2 * Copyright (C) 1999 Juergen Schmied
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19 #ifndef __WINE_NTSECAPI_H
20 #define __WINE_NTSECAPI_H
24 #endif /* defined(__cplusplus) */
26 /* Policy access rights */
27 #define POLICY_VIEW_LOCAL_INFORMATION 0x00000001L
28 #define POLICY_VIEW_AUDIT_INFORMATION 0x00000002L
29 #define POLICY_GET_PRIVATE_INFORMATION 0x00000004L
30 #define POLICY_TRUST_ADMIN 0x00000008L
31 #define POLICY_CREATE_ACCOUNT 0x00000010L
32 #define POLICY_CREATE_SECRET 0x00000020L
33 #define POLICY_CREATE_PRIVILEGE 0x00000040L
34 #define POLICY_SET_DEFAULT_QUOTA_LIMITS 0x00000080L
35 #define POLICY_SET_AUDIT_REQUIREMENTS 0x00000100L
36 #define POLICY_AUDIT_LOG_ADMIN 0x00000200L
37 #define POLICY_SERVER_ADMIN 0x00000400L
38 #define POLICY_LOOKUP_NAMES 0x00000800L
39 #define POLICY_NOTIFICATION 0x00001000L
41 #define POLICY_ALL_ACCESS ( \
42 STANDARD_RIGHTS_REQUIRED | \
43 POLICY_VIEW_LOCAL_INFORMATION | \
44 POLICY_VIEW_AUDIT_INFORMATION | \
45 POLICY_GET_PRIVATE_INFORMATION | \
46 POLICY_TRUST_ADMIN | \
47 POLICY_CREATE_ACCOUNT | \
48 POLICY_CREATE_SECRET | \
49 POLICY_CREATE_PRIVILEGE | \
50 POLICY_SET_DEFAULT_QUOTA_LIMITS | \
51 POLICY_SET_AUDIT_REQUIREMENTS | \
52 POLICY_AUDIT_LOG_ADMIN | \
53 POLICY_SERVER_ADMIN | \
57 #define POLICY_READ ( \
58 STANDARD_RIGHTS_READ | \
59 POLICY_VIEW_AUDIT_INFORMATION | \
60 POLICY_GET_PRIVATE_INFORMATION)
62 #define POLICY_WRITE ( \
63 STANDARD_RIGHTS_WRITE | \
64 POLICY_TRUST_ADMIN | \
65 POLICY_CREATE_ACCOUNT | \
66 POLICY_CREATE_SECRET | \
67 POLICY_CREATE_PRIVILEGE | \
68 POLICY_SET_DEFAULT_QUOTA_LIMITS | \
69 POLICY_SET_AUDIT_REQUIREMENTS | \
70 POLICY_AUDIT_LOG_ADMIN | \
73 #define POLICY_EXECUTE ( \
74 STANDARD_RIGHTS_EXECUTE | \
75 POLICY_VIEW_LOCAL_INFORMATION | \
78 #define POLICY_AUDIT_EVENT_UNCHANGED 0x00000000L
79 #define POLICY_AUDIT_EVENT_SUCCESS 0x00000001L
80 #define POLICY_AUDIT_EVENT_FAILURE 0x00000002L
81 #define POLICY_AUDIT_EVENT_NONE 0x00000004L
83 #define POLICY_AUDIT_EVENT_MASK (POLICY_AUDIT_EVENT_SUCCESS | \
84 POLICY_AUDIT_EVENT_FAILURE | \
85 POLICY_AUDIT_EVENT_NONE)
87 /* logon rights names */
88 #define SE_BATCH_LOGON_NAME \
89 TEXT("SeBatchLogonRight")
90 #define SE_INTERACTIVE_LOGON_NAME \
91 TEXT("SeInteractiveLogonRight")
92 #define SE_NETWORK_LOGON_NAME \
93 TEXT("SeNetworkLogonRight")
94 #define SE_REMOTE_INTERACTIVE_LOGON_NAME \
