsa_TransSidArray;
339 const int LSA_REF_DOMAIN_LIST_MULTIPLIER = 32;
340 typedef struct {
341 [range(0,1000)] uint32 count;
342 [size_is(count)] lsa_DomainInfo *domains;
343 uint32 max_size;
344 } lsa_RefDomainList;
346 NTSTATUS lsa_LookupNames (
347 [in] policy_handle *handle,
348 [in,range(0,1000)] uint32 num_names,
349 [in,size_is(num_names)] lsa_String names[],
350 [out,unique] lsa_RefDomainList *domains,
351 [in,out] lsa_TransSidArray *sids,
352 [in] uint16 level,
353 [in,out] uint32 *count
357 /******************/
358 /* Function: 0x0f */
360 typedef struct {
361 lsa_SidType sid_type;
362 lsa_String name;
363 uint32 sid_index;
364 } lsa_TranslatedName;
366 typedef struct {
367 [range(0,1000)] uint32 count;
368 [size_is(count)] lsa_TranslatedName *names;
369 } lsa_TransNameArray;
371 NTSTATUS lsa_LookupSids (
372 [in] policy_handle *handle,
373 [in] lsa_SidArray *sids,
374 [out,unique] lsa_RefDomainList *domains,
375 [in,out] lsa_TransNameArray *names,
376 [in] uint16 level,
377 [in,out] uint32 *count
381 /* Function: 0x10 */
382 NTSTATUS lsa_CreateSecret(
383 [in] policy_handle *handle,
384 [in] lsa_String name,
385 [in] uint32 access_mask,
386 [out] policy_handle *sec_handle
390 /*****************************************/
391 /* Function: 0x11 */
392 NTSTATUS lsa_OpenAccount (
393 [in] policy_handle *handle,
394 [in] dom_sid2 *sid,
395 [in] uint32 access_mask,
396 [out] policy_handle *acct_handle
400 /****************************************/
401 /* Function: 0x12 */
403 typedef struct {
404 lsa_LUID luid;
405 uint32 attribute;
406 } lsa_LUIDAttribute;
408 typedef struct {
409 [range(0,1000)] uint32 count;
410 uint32 unknown;
411 [size_is(count)] lsa_LUIDAttribute set[*];
412 } lsa_PrivilegeSet;
414 NTSTATUS lsa_EnumPrivsAccount (
415 [in] policy_handle *handle,
416 [out,unique] lsa_PrivilegeSet *privs
420 /****************************************/
421 /* Function: 0x13 */
422 NTSTATUS lsa_AddPrivilegesToAccount(
423 [in] policy_handle *handle,
424 [in] lsa_PrivilegeSet *privs
428 /****************************************/
429 /* Function: 0x14 */
430 NTSTATUS lsa_RemovePrivilegesFromAccount(
431 [in] policy_handle *handle,
432 [in] uint8 remove_all,
433 [in,unique] lsa_PrivilegeSet *privs
436 /* Function: 0x15 */
437 NTSTATUS lsa_GetQuotasForAccount();
439 /* Function: 0x16 */
440 NTSTATUS lsa_SetQuotasForAccount();
442 /* Function: 0x17 */
443 NTSTATUS lsa_GetSystemAccessAccount();
444 /* Function: 0x18 */
445 NTSTATUS lsa_SetSystemAccessAccount();
447 /* Function: 0x19 */
448 NTSTATUS lsa_OpenTrustedDomain(
449 [in] policy_handle *handle,
450 [in] dom_sid2 *sid,
451 [in] uint32 access_mask,
452 [out] policy_handle *trustdom_handle
455 typedef [flag(NDR_PAHEX)] struct {
456 uint32 length;
457 uint32 size;
458 [size_is(size),length_is(length)] uint8 *data;
459 } lsa_DATA_BUF;
461 typedef [flag(NDR_PAHEX)] struct {
462 [range(0,65536)] uint32 size;
463 [size_is(size)] uint8 *data;
464 } lsa_DATA_BUF2;
466 typedef enum {
467 LSA_TRUSTED_DOMAIN_INFO_NAME = 1,
468 LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS_INFO = 2,
469 LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET = 3,
470 LSA_TRUSTED_DOMAIN_INFO_PASSWORD = 4,
471 LSA_TRUSTED_DOMAIN_INFO_BASIC = 5,
472 LSA_TRUSTED_DOMAIN_INFO_INFO_EX = 6,
