librpc/idl/netlogon.idl

   1 /*
   2   netlogon interface
   3   much of this was derived from the ethereal sources - thanks to everyone
   4   who contributed!
   5 */
   6
   7 import "misc.idl", "lsa.idl", "samr.idl", "security.idl";
   8
   9 #include "idl_types.h"
  10
  11 cpp_quote("#define netr_DeltaEnum8Bit netr_DeltaEnum")
  12 cpp_quote("#define netr_SamDatabaseID8Bit netr_SamDatabaseID")
  13
  14 cpp_quote("#define ENC_CRC32 KERB_ENCTYPE_DES_CBC_CRC")
  15 cpp_quote("#define ENC_RSA_MD5 KERB_ENCTYPE_DES_CBC_MD5")
  16 cpp_quote("#define ENC_RC4_HMAC_MD5 KERB_ENCTYPE_RC4_HMAC_MD5")
  17 cpp_quote("#define ENC_HMAC_SHA1_96_AES128 KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96")
  18 cpp_quote("#define ENC_HMAC_SHA1_96_AES256 KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96")
  19
  20 [
  21   uuid("12345678-1234-abcd-ef00-01234567cffb"),
  22   version(1.0),
  23   endpoint("ncacn_np:[\\pipe\\netlogon]","ncacn_ip_tcp:","ncalrpc:"),
  24   helper("../librpc/ndr/ndr_netlogon.h"),
  25   ms_union,
  26   pointer_default(unique)
  27 ]
  28
  29 interface netlogon
  30 {
  31         typedef bitmap samr_AcctFlags samr_AcctFlags;
  32         typedef bitmap samr_GroupAttrs samr_GroupAttrs;
  33         typedef enum netr_DeltaEnum8Bit netr_DeltaEnum8Bit;
  34         typedef enum netr_SamDatabaseID8Bit netr_SamDatabaseID8Bit;
  35
  36         /*****************/
  37         /* Function 0x00 */
  38
  39         typedef struct {
  40                 [string,charset(UTF16)] uint16 *account_name;
  41                 uint32 priv;
  42                 uint32 auth_flags;
  43                 uint32 logon_count;
  44                 uint32 bad_pw_count;
  45                 time_t last_logon;
  46                 time_t last_logoff;
  47                 time_t logoff_time;
  48                 time_t kickoff_time;
  49                 uint32 password_age;
  50                 time_t pw_can_change;
  51                 time_t pw_must_change;
  52                 [string,charset(UTF16)] uint16 *computer;
  53                 [string,charset(UTF16)] uint16 *domain;
  54                 [string,charset(UTF16)] uint16 *script_path;
  55                 uint32 unknown;
  56         } netr_UasInfo;
  57
  58         WERROR netr_LogonUasLogon(
  59                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
  60                 [in]   [string,charset(UTF16)] uint16 *account_name,
  61                 [in]   [string,charset(UTF16)] uint16 *workstation,
  62                 [out,ref]  netr_UasInfo **info
  63                 );
  64
  65
  66         /*****************/
  67         /* Function 0x01 */
  68
  69         typedef struct {
  70                 uint32 duration;
  71                 uint16 logon_count;
  72         } netr_UasLogoffInfo;
  73
  74         WERROR netr_LogonUasLogoff(
  75                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
  76                 [in] [string,charset(UTF16)] uint16 *account_name,
  77                 [in] [string,charset(UTF16)] uint16 *workstation,
  78                 [out,ref] netr_UasLogoffInfo *info
  79                 );
  80
  81
  82         /*****************/
  83         /* Function 0x02 */
  84
  85         /* in netr_AcctLockStr size seems to be be 24, and rrenard thinks
  86            that the structure of the bindata looks like this:
  87
  88                 dlong  lockout_duration;
  89                 udlong reset_count;
  90                 uint32 bad_attempt_lockout;
  91                 uint32 dummy;
  92
  93            but it doesn't look as though this structure is reflected at the
  94            NDR level. Maybe it is left to the application to decode the bindata array.
  95         */
  96         typedef [public] struct {
  97                 dlong lockout_duration;
  98                 udlong reset_count;
  99                 uint32 bad_attempt_lockout;
 100                 uint32 dummy;
 101         } netr_AcctLockStr;
 102
 103         /* - MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
 104          *   sets the NETLOGON_SERVER_TRUST_ACCOUNT user_flag
 105          * - MSV1_0_UPDATE_LOGON_STATISTICS
 106          *   sets the logon time on network logon
 107          * - MSV1_0_RETURN_USER_PARAMETERS
 108          *   sets the user parameters in the driveletter
 109          * - MSV1_0_RETURN_PROFILE_PATH
 110          *   returns the profilepath in the driveletter and
 111          *   sets LOGON_PROFILE_PATH_RETURNED user_flag
 112          */
 113
 114         typedef [public,bitmap32bit] bitmap {
 115                 MSV1_0_CLEARTEXT_PASSWORD_ALLOWED       = 0x00000002,
 116                 MSV1_0_UPDATE_LOGON_STATISTICS          = 0x00000004,
 117                 MSV1_0_RETURN_USER_PARAMETERS           = 0x00000008,
 118                 MSV1_0_DONT_TRY_GUEST_ACCOUNT           = 0x00000010,
 119                 MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT       = 0x00000020,
 120                 MSV1_0_RETURN_PASSWORD_EXPIRY           = 0x00000040,
 121                 MSV1_0_USE_CLIENT_CHALLENGE             = 0x00000080,
 122                 MSV1_0_TRY_GUEST_ACCOUNT_ONLY           = 0x00000100,
 123                 MSV1_0_RETURN_PROFILE_PATH              = 0x00000200,
 124                 MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY        = 0x00000400,
 125                 MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT  = 0x00000800,
 126                 MSV1_0_DISABLE_PERSONAL_FALLBACK        = 0x00001000,
 127                 MSV1_0_ALLOW_FORCE_GUEST                = 0x00002000,
 128                 MSV1_0_CLEARTEXT_PASSWORD_SUPPLIED      = 0x00004000,
 129                 MSV1_0_USE_DOMAIN_FOR_ROUTING_ONLY      = 0x00008000,
 130                 MSV1_0_ALLOW_MSVCHAPV2                  = 0x00010000,
 131                 MSV1_0_S4U2SELF                         = 0x00020000,
 132                 MSV1_0_CHECK_LOGONHOURS_FOR_S4U         = 0x00040000,
 133                 MSV1_0_SUBAUTHENTICATION_DLL_EX         = 0x00100000
 134         } netr_LogonParameterControl;
 135
 136         typedef struct {
 137                 lsa_String  domain_name;
 138                 netr_LogonParameterControl parameter_control; /* see MSV1_0_* */
 139                 uint32      logon_id_low;
 140                 uint32      logon_id_high;
 141                 lsa_String  account_name;
 142                 lsa_String  workstation;
 143         } netr_IdentityInfo;
 144
 145         typedef struct {
 146                 netr_IdentityInfo identity_info;
 147                 samr_Password lmpassword;
 148                 samr_Password ntpassword;
 149         } netr_PasswordInfo;
 150
 151         typedef [flag(NDR_PAHEX)] struct {
 152                 uint16 length;
 153                 [value(length)] uint16 size;
 154                 [size_is(length),length_is(length)] uint8 *data;
 155         } netr_ChallengeResponse;
 156
 157         typedef [flag(NDR_PAHEX)] struct {
 158                 netr_IdentityInfo identity_info;
 159                 uint8 challenge[8];
 160                 netr_ChallengeResponse nt;
 161                 netr_ChallengeResponse lm;
 162         } netr_NetworkInfo;
 163
 164         typedef [flag(NDR_PAHEX)] struct {
 165                 netr_IdentityInfo identity_info;
 166                 lsa_String  package_name;
 167                 uint32 length;
 168                 [size_is(length)] uint8 *data;
 169         } netr_GenericInfo;
 170
 171         typedef enum {
 172                 NetlogonInteractiveInformation = 1,
 173                 NetlogonNetworkInformation = 2,
 174                 NetlogonServiceInformation = 3,
 175                 NetlogonGenericInformation = 4,
 176                 NetlogonInteractiveTransitiveInformation = 5,