95 TEXT("SeRemoteInteractiveLogonRight")
96 #define SE_SERVICE_LOGON_NAME \
97 TEXT("SeServiceLogonRight")
98 #define SE_DENY_BATCH_LOGON_NAME \
99 TEXT("SeDenyBatchLogonRight")
100 #define SE_DENY_INTERACTIVE_LOGON_NAME \
101 TEXT("SeDenyInteractiveLogonRight")
102 #define SE_DENY_NETWORK_LOGON_NAME \
103 TEXT("SeDenyNetworkLogonRight")
104 #define SE_DENY_REMOTE_INTERACTIVE_LOGON_NAME \
105 TEXT("SeDenyRemoteInteractiveLogonRight")
106 #define SE_DENY_SERVICE_LOGON_NAME \
107 TEXT("SeDenyServiceLogonRight")
109 #ifndef WINE_NTSTATUS_DECLARED
110 #define WINE_NTSTATUS_DECLARED
111 typedef LONG NTSTATUS
;
113 #ifndef WINE_PNTSTATUS_DECLARED
114 #define WINE_PNTSTATUS_DECLARED
115 typedef NTSTATUS
*PNTSTATUS
;
118 typedef enum _SECURITY_LOGON_TYPE
125 } SECURITY_LOGON_TYPE
, *PSECURITY_LOGON_TYPE
;
127 typedef enum _POLICY_AUDIT_EVENT_TYPE
131 AuditCategoryObjectAccess
,
132 AuditCategoryPrivilegeUse
,
133 AuditCategoryDetailedTracking
,
134 AuditCategoryPolicyChange
,
135 AuditCategoryAccountManagement
136 } POLICY_AUDIT_EVENT_TYPE
, *PPOLICY_AUDIT_EVENT_TYPE
;
138 #ifndef __STRING_DEFINED__
139 #define __STRING_DEFINED__
140 typedef struct _STRING
{
142 USHORT MaximumLength
;
147 #ifndef __UNICODE_STRING_DEFINED__
148 #define __UNICODE_STRING_DEFINED__
149 typedef struct _UNICODE_STRING
{
150 USHORT Length
; /* bytes */
151 USHORT MaximumLength
; /* bytes */
153 } UNICODE_STRING
, *PUNICODE_STRING
;
156 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
157 #define __OBJECT_ATTRIBUTES_DEFINED__
158 typedef struct _OBJECT_ATTRIBUTES
{
160 HANDLE RootDirectory
;
161 PUNICODE_STRING ObjectName
;
163 PVOID SecurityDescriptor
; /* type SECURITY_DESCRIPTOR */
164 PVOID SecurityQualityOfService
; /* type SECURITY_QUALITY_OF_SERVICE */
165 } OBJECT_ATTRIBUTES
, *POBJECT_ATTRIBUTES
;
168 typedef UNICODE_STRING LSA_UNICODE_STRING
, *PLSA_UNICODE_STRING
;
169 typedef STRING LSA_STRING
, *PLSA_STRING
;
170 typedef OBJECT_ATTRIBUTES LSA_OBJECT_ATTRIBUTES
, *PLSA_OBJECT_ATTRIBUTES
;
172 typedef PVOID LSA_HANDLE
, *PLSA_HANDLE
;
173 typedef ULONG LSA_ENUMERATION_HANDLE
, *PLSA_ENUMERATION_HANDLE
;
177 PolicyAuditLogInformation
= 1,
178 PolicyAuditEventsInformation
,
179 PolicyPrimaryDomainInformation
,
180 PolicyPdAccountInformation
,
181 PolicyAccountDomainInformation
,
182 PolicyLsaServerRoleInformation
,