473 LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO = 7,
474 LSA_TRUSTED_DOMAIN_INFO_FULL_INFO = 8,
475 LSA_TRUSTED_DOMAIN_INFO_11 = 11,
476 LSA_TRUSTED_DOMAIN_INFO_INFO_ALL = 12
477 } lsa_TrustDomInfoEnum;
479 typedef struct {
480 lsa_StringLarge netbios_name;
481 } lsa_TrustDomainInfoName;
483 typedef struct {
484 uint32 posix_offset;
485 } lsa_TrustDomainInfoPosixOffset;
487 typedef struct {
488 lsa_DATA_BUF *password;
489 lsa_DATA_BUF *old_password;
490 } lsa_TrustDomainInfoPassword;
492 typedef struct {
493 lsa_String netbios_name;
494 dom_sid2 *sid;
495 } lsa_TrustDomainInfoBasic;
497 typedef struct {
498 lsa_StringLarge domain_name;
499 lsa_StringLarge netbios_name;
500 dom_sid2 *sid;
501 uint32 trust_direction;
502 uint32 trust_type;
503 uint32 trust_attributes;
504 } lsa_TrustDomainInfoInfoEx;
506 typedef struct {
507 NTTIME_hyper last_update_time;
508 uint32 secret_type;
509 lsa_DATA_BUF2 data;
510 } lsa_TrustDomainInfoBuffer;
512 typedef struct {
513 uint32 incoming_count;
514 lsa_TrustDomainInfoBuffer *incoming_current_auth_info;
515 lsa_TrustDomainInfoBuffer *incoming_previous_auth_info;
516 uint32 outgoing_count;
517 lsa_TrustDomainInfoBuffer *outgoing_current_auth_info;
518 lsa_TrustDomainInfoBuffer *outgoing_previous_auth_info;
519 } lsa_TrustDomainInfoAuthInfo;
521 typedef struct {
522 lsa_TrustDomainInfoInfoEx info_ex;
523 lsa_TrustDomainInfoPosixOffset posix_offset;
524 lsa_TrustDomainInfoAuthInfo auth_info;
525 } lsa_TrustDomainInfoFullInfo;
527 typedef struct {
528 lsa_TrustDomainInfoInfoEx info_ex;
529 lsa_DATA_BUF2 data1;
530 } lsa_TrustDomainInfo11;
532 typedef struct {
533 lsa_TrustDomainInfoInfoEx info_ex;
534 lsa_DATA_BUF2 data1;
535 lsa_TrustDomainInfoPosixOffset posix_offset;
536 lsa_TrustDomainInfoAuthInfo auth_info;
537 } lsa_TrustDomainInfoInfoAll;
539 typedef [switch_type(lsa_TrustDomInfoEnum)] union {
540 [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name;
541 [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] lsa_TrustDomainInfoPosixOffset posix_offset;
542 [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password;
543 [case(LSA_TRUSTED_DOMAIN_INFO_BASIC)] lsa_TrustDomainInfoBasic info_basic;
544 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex;
545 [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info;
546 [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info;
547 [case(LSA_TRUSTED_DOMAIN_INFO_11)] lsa_TrustDomainInfo11 info11;
548 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_ALL)] lsa_TrustDomainInfoInfoAll info_all;
549 } lsa_TrustedDomainInfo;
551 /* Function: 0x1a */
552 NTSTATUS lsa_QueryTrustedDomainInfo(
553 [in] policy_handle *trustdom_handle,
554 [in] lsa_TrustDomInfoEnum level,
555 [out,switch_is(level),unique] lsa_TrustedDomainInfo *info
558 /* Function: 0x1b */
559 NTSTATUS lsa_SetInformationTrustedDomain();
561 /* Function: 0x1c */
562 NTSTATUS lsa_OpenSecret(
563 [in] policy_handle *handle,
564 [in] lsa_String name,
565 [in] uint32 access_mask,
566 [out] policy_handle *sec_handle
569 /* Function: 0x1d */
571 NTSTATUS lsa_SetSecret(
572 [in] policy_handle *sec_handle,
573 [in,unique] lsa_DATA_BUF *new_val,
574 [in,unique] lsa_DATA_BUF *old_val
577 typedef struct {
578 lsa_DATA_BUF *buf;