 177                 NetlogonNetworkTransitiveInformation = 6,
 178                 NetlogonServiceTransitiveInformation = 7
 179         } netr_LogonInfoClass;
 180
 181         typedef [public,switch_type(netr_LogonInfoClass)] union {
 182                 [case(NetlogonInteractiveInformation)]           netr_PasswordInfo *password;
 183                 [case(NetlogonNetworkInformation)]               netr_NetworkInfo  *network;
 184                 [case(NetlogonServiceInformation)]               netr_PasswordInfo *password;
 185                 [case(NetlogonGenericInformation)]               netr_GenericInfo  *generic;
 186                 [case(NetlogonInteractiveTransitiveInformation)] netr_PasswordInfo *password;
 187                 [case(NetlogonNetworkTransitiveInformation)]     netr_NetworkInfo  *network;
 188                 [case(NetlogonServiceTransitiveInformation)]     netr_PasswordInfo *password;
 189                 [default];
 190         } netr_LogonLevel;
 191
 192         typedef [public,flag(NDR_PAHEX)] struct {
 193                 uint8 key[16];
 194         } netr_UserSessionKey;
 195
 196         typedef [public,flag(NDR_PAHEX)] struct {
 197                 uint8 key[8];
 198         } netr_LMSessionKey;
 199
 200         /* Flags for user_flags below */
 201         typedef [public,bitmap32bit] bitmap {
 202                 NETLOGON_GUEST                  = 0x00000001,
 203                 NETLOGON_NOENCRYPTION           = 0x00000002,
 204                 NETLOGON_CACHED_ACCOUNT         = 0x00000004,
 205                 NETLOGON_USED_LM_PASSWORD       = 0x00000008,
 206                 NETLOGON_EXTRA_SIDS             = 0x00000020,
 207                 NETLOGON_SUBAUTH_SESSION_KEY    = 0x00000040,
 208                 NETLOGON_SERVER_TRUST_ACCOUNT   = 0x00000080,
 209                 NETLOGON_NTLMV2_ENABLED         = 0x00000100,
 210                 NETLOGON_RESOURCE_GROUPS        = 0x00000200,
 211                 NETLOGON_PROFILE_PATH_RETURNED  = 0x00000400,
 212                 NETLOGON_GRACE_LOGON            = 0x01000000
 213         } netr_UserFlags;
 214
 215         typedef struct {
 216                 NTTIME logon_time;
 217                 NTTIME logoff_time;
 218                 NTTIME kickoff_time;
 219                 NTTIME last_password_change;
 220                 NTTIME allow_password_change;
 221                 NTTIME force_password_change;
 222                 lsa_String account_name;
 223                 lsa_String full_name;
 224                 lsa_String logon_script;
 225                 lsa_String profile_path;
 226                 lsa_String home_directory;
 227                 lsa_String home_drive;
 228                 uint16 logon_count;
 229                 uint16 bad_password_count;
 230                 uint32 rid;
 231                 uint32 primary_gid;
 232                 samr_RidWithAttributeArray groups;
 233                 netr_UserFlags user_flags;
 234                 netr_UserSessionKey key;
 235                 lsa_StringLarge logon_server;
 236                 lsa_StringLarge logon_domain;
 237                 dom_sid2 *domain_sid;
 238                 netr_LMSessionKey LMSessKey;
 239                 samr_AcctFlags acct_flags;
 240                 uint32 sub_auth_status;
 241                 NTTIME last_successful_logon;
 242                 NTTIME last_failed_logon;
 243                 uint32 failed_logon_count;
 244                 uint32 reserved;
 245         } netr_SamBaseInfo;
 246
 247         typedef struct {
 248                 netr_SamBaseInfo base;
 249         } netr_SamInfo2;
 250
 251         typedef struct {
 252                 dom_sid2 *sid;
 253                 samr_GroupAttrs attributes;
 254         } netr_SidAttr;
 255
 256         typedef [public] struct {
 257                 netr_SamBaseInfo base;
 258                 uint32 sidcount;
 259                 [size_is(sidcount)] netr_SidAttr *sids;
 260         } netr_SamInfo3;
 261
 262         typedef struct {
 263                 netr_SamBaseInfo base;
 264                 uint32 sidcount;
 265                 [size_is(sidcount)] netr_SidAttr *sids;
 266                 lsa_String dns_domainname;
 267                 lsa_String principle;
 268                 uint32 unknown4[20];
 269         } netr_SamInfo6;
 270
 271         typedef struct {
 272                 uint32 pac_size;
 273                 [size_is(pac_size)] uint8 *pac;
 274                 lsa_String logon_domain;
 275                 lsa_String logon_server;
 276                 lsa_String principal_name;
 277                 uint32 auth_size;
 278                 [size_is(auth_size)] uint8 *auth;
 279                 netr_UserSessionKey user_session_key;
 280                 uint32 expansionroom[10];
 281                 lsa_String unknown1;
 282                 lsa_String unknown2;
 283                 lsa_String unknown3;
 284                 lsa_String unknown4;
 285         } netr_PacInfo;
 286
 287         typedef [flag(NDR_PAHEX)] struct {
 288                 uint32 length;
 289                 [size_is(length)] uint8 *data;
 290         } netr_GenericInfo2;
 291
 292         typedef enum {
 293                 NetlogonValidationUasInfo = 1,
 294                 NetlogonValidationSamInfo = 2,
 295                 NetlogonValidationSamInfo2 = 3,
 296                 NetlogonValidationGenericInfo2 = 5,
 297                 NetlogonValidationSamInfo4 = 6
 298         } netr_ValidationInfoClass;
 299
 300         typedef [public,switch_type(uint16)] union {
 301                 [case(NetlogonValidationSamInfo)] netr_SamInfo2 *sam2;
 302                 [case(NetlogonValidationSamInfo2)] netr_SamInfo3 *sam3;
 303                 [case(4)] netr_PacInfo  *pac;
 304                 [case(NetlogonValidationGenericInfo2)] netr_GenericInfo2  *generic;
 305                 [case(NetlogonValidationSamInfo4)] netr_SamInfo6 *sam6;
 306                 [default];
 307         } netr_Validation;
 308
 309         typedef [public, flag(NDR_PAHEX)] struct {
 310                 uint8 data[8];
 311         } netr_Credential;
 312
 313         typedef [public] struct {
 314                 netr_Credential cred;
 315                 time_t timestamp;
 316         } netr_Authenticator;
 317
 318         [public] NTSTATUS netr_LogonSamLogon(
 319                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
 320                 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
 321                 [in,unique] netr_Authenticator *credential,
 322                 [in,out,unique] netr_Authenticator *return_authenticator,
 323                 [in] netr_LogonInfoClass logon_level,
 324                 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
 325                 [in] uint16 validation_level,
 326                 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
 327                 [out,ref] uint8 *authoritative
 328                 );
 329
 330
 331         /*****************/
 332         /* Function 0x03 */
 333
 334         NTSTATUS netr_LogonSamLogoff(
 335                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
 336                 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
 337                 [in,unique] netr_Authenticator *credential,
 338                 [in,out,unique] netr_Authenticator *return_authenticator,
 339                 [in] netr_LogonInfoClass logon_level,
 340                 [in] [switch_is(logon_level)] netr_LogonLevel logon
 341                 );
 342
 343
 344
 345         /*****************/
 346         /* Function 0x04 */
 347
 348         [public] NTSTATUS netr_ServerReqChallenge(
 349                 [in,unique,string,charset(UTF16)] uint16 *server_name,
 350                 [in,string,charset(UTF16)] uint16 *computer_name,
 351                 [in,ref] netr_Credential *credentials,