183 PolicyReplicaSourceInformation
,
184 PolicyDefaultQuotaInformation
,
185 PolicyModificationInformation
,
186 PolicyAuditFullSetInformation
,
187 PolicyAuditFullQueryInformation
,
188 PolicyDnsDomainInformation
189 } POLICY_INFORMATION_CLASS
, *PPOLICY_INFORMATION_CLASS
;
191 typedef ULONG POLICY_AUDIT_EVENT_OPTIONS
, *PPOLICY_AUDIT_EVENT_OPTIONS
;
193 typedef struct _POLICY_AUDIT_EVENTS_INFO
195 BOOLEAN AuditingMode
;
196 PPOLICY_AUDIT_EVENT_OPTIONS EventAuditingOptions
;
197 ULONG MaximumAuditEventCount
;
198 } POLICY_AUDIT_EVENTS_INFO
, *PPOLICY_AUDIT_EVENTS_INFO
;
200 typedef struct _POLICY_PRIMARY_DOMAIN_INFO
202 LSA_UNICODE_STRING Name
;
204 } POLICY_PRIMARY_DOMAIN_INFO
, *PPOLICY_PRIMARY_DOMAIN_INFO
;
206 typedef struct _POLICY_ACCOUNT_DOMAIN_INFO
208 LSA_UNICODE_STRING DomainName
;
210 } POLICY_ACCOUNT_DOMAIN_INFO
, *PPOLICY_ACCOUNT_DOMAIN_INFO
;
212 typedef struct _POLICY_DNS_DOMAIN_INFO
214 LSA_UNICODE_STRING Name
;
215 LSA_UNICODE_STRING DnsDomainName
;
216 LSA_UNICODE_STRING DnsForestName
;
219 } POLICY_DNS_DOMAIN_INFO
, *PPOLICY_DNS_DOMAIN_INFO
;
221 typedef enum _POLICY_LSA_SERVER_ROLE
223 PolicyServerRoleBackup
= 2,
224 PolicyServerRolePrimary
225 } POLICY_LSA_SERVER_ROLE
, *PPOLICY_LSA_SERVER_ROLE
;
227 typedef struct _POLICY_LSA_SERVER_ROLE_INFO
229 POLICY_LSA_SERVER_ROLE LsaServerRole
;
230 } POLICY_LSA_SERVER_ROLE_INFO
, *PPOLICY_LSA_SERVER_ROLE_INFO
;
232 typedef struct _POLICY_MODIFICATION_INFO
234 LARGE_INTEGER ModifiedId
;
235 LARGE_INTEGER DatabaseCreationTime
;
236 } POLICY_MODIFICATION_INFO
, *PPOLICY_MODIFICATION_INFO
;
238 typedef struct _SECURITY_LOGON_SESSION_DATA
{
241 LSA_UNICODE_STRING UserName
;
242 LSA_UNICODE_STRING LogonDomain
;
243 LSA_UNICODE_STRING AuthenticationPackage
;
247 LARGE_INTEGER LogonTime
;
248 LSA_UNICODE_STRING LogonServer
;
249 LSA_UNICODE_STRING DnsDomainName
;
250 LSA_UNICODE_STRING Upn
;
251 } SECURITY_LOGON_SESSION_DATA
, *PSECURITY_LOGON_SESSION_DATA
;
256 LSA_UNICODE_STRING Name
;
258 } LSA_TRANSLATED_NAME
, *PLSA_TRANSLATED_NAME
;
262 LSA_UNICODE_STRING Name
;
264 } LSA_TRUST_INFORMATION
, *PLSA_TRUST_INFORMATION
;
269 PLSA_TRUST_INFORMATION Domains
;
270 } LSA_REFERENCED_DOMAIN_LIST
, *PLSA_REFERENCED_DOMAIN_LIST
;
272 typedef struct _LSA_TRANSLATED_SID
277 } LSA_TRANSLATED_SID
, *PLSA_TRANSLATED_SID
;
279 typedef struct _TRUSTED_DOMAIN_INFORMATION_EX