579 } lsa_DATA_BUF_PTR;
581 /* Function: 0x1e */
582 NTSTATUS lsa_QuerySecret (
583 [in] policy_handle *sec_handle,
584 [in,out,unique] lsa_DATA_BUF_PTR *new_val,
585 [in,out,unique] NTTIME_hyper *new_mtime,
586 [in,out,unique] lsa_DATA_BUF_PTR *old_val,
587 [in,out,unique] NTTIME_hyper *old_mtime
590 /* Function: 0x1f */
591 NTSTATUS lsa_LookupPrivValue(
592 [in] policy_handle *handle,
593 [in] lsa_String *name,
594 [out] lsa_LUID *luid
598 /* Function: 0x20 */
599 NTSTATUS lsa_LookupPrivName (
600 [in] policy_handle *handle,
601 [in] lsa_LUID *luid,
602 [out,unique] lsa_StringLarge *name
606 /*******************/
607 /* Function: 0x21 */
608 NTSTATUS lsa_LookupPrivDisplayName (
609 [in] policy_handle *handle,
610 [in] lsa_String *name,
611 [out,unique] lsa_StringLarge *disp_name,
612 /* see http://www.microsoft.com/globaldev/nlsweb/ for
613 language definitions */
614 [in,out] uint16 *language_id,
615 [in] uint16 unknown
618 /* Function: 0x22 */
619 NTSTATUS lsa_DeleteObject();
622 /*******************/
623 /* Function: 0x23 */
624 NTSTATUS lsa_EnumAccountsWithUserRight (
625 [in] policy_handle *handle,
626 [in,unique] lsa_String *name,
627 [out] lsa_SidArray *sids
630 /* Function: 0x24 */
631 typedef struct {
632 [string,charset(UTF16)] uint16 *name;
633 } lsa_RightAttribute;
635 typedef struct {
636 uint32 count;
637 [size_is(count)] lsa_StringLarge *names;
638 } lsa_RightSet;
640 NTSTATUS lsa_EnumAccountRights (
641 [in] policy_handle *handle,
642 [in] dom_sid2 *sid,
643 [out] lsa_RightSet *rights
647 /**********************/
648 /* Function: 0x25 */
649 NTSTATUS lsa_AddAccountRights (
650 [in] policy_handle *handle,
651 [in] dom_sid2 *sid,
652 [in] lsa_RightSet *rights
655 /**********************/
656 /* Function: 0x26 */
657 NTSTATUS lsa_RemoveAccountRights (
658 [in] policy_handle *handle,
659 [in] dom_sid2 *sid,
660 [in] uint32 unknown,
661 [in] lsa_RightSet *rights
664 /* Function: 0x27 */
665 NTSTATUS lsa_QueryTrustedDomainInfoBySid(
666 [in] policy_handle *handle,
667 [in] dom_sid2 *dom_sid,
668 [in] lsa_TrustDomInfoEnum level,
669 [out,switch_is(level),unique] lsa_TrustedDomainInfo *info
672 /* Function: 0x28 */
673 NTSTATUS lsa_SetTrustedDomainInfo();
674 /* Function: 0x29 */
675 NTSTATUS lsa_DeleteTrustedDomain(
676 [in] policy_handle *handle,
677 [in] dom_sid2 *dom_sid
680 /* Function: 0x2a */
681 NTSTATUS lsa_StorePrivateData();
682 /* Function: 0x2b */
683 NTSTATUS lsa_RetrievePrivateData();
686 /**********************/
687 /* Function: 0x2c */
688 NTSTATUS lsa_OpenPolicy2 (
689 [in,unique] [string,charset(UTF16)] uint16 *system_name,
690 [in] lsa_ObjectAttribute *attr,
691 [in] uint32 access_mask,
692 [out] policy_handle *handle
695 /**********************/
696 /* Function: 0x2d */
697 typedef struct {
698 lsa_String *string;
699 } lsa_StringPointer;
701 NTSTATUS lsa_GetUserName(
702 [in,unique] [string,charset(UTF16)] uint16 *system_name,
703 [in,out,unique] lsa_String *account_name,
704 [in,out,unique] lsa_StringPointer *authority_name
707 /**********************/
708 /* Function: 0x2e */
710 NTSTATUS lsa_QueryInfoPolicy2(
711 [in] policy_handle *handle,
712 [in] lsa_PolicyInfo level,
713 [out,unique,switch_is(level)] lsa_PolicyInformation *info
716 /* Function 0x2f */
717 NTSTATUS lsa_SetInfoPolicy2(