 352                 [out,ref] netr_Credential *return_credentials
 353                 );
 354
 355
 356         /*****************/
 357         /* Function 0x05 */
 358
 359         typedef enum netr_SchannelType netr_SchannelType;
 360
 361         NTSTATUS netr_ServerAuthenticate(
 362                 [in,unique,string,charset(UTF16)] uint16 *server_name,
 363                 [in,string,charset(UTF16)] uint16 *account_name,
 364                 [in] netr_SchannelType secure_channel_type,
 365                 [in,string,charset(UTF16)] uint16 *computer_name,
 366                 [in,ref] netr_Credential *credentials,
 367                 [out,ref] netr_Credential *return_credentials
 368                 );
 369
 370
 371         /*****************/
 372         /* Function 0x06 */
 373
 374         NTSTATUS netr_ServerPasswordSet(
 375                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
 376                 [in]  [string,charset(UTF16)] uint16 *account_name,
 377                 [in]  netr_SchannelType secure_channel_type,
 378                 [in]  [string,charset(UTF16)] uint16 *computer_name,
 379                 [in,ref]  netr_Authenticator *credential,
 380                 [out,ref] netr_Authenticator *return_authenticator,
 381                 [in,ref] samr_Password *new_password
 382                 );
 383
 384
 385         /*****************/
 386         /* Function 0x07 */
 387
 388         typedef enum netr_SamDatabaseID netr_SamDatabaseID;
 389
 390         typedef struct {
 391                 [string,charset(UTF16)] uint16 *account_name;
 392                 lsa_String unknown1;
 393                 lsa_String unknown2;
 394                 lsa_String unknown3;
 395                 lsa_String unknown4;
 396                 uint32 unknown5;
 397                 uint32 unknown6;
 398                 uint32 unknown7;
 399                 uint32 unknown8;
 400         } netr_DELTA_DELETE_USER;
 401
 402         typedef struct {
 403                 uint16 length;
 404                 [value(length)] uint16 size;
 405                 uint32 flags;
 406                 samr_Password pwd;
 407         } netr_USER_KEY16;
 408
 409         typedef struct {
 410                 uint16 nt_length;
 411                 [value(nt_length)] uint16 nt_size;
 412                 uint32 nt_flags;
 413                 uint16 lm_length;
 414                 [value(lm_length)] uint16 lm_size;
 415                 uint32 lm_flags;
 416                 uint8 nt_history[nt_length];
 417                 uint8 lm_history[lm_length];
 418         } netr_PasswordHistory;
 419
 420         typedef struct {
 421                 netr_USER_KEY16 lmpassword;
 422                 netr_USER_KEY16 ntpassword;
 423                 netr_PasswordHistory history;
 424         } netr_USER_KEYS2;
 425
 426         typedef struct { /* TODO: make this a union! */
 427                 netr_USER_KEYS2 keys2;
 428         } netr_USER_KEY_UNION;
 429
 430         typedef [public] struct {
 431                 uint32 version;
 432                 netr_USER_KEY_UNION keys;
 433         } netr_USER_KEYS;
 434
 435         typedef struct {
 436                 boolean8  SensitiveDataFlag;
 437                 uint32 DataLength;
 438
 439                 /* netr_USER_KEYS encrypted with the session key */
 440                 [size_is(DataLength)][flag(NDR_PAHEX)] uint8 *SensitiveData;
 441         } netr_USER_PRIVATE_INFO;
 442
 443         typedef struct {
 444                 lsa_String account_name;
 445                 lsa_String full_name;
 446                 uint32 rid;
 447                 uint32 primary_gid;
 448                 lsa_String home_directory;
 449                 lsa_String home_drive;
 450                 lsa_String logon_script;
 451                 lsa_String description;
 452                 lsa_String workstations;
 453                 NTTIME last_logon;
 454                 NTTIME last_logoff;
 455                 samr_LogonHours logon_hours;
 456                 uint16 bad_password_count;
 457                 uint16 logon_count;
 458                 NTTIME last_password_change;
 459                 NTTIME acct_expiry;
 460                 samr_AcctFlags acct_flags;
 461                 samr_Password lmpassword;
 462                 samr_Password ntpassword;
 463                 boolean8 nt_password_present;
 464                 boolean8 lm_password_present;
 465                 boolean8 password_expired;
 466                 lsa_String comment;
 467                 lsa_BinaryString parameters;
 468                 uint16 country_code;
 469                 uint16 code_page;
 470                 netr_USER_PRIVATE_INFO user_private_info;
 471                 uint32 SecurityInformation;
 472                 sec_desc_buf sdbuf;
 473                 lsa_String profile_path;
 474                 lsa_String unknown2;
 475                 lsa_String unknown3;
 476                 lsa_String unknown4;
 477                 uint32 unknown5;
 478                 uint32 unknown6;
 479                 uint32 unknown7;
 480                 uint32 unknown8;
 481         } netr_DELTA_USER;
 482
 483         typedef struct {
 484                 lsa_String domain_name;
 485                 lsa_String oem_information; /* comment */
 486                 dlong force_logoff_time;
 487                 uint16 min_password_length;
 488                 uint16 password_history_length;
 489                 /* yes, these are signed. They are in negative 100ns */
 490                 dlong  max_password_age;
 491                 dlong  min_password_age;
 492                 udlong sequence_num;
 493                 NTTIME domain_create_time;
 494                 uint32 SecurityInformation;
 495                 sec_desc_buf sdbuf;
 496                 lsa_BinaryString account_lockout;
 497                 lsa_String unknown2;
 498                 lsa_String unknown3;
 499                 lsa_String unknown4;
 500                 uint32 logon_to_chgpass;
 501                 uint32 unknown6;
 502                 uint32 unknown7;
 503                 uint32 unknown8;
 504         } netr_DELTA_DOMAIN;
 505
 506         typedef struct {
 507                 lsa_String group_name;
 508                 uint32 rid;
 509                 uint32 attributes;
 510                 lsa_String description;
 511                 uint32 SecurityInformation;
 512                 sec_desc_buf sdbuf;
 513                 lsa_String unknown1;
 514                 lsa_String unknown2;
 515                 lsa_String unknown3;
 516                 lsa_String unknown4;
 517                 uint32 unknown5;
 518                 uint32 unknown6;
 519                 uint32 unknown7;
 520                 uint32 unknown8;
 521         } netr_DELTA_GROUP;
 522
 523         typedef struct {
 524                 lsa_String OldName;
 525                 lsa_String NewName;
 526                 lsa_String unknown1;
 527                 lsa_String unknown2;
 528                 lsa_String unknown3;
 529                 lsa_String unknown4;
 530                 uint32 unknown5;
 531                 uint32 unknown6;
 532                 uint32 unknown7;
 533                 uint32 unknown8;
 534         } netr_DELTA_RENAME;
 535
 536         typedef struct {
 537                 [size_is(num_rids)] uint32 *rids;
 538                 [size_is(num_rids)] uint32 *attribs;
 539                 uint32 num_rids;
 540                 uint32 unknown1;
 541                 uint32 unknown2;
 542                 uint32 unknown3;
 543                 uint32 unknown4;
 544         } netr_DELTA_GROUP_MEMBER;
 545
 546         typedef struct {
 547                 lsa_String alias_name;
 548                 uint32 rid;
 549                 uint32 SecurityInformation;
 550                 sec_desc_buf sdbuf;