281 LSA_UNICODE_STRING Name
;
282 LSA_UNICODE_STRING FlatName
;
284 ULONG TrustDirection
;
286 ULONG TrustAttributes
;
287 } TRUSTED_DOMAIN_INFORMATION_EX
, *PTRUSTED_DOMAIN_INFORMATION_EX
;
289 typedef struct _LSA_AUTH_INFORMATION
291 LARGE_INTEGER LastUpdateTime
;
293 ULONG AuthInfoLength
;
295 } LSA_AUTH_INFORMATION
, *PLSA_AUTH_INFORMATION
;
297 typedef struct _TRUSTED_DOMAIN_AUTH_INFORMATION
299 ULONG IncomingAuthInfos
;
300 PLSA_AUTH_INFORMATION IncomingAuthenticationInformation
;
301 PLSA_AUTH_INFORMATION IncomingPreviousAuthenticationInformation
;
302 ULONG OutgoingAuthInfos
;
303 PLSA_AUTH_INFORMATION OutgoingAuthenticationInformation
;
304 PLSA_AUTH_INFORMATION OutgoingPreviousAuthenticationInformation
;
305 } TRUSTED_DOMAIN_AUTH_INFORMATION
, *PTRUSTED_DOMAIN_AUTH_INFORMATION
;
307 typedef struct _LSA_TRANSLATED_SID2
313 } LSA_TRANSLATED_SID2
, *PLSA_TRANSLATED_SID2
;
315 typedef enum _TRUSTED_INFORMATION_CLASS
317 TrustedDomainNameInformation
= 1,
318 TrustedControllersInformation
,
319 TrustedPosixOffsetInformation
,
320 TrustedPasswordInformation
,
321 TrustedDomainInformationBasic
,
322 TrustedDomainInformationEx
,
323 TrustedDomainAuthInformation
,
324 TrustedDomainFullInformation
325 } TRUSTED_INFORMATION_CLASS
, *PTRUSTED_INFORMATION_CLASS
;
327 typedef enum _POLICY_NOTIFICATION_INFORMATION_CLASS
329 PolicyNotifyAuditEventsInformation
= 1,
330 PolicyNotifyAccountDomainInformation
,
331 PolicyNotifyServerRoleInformation
,
332 PolicyNotifyDnsDomainInformation
,
333 PolicyNotifyDomainEfsInformation
,
334 PolicyNotifyDomainKerberosTicketInformation
,
335 PolicyNotifyMachineAccountPasswordInformation
336 } POLICY_NOTIFICATION_INFORMATION_CLASS
, *PPOLICY_NOTIFICATION_INFORMATION_CLASS
;
338 #define RtlGenRandom SystemFunction036
340 BOOLEAN WINAPI
RtlGenRandom(PVOID
,ULONG
);
342 NTSTATUS WINAPI
LsaAddAccountRights(LSA_HANDLE
,PSID
,PLSA_UNICODE_STRING
,ULONG
);
343 NTSTATUS WINAPI
LsaCallAuthenticationPackage(HANDLE
,ULONG
,PVOID
,ULONG
,PVOID
*,PULONG
,PNTSTATUS
);
344 NTSTATUS WINAPI
LsaClose(LSA_HANDLE
);
345 NTSTATUS WINAPI
LsaConnectUntrusted(PHANDLE
);
346 NTSTATUS WINAPI
LsaCreateTrustedDomainEx(LSA_HANDLE
,PTRUSTED_DOMAIN_INFORMATION_EX
,
347 PTRUSTED_DOMAIN_AUTH_INFORMATION
,ACCESS_MASK
,PLSA_HANDLE
);
348 NTSTATUS WINAPI
LsaDeleteTrustedDomain(LSA_HANDLE
,PSID
);
349 NTSTATUS WINAPI
LsaDeregisterLogonProcess(HANDLE