718 [in] policy_handle *handle,
719 [in] lsa_PolicyInfo level,
720 [in,switch_is(level)] lsa_PolicyInformation *info
723 /**********************/
724 /* Function 0x30 */
725 NTSTATUS lsa_QueryTrustedDomainInfoByName(
726 [in] policy_handle *handle,
727 [in] lsa_String trusted_domain,
728 [in] lsa_TrustDomInfoEnum level,
729 [out,unique,switch_is(level)] lsa_TrustedDomainInfo *info
732 /**********************/
733 /* Function 0x31 */
734 NTSTATUS lsa_SetTrustedDomainInfoByName(
735 [in] policy_handle *handle,
736 [in] lsa_String trusted_domain,
737 [in] lsa_TrustDomInfoEnum level,
738 [in,unique,switch_is(level)] lsa_TrustedDomainInfo *info
741 /* Function 0x32 */
743 /* w2k3 treats max_size as max_domains*82 */
744 const int LSA_ENUM_TRUST_DOMAIN_EX_MULTIPLIER = 82;
746 typedef struct {
747 uint32 count;
748 [size_is(count)] lsa_TrustDomainInfoInfoEx *domains;
749 } lsa_DomainListEx;
751 NTSTATUS lsa_EnumTrustedDomainsEx (
752 [in] policy_handle *handle,
753 [in,out] uint32 *resume_handle,
754 [out] lsa_DomainListEx *domains,
755 [in] uint32 max_size
759 /* Function 0x33 */
760 NTSTATUS lsa_CreateTrustedDomainEx();
762 /* Function 0x34 */
763 NTSTATUS lsa_CloseTrustedDomainEx(
764 [in,out] policy_handle *handle
767 /* Function 0x35 */
769 /* w2k3 returns either 0x000bbbd000000000 or 0x000a48e800000000
770 for unknown6 - gd */
771 typedef struct {
772 uint32 enforce_restrictions;
773 hyper service_tkt_lifetime;
774 hyper user_tkt_lifetime;
775 hyper user_tkt_renewaltime;
776 hyper clock_skew;
777 hyper unknown6;
778 } lsa_DomainInfoKerberos;
780 typedef struct {
781 uint32 blob_size;
782 [size_is(blob_size)] uint8 *efs_blob;
783 } lsa_DomainInfoEfs;
785 typedef enum {
786 LSA_DOMAIN_INFO_POLICY_EFS=2,
787 LSA_DOMAIN_INFO_POLICY_KERBEROS=3
788 } lsa_DomainInfoEnum;
790 typedef [switch_type(uint16)] union {
791 [case(LSA_DOMAIN_INFO_POLICY_EFS)] lsa_DomainInfoEfs efs_info;
792 [case(LSA_DOMAIN_INFO_POLICY_KERBEROS)] lsa_DomainInfoKerberos kerberos_info;
793 } lsa_DomainInformationPolicy;
795 NTSTATUS lsa_QueryDomainInformationPolicy(
796 [in] policy_handle *handle,
797 [in] uint16 level,
798 [out,unique,switch_is(level)] lsa_DomainInformationPolicy *info
801 /* Function 0x36 */
802 NTSTATUS lsa_SetDomainInformationPolicy(
803 [in] policy_handle *handle,
804 [in] uint16 level,
805 [in,unique,switch_is(level)] lsa_DomainInformationPolicy *info
808 /**********************/
809 /* Function 0x37 */
810 NTSTATUS lsa_OpenTrustedDomainByName(
811 [in] policy_handle *handle,
812 [in] lsa_String name,
813 [in] uint32 access_mask,
814 [out] policy_handle *trustdom_handle
817 /* Function 0x38 */
818 NTSTATUS lsa_TestCall();
820 /**********************/
821 /* Function 0x39 */
823 typedef struct {
824 lsa_SidType sid_type;
825 lsa_String name;
826 uint32 sid_index;
827 uint32 unknown;
828 } lsa_TranslatedName2;
830 typedef struct {
831 [range(0,1000)] uint32 count;
832 [size_is(count)] lsa_TranslatedName2 *names;
833 } lsa_TransNameArray2;
835 NTSTATUS lsa_LookupSids2(
836 [in] policy_handle *handle,
837 [in] lsa_SidArray *sids,
838 [out,unique] lsa_RefDomainList *domains,
839 [in,out] lsa_TransNameArray2 *names,
840 [in] uint16 level,
841 [in,out] uint32 *count,
842 [in] uint32 unknown1,
843 [in] uint32 unknown2