 551                 lsa_String description;
 552                 lsa_String unknown2;
 553                 lsa_String unknown3;
 554                 lsa_String unknown4;
 555                 uint32 unknown5;
 556                 uint32 unknown6;
 557                 uint32 unknown7;
 558                 uint32 unknown8;
 559         } netr_DELTA_ALIAS;
 560
 561         typedef struct {
 562                 lsa_SidArray sids;
 563                 uint32 unknown1;
 564                 uint32 unknown2;
 565                 uint32 unknown3;
 566                 uint32 unknown4;
 567         } netr_DELTA_ALIAS_MEMBER;
 568
 569         typedef struct {
 570                 uint32 pagedpoollimit;
 571                 uint32 nonpagedpoollimit;
 572                 uint32 minimumworkingsetsize;
 573                 uint32 maximumworkingsetsize;
 574                 uint32 pagefilelimit;
 575                 NTTIME timelimit;
 576         } netr_QUOTA_LIMITS;
 577
 578         typedef struct {
 579                 uint32 maxlogsize;
 580                 NTTIME auditretentionperiod;
 581                 boolean8 auditingmode;
 582                 uint32 maxauditeventcount;
 583                 [size_is(maxauditeventcount+1)] uint32 *eventauditoptions;
 584                 lsa_String primary_domain_name;
 585                 dom_sid2 *sid;
 586                 netr_QUOTA_LIMITS quota_limits;
 587                 udlong sequence_num;
 588                 NTTIME db_create_time;
 589                 uint32 SecurityInformation;
 590                 sec_desc_buf sdbuf;
 591                 lsa_String unknown1;
 592                 lsa_String unknown2;
 593                 lsa_String unknown3;
 594                 lsa_String unknown4;
 595                 uint32 unknown5;
 596                 uint32 unknown6;
 597                 uint32 unknown7;
 598                 uint32 unknown8;
 599         } netr_DELTA_POLICY;
 600
 601         typedef struct {
 602                 lsa_String domain_name;
 603                 uint32 num_controllers;
 604                 [size_is(num_controllers)] lsa_String *controller_names;
 605                 uint32 SecurityInformation;
 606                 sec_desc_buf sdbuf;
 607                 lsa_String unknown1;
 608                 lsa_String unknown2;
 609                 lsa_String unknown3;
 610                 lsa_String unknown4;
 611                 uint32 posix_offset;
 612                 uint32 unknown6;
 613                 uint32 unknown7;
 614                 uint32 unknown8;
 615         } netr_DELTA_TRUSTED_DOMAIN;
 616
 617         typedef struct {
 618                 uint32 privilege_entries;
 619                 uint32 privilege_control;
 620                 [size_is(privilege_entries)] uint32 *privilege_attrib;
 621                 [size_is(privilege_entries)] lsa_String *privilege_name;
 622                 netr_QUOTA_LIMITS quotalimits;
 623                 uint32 system_flags;
 624                 uint32 SecurityInformation;
 625                 sec_desc_buf sdbuf;
 626                 lsa_String unknown1;
 627                 lsa_String unknown2;
 628                 lsa_String unknown3;
 629                 lsa_String unknown4;
 630                 uint32 unknown5;
 631                 uint32 unknown6;
 632                 uint32 unknown7;
 633                 uint32 unknown8;
 634         } netr_DELTA_ACCOUNT;
 635
 636         typedef struct {
 637                 uint32 len;
 638                 uint32 maxlen;
 639                 [size_is(maxlen)][length_is(len)] uint8 *cipher_data;
 640         } netr_CIPHER_VALUE;
 641
 642         typedef struct {
 643                 netr_CIPHER_VALUE current_cipher;
 644                 NTTIME current_cipher_set_time;
 645                 netr_CIPHER_VALUE old_cipher;
 646                 NTTIME old_cipher_set_time;
 647                 uint32 SecurityInformation;
 648                 sec_desc_buf sdbuf;
 649                 lsa_String unknown1;
 650                 lsa_String unknown2;
 651                 lsa_String unknown3;
 652                 lsa_String unknown4;
 653                 uint32 unknown5;
 654                 uint32 unknown6;
 655                 uint32 unknown7;
 656                 uint32 unknown8;
 657         } netr_DELTA_SECRET;
 658
 659         typedef enum {
 660                 NETR_DELTA_DOMAIN           = 1,
 661                 NETR_DELTA_GROUP            = 2,
 662                 NETR_DELTA_DELETE_GROUP     = 3,
 663                 NETR_DELTA_RENAME_GROUP     = 4,
 664                 NETR_DELTA_USER             = 5,
 665                 NETR_DELTA_DELETE_USER      = 6,
 666                 NETR_DELTA_RENAME_USER      = 7,
 667                 NETR_DELTA_GROUP_MEMBER     = 8,
 668                 NETR_DELTA_ALIAS            = 9,
 669                 NETR_DELTA_DELETE_ALIAS     = 10,
 670                 NETR_DELTA_RENAME_ALIAS     = 11,
 671                 NETR_DELTA_ALIAS_MEMBER     = 12,
 672                 NETR_DELTA_POLICY           = 13,
 673                 NETR_DELTA_TRUSTED_DOMAIN   = 14,
 674                 NETR_DELTA_DELETE_TRUST     = 15,
 675                 NETR_DELTA_ACCOUNT          = 16,
 676                 NETR_DELTA_DELETE_ACCOUNT   = 17,
 677                 NETR_DELTA_SECRET           = 18,
 678                 NETR_DELTA_DELETE_SECRET    = 19,
 679                 NETR_DELTA_DELETE_GROUP2    = 20,
 680                 NETR_DELTA_DELETE_USER2     = 21,
 681                 NETR_DELTA_MODIFY_COUNT     = 22
 682         } netr_DeltaEnum;
 683
 684         typedef [switch_type(netr_DeltaEnum)] union {
 685                 [case(NETR_DELTA_DOMAIN)]          netr_DELTA_DOMAIN          *domain;
 686                 [case(NETR_DELTA_GROUP)]           netr_DELTA_GROUP           *group;
 687                 [case(NETR_DELTA_DELETE_GROUP)]    ; /* rid only */
 688                 [case(NETR_DELTA_RENAME_GROUP)]    netr_DELTA_RENAME          *rename_group;
 689                 [case(NETR_DELTA_USER)]            netr_DELTA_USER            *user;
 690                 [case(NETR_DELTA_DELETE_USER)]     ; /* rid only */
 691                 [case(NETR_DELTA_RENAME_USER)]     netr_DELTA_RENAME          *rename_user;
 692                 [case(NETR_DELTA_GROUP_MEMBER)]    netr_DELTA_GROUP_MEMBER    *group_member;
 693                 [case(NETR_DELTA_ALIAS)]           netr_DELTA_ALIAS           *alias;
 694                 [case(NETR_DELTA_DELETE_ALIAS)]    ; /* rid only */
 695                 [case(NETR_DELTA_RENAME_ALIAS)]    netr_DELTA_RENAME          *rename_alias;
 696                 [case(NETR_DELTA_ALIAS_MEMBER)]    netr_DELTA_ALIAS_MEMBER    *alias_member;
 697                 [case(NETR_DELTA_POLICY)]          netr_DELTA_POLICY          *policy;
 698                 [case(NETR_DELTA_TRUSTED_DOMAIN)]  netr_DELTA_TRUSTED_DOMAIN  *trusted_domain;
 699                 [case(NETR_DELTA_DELETE_TRUST)]    ; /* sid only */
 700                 [case(NETR_DELTA_ACCOUNT)]         netr_DELTA_ACCOUNT         *account;
 701                 [case(NETR_DELTA_DELETE_ACCOUNT)]  ; /* sid only */
 702                 [case(NETR_DELTA_SECRET)]          netr_DELTA_SECRET          *secret;
 703                 [case(NETR_DELTA_DELETE_SECRET)]   ; /* name only */
 704                 [case(NETR_DELTA_DELETE_GROUP2)]   netr_DELTA_DELETE_USER     *delete_group;
 705                 [case(NETR_DELTA_DELETE_USER2)]    netr_DELTA_DELETE_USER     *delete_user;
 706                 [case(NETR_DELTA_MODIFY_COUNT)]    udlong                     *modified_count;
 707                 [default];
 708         } netr_DELTA_UNION;
 709
 710         typedef [switch_type(netr_DeltaEnum)] union {
 711                 [case(NETR_DELTA_DOMAIN)]          uint32 rid;
 712                 [case(NETR_DELTA_GROUP)]           uint32 rid;