);
350 NTSTATUS WINAPI
LsaEnumerateAccountRights(LSA_HANDLE
,PSID
,PLSA_UNICODE_STRING
*,PULONG
);
351 NTSTATUS WINAPI
LsaEnumerateAccountsWithUserRight(LSA_HANDLE
,PLSA_UNICODE_STRING
,PVOID
*,PULONG
);
352 NTSTATUS WINAPI
LsaEnumerateTrustedDomains(LSA_HANDLE
,PLSA_ENUMERATION_HANDLE
,PVOID
*,ULONG
,PULONG
);
353 NTSTATUS WINAPI
LsaEnumerateTrustedDomainsEx(LSA_HANDLE
,PLSA_ENUMERATION_HANDLE
,PVOID
*,ULONG
,PULONG
);
354 NTSTATUS WINAPI
LsaFreeMemory(PVOID
);
355 NTSTATUS WINAPI
LsaLookupNames(LSA_HANDLE
,ULONG
,PLSA_UNICODE_STRING
,PLSA_REFERENCED_DOMAIN_LIST
*,
356 PLSA_TRANSLATED_SID
*);
357 NTSTATUS WINAPI
LsaLookupNames2(LSA_HANDLE
,ULONG
,ULONG
,PLSA_UNICODE_STRING
,PLSA_REFERENCED_DOMAIN_LIST
*,
358 PLSA_TRANSLATED_SID2
*);
359 NTSTATUS WINAPI
LsaLookupSids(LSA_HANDLE
,ULONG
,PSID
*,PLSA_REFERENCED_DOMAIN_LIST
*,PLSA_TRANSLATED_NAME
*);
360 ULONG WINAPI
LsaNtStatusToWinError(NTSTATUS
);
361 NTSTATUS WINAPI
LsaOpenPolicy(PLSA_UNICODE_STRING
,PLSA_OBJECT_ATTRIBUTES
,ACCESS_MASK
,PLSA_HANDLE
);
362 NTSTATUS WINAPI
LsaOpenTrustedDomainByName(LSA_HANDLE
,PLSA_UNICODE_STRING
,ACCESS_MASK
,PLSA_HANDLE
);
363 NTSTATUS WINAPI
LsaQueryInformationPolicy(LSA_HANDLE
,POLICY_INFORMATION_CLASS
,PVOID
*);
364 NTSTATUS WINAPI
LsaQueryTrustedDomainInfo(LSA_HANDLE
,PSID
,TRUSTED_INFORMATION_CLASS
,PVOID
*);
365 NTSTATUS WINAPI
LsaQueryTrustedDomainInfoByName(LSA_HANDLE
,PLSA_UNICODE_STRING
,TRUSTED_INFORMATION_CLASS
,PVOID
*);
366 NTSTATUS WINAPI
LsaRegisterPolicyChangeNotification(POLICY_NOTIFICATION_INFORMATION_CLASS
,HANDLE
);
367 NTSTATUS WINAPI
LsaRemoveAccountRights(LSA_HANDLE
,PSID
,BOOLEAN
,PLSA_UNICODE_STRING
,ULONG
);
368 NTSTATUS WINAPI
LsaRetrievePrivateData(LSA_HANDLE
,PLSA_UNICODE_STRING
,PLSA_UNICODE_STRING
*);
369 NTSTATUS WINAPI
LsaSetInformationPolicy(LSA_HANDLE
,POLICY_INFORMATION_CLASS
,PVOID
);
370 NTSTATUS WINAPI
LsaSetTrustedDomainInfoByName(LSA_HANDLE
,PLSA_UNICODE_STRING
,TRUSTED_INFORMATION_CLASS
,PVOID
);
371 NTSTATUS WINAPI
LsaSetTrustedDomainInformation(LSA_HANDLE
,PSID
,TRUSTED_INFORMATION_CLASS
,PVOID
);
372 NTSTATUS WINAPI
LsaStorePrivateData(LSA_HANDLE
,PLSA_UNICODE_STRING
,PLSA_UNICODE_STRING
);
373 NTSTATUS WINAPI
LsaUnregisterPolicyChangeNotification(POLICY_NOTIFICATION_INFORMATION_CLASS
,HANDLE
);
377 #endif /* defined(__cplusplus) */
379 #endif /* !defined(__WINE_NTSECAPI_H) */