846 /**********************/
847 /* Function 0x3a */
849 typedef struct {
850 lsa_SidType sid_type;
851 uint32 rid;
852 uint32 sid_index;
853 uint32 unknown;
854 } lsa_TranslatedSid2;
856 typedef struct {
857 [range(0,1000)] uint32 count;
858 [size_is(count)] lsa_TranslatedSid2 *sids;
859 } lsa_TransSidArray2;
861 NTSTATUS lsa_LookupNames2 (
862 [in] policy_handle *handle,
863 [in,range(0,1000)] uint32 num_names,
864 [in,size_is(num_names)] lsa_String names[],
865 [out,unique] lsa_RefDomainList *domains,
866 [in,out] lsa_TransSidArray2 *sids,
867 [in] uint16 level,
868 [in,out] uint32 *count,
869 [in] uint32 unknown1,
870 [in] uint32 unknown2
873 /* Function 0x3b */
874 NTSTATUS lsa_CreateTrustedDomainEx2();
876 /* Function 0x3c */
877 NTSTATUS lsa_CREDRWRITE();
879 /* Function 0x3d */
880 NTSTATUS lsa_CREDRREAD();
882 /* Function 0x3e */
883 NTSTATUS lsa_CREDRENUMERATE();
885 /* Function 0x3f */
886 NTSTATUS lsa_CREDRWRITEDOMAINCREDENTIALS();
888 /* Function 0x40 */
889 NTSTATUS lsa_CREDRREADDOMAINCREDENTIALS();
891 /* Function 0x41 */
892 NTSTATUS lsa_CREDRDELETE();
894 /* Function 0x42 */
895 NTSTATUS lsa_CREDRGETTARGETINFO();
897 /* Function 0x43 */
898 NTSTATUS lsa_CREDRPROFILELOADED();
900 /**********************/
901 /* Function 0x44 */
902 typedef struct {
903 lsa_SidType sid_type;
904 dom_sid2 *sid;
905 uint32 sid_index;
906 uint32 unknown;
907 } lsa_TranslatedSid3;
909 typedef struct {
910 [range(0,1000)] uint32 count;
911 [size_is(count)] lsa_TranslatedSid3 *sids;
912 } lsa_TransSidArray3;
914 NTSTATUS lsa_LookupNames3 (
915 [in] policy_handle *handle,
916 [in,range(0,1000)] uint32 num_names,
917 [in,size_is(num_names)] lsa_String names[],
918 [out,unique] lsa_RefDomainList *domains,
919 [in,out] lsa_TransSidArray3 *sids,
920 [in] uint16 level,
921 [in,out] uint32 *count,
922 [in] uint32 unknown1,
923 [in] uint32 unknown2
926 /* Function 0x45 */
927 NTSTATUS lsa_CREDRGETSESSIONTYPES();
929 /* Function 0x46 */
930 NTSTATUS lsa_LSARREGISTERAUDITEVENT();
932 /* Function 0x47 */
933 NTSTATUS lsa_LSARGENAUDITEVENT();
935 /* Function 0x48 */
936 NTSTATUS lsa_LSARUNREGISTERAUDITEVENT();
938 /* Function 0x49 */
939 NTSTATUS lsa_LSARQUERYFORESTTRUSTINFORMATION();
941 /* Function 0x4a */
942 NTSTATUS lsa_LSARSETFORESTTRUSTINFORMATION();
944 /* Function 0x4b */
945 NTSTATUS lsa_CREDRRENAME();
947 /*****************/
948 /* Function 0x4c */
950 NTSTATUS lsa_LookupSids3(
951 [in] lsa_SidArray *sids,
952 [out,unique] lsa_RefDomainList *domains,
953 [in,out] lsa_TransNameArray2 *names,
954 [in] uint16 level,
955 [in,out] uint32 *count,
956 [in] uint32 unknown1,
957 [in] uint32 unknown2
960 /* Function 0x4d */
961 NTSTATUS lsa_LookupNames4(
962 [in,range(0,1000)] uint32 num_names,
963 [in,size_is(num_names)] lsa_String names[],
964 [out,unique] lsa_RefDomainList *domains,
965 [in,out] lsa_TransSidArray3 *sids,
966 [in] uint16 level,
967 [in,out] uint32 *count,
968 [in] uint32 unknown1,
969 [in] uint32 unknown2
972 /* Function 0x4e */
973 NTSTATUS lsa_LSAROPENPOLICYSCE();
975 /* Function 0x4f */
976 NTSTATUS lsa_LSARADTREGISTERSECURITYEVENTSOURCE();
978 /* Function 0x50 */
979 NTSTATUS lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE();
981 /* Function 0x51 */
982 NTSTATUS lsa_LSARADTREPORTSECURITYEVENT();