 713                 [case(NETR_DELTA_DELETE_GROUP)]    uint32 rid;
 714                 [case(NETR_DELTA_RENAME_GROUP)]    uint32 rid;
 715                 [case(NETR_DELTA_USER)]            uint32 rid;
 716                 [case(NETR_DELTA_DELETE_USER)]     uint32 rid;
 717                 [case(NETR_DELTA_RENAME_USER)]     uint32 rid;
 718                 [case(NETR_DELTA_GROUP_MEMBER)]    uint32 rid;
 719                 [case(NETR_DELTA_ALIAS)]           uint32 rid;
 720                 [case(NETR_DELTA_DELETE_ALIAS)]    uint32 rid;
 721                 [case(NETR_DELTA_RENAME_ALIAS)]    uint32 rid;
 722                 [case(NETR_DELTA_ALIAS_MEMBER)]    uint32 rid;
 723                 [case(NETR_DELTA_POLICY)]          dom_sid2 *sid;
 724                 [case(NETR_DELTA_TRUSTED_DOMAIN)]  dom_sid2 *sid;
 725                 [case(NETR_DELTA_DELETE_TRUST)]    dom_sid2 *sid;
 726                 [case(NETR_DELTA_ACCOUNT)]         dom_sid2 *sid;
 727                 [case(NETR_DELTA_DELETE_ACCOUNT)]  dom_sid2 *sid;
 728                 [case(NETR_DELTA_SECRET)]          [string,charset(UTF16)] uint16 *name;
 729                 [case(NETR_DELTA_DELETE_SECRET)]   [string,charset(UTF16)] uint16 *name;
 730                 [case(NETR_DELTA_DELETE_GROUP2)]   uint32 rid;
 731                 [case(NETR_DELTA_DELETE_USER2)]    uint32 rid;
 732                 [case(NETR_DELTA_MODIFY_COUNT)]    ;
 733                 [default];
 734         } netr_DELTA_ID_UNION;
 735
 736         typedef struct {
 737                 netr_DeltaEnum delta_type;
 738                 [switch_is(delta_type)] netr_DELTA_ID_UNION delta_id_union;
 739                 [switch_is(delta_type)] netr_DELTA_UNION delta_union;
 740         } netr_DELTA_ENUM;
 741
 742         typedef struct {
 743                 uint32 num_deltas;
 744                 [size_is(num_deltas)] netr_DELTA_ENUM *delta_enum;
 745         } netr_DELTA_ENUM_ARRAY;
 746
 747         NTSTATUS netr_DatabaseDeltas(
 748                 [in]      [string,charset(UTF16)] uint16 *logon_server,
 749                 [in]      [string,charset(UTF16)] uint16 *computername,
 750                 [in,ref]  netr_Authenticator *credential,
 751                 [in,out,ref]  netr_Authenticator *return_authenticator,
 752                 [in]      netr_SamDatabaseID database_id,
 753                 [in,out,ref]  udlong *sequence_num,
 754                 [out,ref]     netr_DELTA_ENUM_ARRAY **delta_enum_array,
 755                 [in]      uint32 preferredmaximumlength
 756                 );
 757
 758
 759         /*****************/
 760         /* Function 0x08 */
 761
 762         NTSTATUS netr_DatabaseSync(
 763                 [in]     [string,charset(UTF16)] uint16 *logon_server,
 764                 [in]     [string,charset(UTF16)] uint16 *computername,
 765                 [in,ref] netr_Authenticator *credential,
 766                 [in,out,ref] netr_Authenticator *return_authenticator,
 767                 [in]     netr_SamDatabaseID database_id,
 768                 [in,out,ref] uint32 *sync_context,
 769                 [out,ref]    netr_DELTA_ENUM_ARRAY **delta_enum_array,
 770                 [in]     uint32 preferredmaximumlength
 771                 );
 772
 773
 774         /*****************/
 775         /* Function 0x09 */
 776
 777         /* w2k3 returns NT_STATUS_NOT_IMPLEMENTED for this call */
 778
 779         typedef [flag(NDR_PAHEX)] struct {
 780                 uint8 computer_name[16];
 781                 uint32 timecreated;
 782                 uint32 serial_number;
 783         } netr_UAS_INFO_0;
 784
 785         typedef struct {
 786                 [flag(NDR_REMAINING)] DATA_BLOB blob;
 787         } netr_AccountBuffer;
 788
 789         NTSTATUS netr_AccountDeltas(
 790                 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
 791                 [in]     [string,charset(UTF16)] uint16 *computername,
 792                 [in]     netr_Authenticator credential,
 793                 [in,out,ref] netr_Authenticator *return_authenticator,
 794                 [in]     netr_UAS_INFO_0 uas,
 795                 [in]     uint32 count,
 796                 [in]     uint32 level,
 797                 [in]     uint32 buffersize,
 798                 [out,ref,subcontext(4)] netr_AccountBuffer *buffer,
 799                 [out,ref]    uint32 *count_returned,
 800                 [out,ref]    uint32 *total_entries,
 801                 [out,ref]    netr_UAS_INFO_0 *recordid
 802                 );
 803
 804
 805         /*****************/
 806         /* Function 0x0A */
 807
 808         NTSTATUS netr_AccountSync(
 809                 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
 810                 [in]      [string,charset(UTF16)] uint16 *computername,
 811                 [in]      netr_Authenticator credential,
 812                 [in,out,ref]  netr_Authenticator *return_authenticator,
 813                 [in]      uint32 reference,
 814                 [in]      uint32 level,
 815                 [in]      uint32 buffersize,
 816                 [out,ref,subcontext(4)] netr_AccountBuffer *buffer,
 817                 [out,ref]     uint32 *count_returned,
 818                 [out,ref]     uint32 *total_entries,
 819                 [out,ref]     uint32 *next_reference,
 820                 [in,out,ref]  netr_UAS_INFO_0 *recordid
 821                 );
 822
 823
 824         /*****************/
 825         /* Function 0x0B */
 826
 827         WERROR netr_GetDcName(
 828                 [in]  [string,charset(UTF16)] uint16 *logon_server,
 829                 [in,unique] [string,charset(UTF16)] uint16 *domainname,
 830                 [out,ref] [string,charset(UTF16)] uint16 **dcname
 831                 );
 832
 833         /*****************/
 834         /* Function 0x0C */
 835
 836         typedef [bitmap32bit] bitmap {
 837                 NETLOGON_REPLICATION_NEEDED             = 0x00000001,
 838                 NETLOGON_REPLICATION_IN_PROGRESS        = 0x00000002,
 839                 NETLOGON_FULL_SYNC_REPLICATION          = 0x00000004,
 840                 NETLOGON_REDO_NEEDED                    = 0x00000008,
 841                 NETLOGON_HAS_IP                         = 0x00000010,
 842                 NETLOGON_HAS_TIMESERV                   = 0x00000020,
 843                 NETLOGON_DNS_UPDATE_FAILURE             = 0x00000040,
 844                 NETLOGON_VERIFY_STATUS_RETURNED         = 0x00000080
 845         } netr_InfoFlags;
 846
 847         typedef struct {
 848                 netr_InfoFlags flags;
 849                 WERROR pdc_connection_status;
 850         } netr_NETLOGON_INFO_1;
 851
 852         typedef struct {
 853                 netr_InfoFlags flags;
 854                 WERROR pdc_connection_status;
 855                 [string,charset(UTF16)] uint16 *trusted_dc_name;
 856                 WERROR tc_connection_status;
 857         } netr_NETLOGON_INFO_2;
 858
 859         typedef struct {
 860                 netr_InfoFlags flags;
 861                 uint32 logon_attempts;
 862                 uint32 unknown1;
 863                 uint32 unknown2;
 864                 uint32 unknown3;
 865                 uint32 unknown4;
 866                 uint32 unknown5;
 867         } netr_NETLOGON_INFO_3;
 868
 869         typedef struct {
 870                 [string,charset(UTF16)] uint16 *trusted_dc_name;
 871                 [string,charset(UTF16)] uint16 *trusted_domain_name;
 872         } netr_NETLOGON_INFO_4;
 873
 874         typedef [public] union {
 875                 [case(1)]  netr_NETLOGON_INFO_1 *info1;
 876                 [case(2)]  netr_NETLOGON_INFO_2 *info2;
 877                 [case(3)]  netr_NETLOGON_INFO_3 *info3;
 878                 [case(4)]  netr_NETLOGON_INFO_4 *info4;
 879                 [default] ;
 880         } netr_CONTROL_QUERY_INFORMATION;
 881
 882         /* function_code values */
 883         typedef [v1_enum,public] enum {
 884                 NETLOGON_CONTROL_QUERY                  = 0x00000001,
 885                 NETLOGON_CONTROL_REPLICATE              = 0x00000002,
 886                 NETLOGON_CONTROL_SYNCHRONIZE            = 0x00000003,
 887                 NETLOGON_CONTROL_PDC_REPLICATE          = 0x00000004,
 888                 NETLOGON_CONTROL_REDISCOVER             = 0x00000005,
 889                 NETLOGON_CONTROL_TC_QUERY               = 0x00000006,
 890                 NETLOGON_CONTROL_TRANSPORT_NOTIFY       = 0x00000007,
 891                 NETLOGON_CONTROL_FIND_USER              = 0x00000008,
 892                 NETLOGON_CONTROL_CHANGE_PASSWORD        = 0x00000009,
 893                 NETLOGON_CONTROL_TC_VERIFY              = 0x0000000A,
 894                 NETLOGON_CONTROL_FORCE_DNS_REG          = 0x0000000B,
 895                 NETLOGON_CONTROL_QUERY_DNS_REG          = 0x0000000C,
 896                 NETLOGON_CONTROL_BACKUP_CHANGE_LOG      = 0x0000FFFC,
 897                 NETLOGON_CONTROL_TRUNCATE_LOG           = 0x0000FFFD,
 898                 NETLOGON_CONTROL_SET_DBFLAG             = 0x0000FFFE,
 899                 NETLOGON_CONTROL_BREAKPOINT             = 0x0000FFFF
 900         } netr_LogonControlCode;
 901
 902         WERROR netr_LogonControl(
 903                 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
 904                 [in]   netr_LogonControlCode function_code,
 905                 [in]   uint32 level,
 906                 [out,ref,switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
 907                 );
 908
 909
 910         /*****************/
 911         /* Function 0x0D */
 912
 913         WERROR netr_GetAnyDCName(
 914                 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
 915                 [in,unique] [string,charset(UTF16)] uint16 *domainname,
 916                 [out,ref] [string,charset(UTF16)] uint16 **dcname
 917                 );
 918
 919
 920         /*****************/
 921         /* Function 0x0E */
 922
 923         typedef [public,switch_type(netr_LogonControlCode)] union {
 924                 [case(NETLOGON_CONTROL_REDISCOVER)]        [string,charset(UTF16)] uint16 *domain;
 925                 [case(NETLOGON_CONTROL_TC_QUERY)]          [string,charset(UTF16)] uint16 *domain;
 926                 [case(NETLOGON_CONTROL_TRANSPORT_NOTIFY)]  [string,charset(UTF16)] uint16 *domain;
 927                 [case(NETLOGON_CONTROL_CHANGE_PASSWORD)]   [string,charset(UTF16)] uint16 *domain;
 928                 [case(NETLOGON_CONTROL_TC_VERIFY)]         [string,charset(UTF16)] uint16 *domain;
 929                 [case(NETLOGON_CONTROL_FIND_USER)]         [string,charset(UTF16)] uint16 *user;
 930                 [case(NETLOGON_CONTROL_SET_DBFLAG)]        uint32 debug_level;
 931                 [default] ;
 932         } netr_CONTROL_DATA_INFORMATION;
 933
 934         WERROR netr_LogonControl2(
 935                 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
 936                 [in]    netr_LogonControlCode function_code,
 937                 [in]    uint32 level,
 938                 [in,ref][switch_is(function_code)] netr_CONTROL_DATA_INFORMATION  *data,
 939                 [out,ref][switch_is(level)]        netr_CONTROL_QUERY_INFORMATION *query
 940                 );
 941
 942
 943         /* If NETLOGON_NEG_ARCFOUR flag is not set, then the passwords and LM
 944          * session keys are encrypted with DES calls.  (And the user session key
 945          * is unencrypted) */
 946
 947         /*****************/
 948         /* Function 0x0F */
 949
 950         typedef [public,bitmap32bit] bitmap {
 951                 NETLOGON_NEG_ACCOUNT_LOCKOUT            = 0x00000001,
 952                 NETLOGON_NEG_PERSISTENT_SAMREPL         = 0x00000002,
 953                 NETLOGON_NEG_ARCFOUR                    = 0x00000004,
 954                 NETLOGON_NEG_PROMOTION_COUNT            = 0x00000008,
 955                 NETLOGON_NEG_CHANGELOG_BDC              = 0x00000010,
 956                 NETLOGON_NEG_FULL_SYNC_REPL             = 0x00000020,
 957                 NETLOGON_NEG_MULTIPLE_SIDS              = 0x00000040,
 958                 NETLOGON_NEG_REDO                       = 0x00000080,
 959                 NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL    = 0x00000100,
 960                 NETLOGON_NEG_SEND_PASSWORD_INFO_PDC     = 0x00000200,
 961                 NETLOGON_NEG_GENERIC_PASSTHROUGH        = 0x00000400,
 962                 NETLOGON_NEG_CONCURRENT_RPC             = 0x00000800,
 963                 NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL      = 0x00001000,
 964                 NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL = 0x00002000,
 965                 NETLOGON_NEG_STRONG_KEYS                = 0x00004000,
 966                 NETLOGON_NEG_TRANSITIVE_TRUSTS          = 0x00008000,
 967                 NETLOGON_NEG_DNS_DOMAIN_TRUSTS          = 0x00010000,
 968                 NETLOGON_NEG_PASSWORD_SET2              = 0x00020000,
 969                 NETLOGON_NEG_GETDOMAININFO              = 0x00040000,
 970                 NETLOGON_NEG_CROSS_FOREST_TRUSTS        = 0x00080000,
 971                 NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION   = 0x00100000,
 972                 NETLOGON_NEG_RODC_PASSTHROUGH           = 0x00200000,
 973                 NETLOGON_NEG_SUPPORTS_AES_SHA2          = 0x00400000,
 974                 NETLOGON_NEG_SUPPORTS_AES               = 0x01000000,
 975                 NETLOGON_NEG_AUTHENTICATED_RPC_LSASS    = 0x20000000,
 976                 NETLOGON_NEG_AUTHENTICATED_RPC          = 0x40000000
 977         } netr_NegotiateFlags;
 978
 979         const uint32 NETLOGON_NEG_128BIT = NETLOGON_NEG_STRONG_KEYS;
 980         const uint32 NETLOGON_NEG_SCHANNEL = NETLOGON_NEG_AUTHENTICATED_RPC;
 981
 982         NTSTATUS netr_ServerAuthenticate2(
 983                 [in,unique]  [string,charset(UTF16)] uint16 *server_name,
 984                 [in]         [string,charset(UTF16)] uint16 *account_name,
 985                 [in]         netr_SchannelType secure_channel_type,
 986                 [in]         [string,charset(UTF16)] uint16 *computer_name,
 987                 [in,ref]     netr_Credential *credentials,
 988                 [out,ref]    netr_Credential *return_credentials,
 989                 [in,out,ref] netr_NegotiateFlags *negotiate_flags
 990                 );
 991
 992
 993         /*****************/
 994         /* Function 0x10 */
 995
 996         typedef enum {
 997                 SYNCSTATE_NORMAL_STATE             = 0,
 998                 SYNCSTATE_DOMAIN_STATE             = 1,
 999                 SYNCSTATE_GROUP_STATE              = 2,
1000                 SYNCSTATE_UAS_BUILT_IN_GROUP_STATE = 3,
1001                 SYNCSTATE_USER_STATE               = 4,
1002                 SYNCSTATE_GROUP_MEMBER_STATE       = 5,
1003                 SYNCSTATE_ALIAS_STATE              = 6,
1004                 SYNCSTATE_ALIAS_MEMBER_STATE       = 7,
1005                 SYNCSTATE_SAM_DONE_STATE           = 8
1006         } SyncStateEnum;
1007
1008         NTSTATUS netr_DatabaseSync2(
1009                 [in]     [string,charset(UTF16)] uint16 *logon_server,
1010                 [in]     [string,charset(UTF16)] uint16 *computername,
1011                 [in,ref] netr_Authenticator *credential,
1012                 [in,out,ref] netr_Authenticator *return_authenticator,
1013                 [in]     netr_SamDatabaseID database_id,
1014                 [in]     SyncStateEnum restart_state,
1015                 [in,out,ref] uint32 *sync_context,
1016                 [out,ref]    netr_DELTA_ENUM_ARRAY **delta_enum_array,
1017                 [in]     uint32 preferredmaximumlength
1018                 );
1019
1020
1021         /*****************/
1022         /* Function 0x11 */
1023
1024         /* i'm not at all sure how this call works */
1025
1026         typedef [bitmap16bit] bitmap {
1027                 NETR_CHANGELOG_IMMEDIATE_REPL_REQUIRED  = 0x0001,
1028                 NETR_CHANGELOG_CHANGED_PASSWORD         = 0x0002,
1029                 NETR_CHANGELOG_SID_INCLUDED             = 0x0004,
1030                 NETR_CHANGELOG_NAME_INCLUDED            = 0x0008,
1031                 NETR_CHANGELOG_FIRST_PROMOTION_OBJ      = 0x0010
1032         } netr_ChangeLogFlags;
1033
1034         typedef [nodiscriminant] union {
1035                 [case(NETR_CHANGELOG_SID_INCLUDED)] dom_sid object_sid;
1036                 [case(NETR_CHANGELOG_NAME_INCLUDED)] nstring object_name;
1037                 [default];
1038         } netr_ChangeLogObject;
1039
1040         typedef [public,gensize] struct {
1041                 uint32 serial_number1;
1042                 uint32 serial_number2;
1043                 uint32 object_rid;
1044                 netr_ChangeLogFlags flags;
1045                 netr_SamDatabaseID8Bit db_index;
1046                 netr_DeltaEnum8Bit delta_type;
1047                 [switch_is(flags & (NETR_CHANGELOG_SID_INCLUDED|NETR_CHANGELOG_NAME_INCLUDED))] netr_ChangeLogObject object;
1048         } netr_ChangeLogEntry;
1049
1050         NTSTATUS netr_DatabaseRedo(
1051                 [in]     [string,charset(UTF16)] uint16 *logon_server,
1052                 [in]     [string,charset(UTF16)] uint16 *computername,
1053                 [in]     netr_Authenticator *credential,
1054                 [in,out,ref] netr_Authenticator *return_authenticator,
1055                 /*
1056                  * we cannot use subcontext_size() here, as
1057                  * change_log_entry_size is encoded after the subcontext
1058                  */
1059                 [in]     [subcontext(4)/*,subcontext_size(change_log_entry_size)*/]
1060                         netr_ChangeLogEntry change_log_entry,
1061                 [in]     [value(ndr_size_netr_ChangeLogEntry(&change_log_entry,
1062                                 ndr->flags))]
1063                         uint32 change_log_entry_size,
1064                 [out,ref]    netr_DELTA_ENUM_ARRAY **delta_enum_array
1065                 );
1066
1067
1068         /*****************/
1069         /* Function 0x12 */
1070
1071         WERROR netr_LogonControl2Ex(
1072                 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
1073                 [in]   netr_LogonControlCode function_code,
1074                 [in]   uint32 level,
1075                 [in,ref][switch_is(function_code)] netr_CONTROL_DATA_INFORMATION  *data,
1076                 [out,ref][switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
1077                 );
1078
1079         /*****************/
1080         /* Function 0x13 */
1081         typedef struct {
1082                 uint32 length;
1083                 [size_is(length)] uint8 *data;
1084         } netr_Blob;
1085
1086         NTSTATUS netr_NetrEnumerateTrustedDomains(
1087                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1088                 [out,ref] netr_Blob *trusted_domains_blob
1089                 );
1090
1091         /*****************/
1092         /* Function 0x14 */
1093
1094         /* one unkown bit still: DS_IP_VERSION_AGNOSTIC - gd*/
1095
1096         const int DSGETDC_VALID_FLAGS = (DS_FORCE_REDISCOVERY |
1097                                          DS_DIRECTORY_SERVICE_REQUIRED |
1098                                          DS_DIRECTORY_SERVICE_PREFERRED |
1099                                          DS_GC_SERVER_REQUIRED |
1100                                          DS_PDC_REQUIRED |
1101                                          DS_BACKGROUND_ONLY |
1102                                          DS_IP_REQUIRED |
1103                                          DS_KDC_REQUIRED |
1104                                          DS_TIMESERV_REQUIRED |
1105                                          DS_WRITABLE_REQUIRED |
1106                                          DS_GOOD_TIMESERV_PREFERRED |
1107                                          DS_AVOID_SELF |
1108                                          DS_ONLY_LDAP_NEEDED |
1109                                          DS_IS_FLAT_NAME |
1110                                          DS_IS_DNS_NAME |
1111                                          DS_TRY_NEXTCLOSEST_SITE |
1112                                          DS_DIRECTORY_SERVICE_6_REQUIRED |
1113                                          DS_WEB_SERVICE_REQUIRED |
1114                                          DS_RETURN_FLAT_NAME |
1115                                          DS_RETURN_DNS_NAME);
1116
1117         typedef [bitmap32bit] bitmap {
1118                 DS_FORCE_REDISCOVERY            = 0x00000001,
1119                 DS_DIRECTORY_SERVICE_REQUIRED   = 0x00000010,
1120                 DS_DIRECTORY_SERVICE_PREFERRED  = 0x00000020,
1121                 DS_GC_SERVER_REQUIRED           = 0x00000040,
1122                 DS_PDC_REQUIRED                 = 0x00000080,
1123                 DS_BACKGROUND_ONLY              = 0x00000100,
1124                 DS_IP_REQUIRED                  = 0x00000200,
1125                 DS_KDC_REQUIRED                 = 0x00000400,
1126                 DS_TIMESERV_REQUIRED            = 0x00000800,
1127                 DS_WRITABLE_REQUIRED            = 0x00001000,
1128                 DS_GOOD_TIMESERV_PREFERRED      = 0x00002000,
1129                 DS_AVOID_SELF                   = 0x00004000,
1130                 DS_ONLY_LDAP_NEEDED             = 0x00008000,
1131                 DS_IS_FLAT_NAME                 = 0x00010000,
1132                 DS_IS_DNS_NAME                  = 0x00020000,
1133                 DS_TRY_NEXTCLOSEST_SITE         = 0x00040000,
1134                 DS_DIRECTORY_SERVICE_6_REQUIRED = 0x00080000,
1135                 DS_WEB_SERVICE_REQUIRED         = 0x00100000,
1136                 DS_RETURN_DNS_NAME              = 0x40000000,
1137                 DS_RETURN_FLAT_NAME             = 0x80000000
1138         } netr_DsRGetDCName_flags;
1139
1140         typedef [v1_enum] enum {
1141                 DS_ADDRESS_TYPE_INET            = 1,
1142                 DS_ADDRESS_TYPE_NETBIOS         = 2
1143         } netr_DsRGetDCNameInfo_AddressType;
1144
1145         typedef [bitmap32bit] bitmap {
1146                 DS_SERVER_PDC                    = 0x00000001,
1147                 DS_SERVER_GC                     = 0x00000004,
1148                 DS_SERVER_LDAP                   = 0x00000008,
1149                 DS_SERVER_DS                     = 0x00000010,
1150                 DS_SERVER_KDC                    = 0x00000020,
1151                 DS_SERVER_TIMESERV               = 0x00000040,
1152                 DS_SERVER_CLOSEST                = 0x00000080,
1153                 DS_SERVER_WRITABLE               = 0x00000100,
1154                 DS_SERVER_GOOD_TIMESERV          = 0x00000200,
1155                 DS_SERVER_NDNC                   = 0x00000400,
1156                 DS_SERVER_SELECT_SECRET_DOMAIN_6 = 0x00000800,
1157                 DS_SERVER_FULL_SECRET_DOMAIN_6   = 0x00001000,
1158                 DS_SERVER_WEBSERV                = 0x00002000,
1159                 DS_SERVER_DS_8                   = 0x00004000,
1160                 DS_DNS_CONTROLLER                = 0x20000000,
1161                 DS_DNS_DOMAIN                    = 0x40000000,
1162                 DS_DNS_FOREST_ROOT               = 0x80000000
1163         } netr_DsR_DcFlags;
1164
1165         typedef [public] struct {
1166                 [string,charset(UTF16)] uint16 *dc_unc;
1167                 [string,charset(UTF16)] uint16 *dc_address;
1168                 netr_DsRGetDCNameInfo_AddressType dc_address_type;
1169                 GUID domain_guid;
1170                 [string,charset(UTF16)] uint16 *domain_name;
1171                 [string,charset(UTF16)] uint16 *forest_name;
1172                 netr_DsR_DcFlags dc_flags;
1173                 [string,charset(UTF16)] uint16 *dc_site_name;
1174                 [string,charset(UTF16)] uint16 *client_site_name;
1175         } netr_DsRGetDCNameInfo;
1176
1177         WERROR netr_DsRGetDCName(
1178                 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1179                 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1180                 [in,unique] GUID *domain_guid,
1181                 [in,unique] GUID *site_guid,
1182                 [in] netr_DsRGetDCName_flags flags,
1183                 [out,ref] netr_DsRGetDCNameInfo **info
1184                 );
1185
1186         /*****************/
1187         /* Function 0x15 */
1188         typedef [switch_type(uint32)] union {
1189                 [case(1)] netr_NegotiateFlags server_capabilities;
1190         } netr_Capabilities;
1191
1192         NTSTATUS netr_LogonGetCapabilities(
1193                 [in]         [string,charset(UTF16)] uint16 *server_name,
1194                 [in,unique]  [string,charset(UTF16)] uint16 *computer_name,
1195                 [in,ref]     netr_Authenticator *credential,
1196                 [in,out,ref] netr_Authenticator *return_authenticator,
1197                 [in]         uint32 query_level,
1198                 [out,ref,switch_is(query_level)] netr_Capabilities *capabilities
1199                 );
1200
1201         /****************/
1202         /* Function 0x16 */
1203         [todo] WERROR netr_NETRLOGONSETSERVICEBITS();
1204
1205         /****************/
1206         /* Function 0x17 */
1207         WERROR netr_LogonGetTrustRid(
1208                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1209                 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1210                 [out,ref] uint32 *rid
1211         );
1212
1213         /****************/
1214         /* Function 0x18 */
1215         [todo] WERROR netr_NETRLOGONCOMPUTESERVERDIGEST();
1216
1217         /****************/
1218         /* Function 0x19 */
1219         [todo] WERROR netr_NETRLOGONCOMPUTECLIENTDIGEST();
1220
1221         /****************/
1222         /* Function 0x1a */
1223         [public] NTSTATUS netr_ServerAuthenticate3(
1224                 [in,unique]  [string,charset(UTF16)] uint16 *server_name,
1225                 [in]         [string,charset(UTF16)] uint16 *account_name,
1226                 [in]         netr_SchannelType secure_channel_type,
1227                 [in]         [string,charset(UTF16)] uint16 *computer_name,
1228                 [in,ref]     netr_Credential *credentials,
1229                 [out,ref]    netr_Credential *return_credentials,
1230                 [in,out,ref] netr_NegotiateFlags *negotiate_flags,
1231                 [out,ref]    uint32 *rid
1232                 );
1233
1234         /****************/
1235         /* Function 0x1b */
1236
1237         WERROR netr_DsRGetDCNameEx(
1238                 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1239                 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1240                 [in,unique] GUID *domain_guid,
1241                 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1242                 [in] netr_DsRGetDCName_flags flags,
1243                 [out,ref] netr_DsRGetDCNameInfo **info
1244                 );
1245
1246
1247         /****************/
1248         /* Function 0x1c */
1249         WERROR netr_DsRGetSiteName(
1250                 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1251                 [out,ref] [string,charset(UTF16)] uint16 **site
1252                 );
1253
1254         /****************/
1255         /* Function 0x1d */
1256         typedef [bitmap32bit] bitmap {
1257                 NETR_TRUST_FLAG_IN_FOREST = 0x00000001,
1258                 NETR_TRUST_FLAG_OUTBOUND  = 0x00000002,
1259                 NETR_TRUST_FLAG_TREEROOT  = 0x00000004,
1260                 NETR_TRUST_FLAG_PRIMARY   = 0x00000008,
1261                 NETR_TRUST_FLAG_NATIVE    = 0x00000010,
1262                 NETR_TRUST_FLAG_INBOUND   = 0x00000020,
1263                 NETR_TRUST_FLAG_MIT_KRB5  = 0x00000080,
1264                 NETR_TRUST_FLAG_AES       = 0x00000100
1265         } netr_TrustFlags;
1266
1267         typedef [bitmap32bit] bitmap {
1268                 NETR_WS_FLAG_HANDLES_INBOUND_TRUSTS = 0x00000001,
1269                 NETR_WS_FLAG_HANDLES_SPN_UPDATE     = 0x00000002
1270         } netr_WorkstationFlags;
1271
1272         typedef [bitmap16bit] bitmap {
1273                 NETR_VER_SUITE_BACKOFFICE               = 0x0004,
1274                 NETR_VER_SUITE_BLADE                    = 0x0400,
1275                 NETR_VER_SUITE_COMPUTE_SERVER           = 0x4000,
1276                 NETR_VER_SUITE_DATACENTER               = 0x0080,
1277                 NETR_VER_SUITE_ENTERPRISE               = 0x0002,
1278                 NETR_VER_SUITE_EMBEDDEDNT               = 0x0040,
1279                 NETR_VER_SUITE_PERSONAL                 = 0x0200,
1280                 NETR_VER_SUITE_SINGLEUSERTS             = 0x0100,
1281                 NETR_VER_SUITE_SMALLBUSINESS            = 0x0001,
1282                 NETR_VER_SUITE_SMALLBUSINESS_RESTRICTED = 0x0020,
1283                 NETR_VER_SUITE_STORAGE_SERVER           = 0x2000,
1284                 NETR_VER_SUITE_TERMINAL                 = 0x0010,
1285                 NETR_VER_SUITE_WH_SERVER                = 0x8000
1286         } netr_SuiteMask;
1287
1288         typedef [bitmap8bit] bitmap {
1289                 NETR_VER_NT_DOMAIN_CONTROLLER   = 0x02,
1290                 NETR_VER_NT_SERVER              = 0x03,
1291                 NETR_VER_NT_WORKSTATION         = 0x01
1292         } netr_ProductType;
1293
1294         typedef struct {
1295                 uint32 policy_size;
1296                 [size_is(policy_size)] uint8 *policy;
1297         } netr_LsaPolicyInformation;
1298
1299         typedef struct {
1300                 [value(284)] uint32 OSVersionInfoSize;
1301                 uint32 MajorVersion;
1302                 uint32 MinorVersion;
1303                 uint32 BuildNumber;
1304                 uint32 PlatformId;
1305                 [subcontext(0),subcontext_size(256)] nstring CSDVersion;
1306                 uint16 ServicePackMajor;
1307                 uint16 ServicePackMinor;
1308                 netr_SuiteMask SuiteMask;
1309                 netr_ProductType ProductType;
1310                 uint8 Reserved;
1311         } netr_OsVersionInfoEx;
1312
1313         typedef struct {
1314                 /* these first 3 values come from the fact windows
1315                    actually encodes this structure as a UNICODE_STRING
1316                    - see MS-NRPC section 2.2.1.3.9 */
1317                 /* 142 * 2 = 284 (length of structure "netr_OsVersionInfoEx") */
1318                 [value(142)] uint32 length;
1319                 [value(0)] uint32 dummy;
1320                 [value(142)] uint32 size;
1321                 netr_OsVersionInfoEx os;
1322         } netr_OsVersion;
1323
1324         typedef struct {
1325                 /* value is 284 when info != os, otherwise 0 (for length and
1326                    size) */
1327                 [value(os == NULL ? 0 : 284)] uint16 length;
1328                 [value(os == NULL ? 0 : 284)] uint16 size;
1329                 netr_OsVersion *os;
1330         } netr_OsVersionContainer;
1331
1332         typedef struct {
1333                 netr_LsaPolicyInformation lsa_policy;
1334                 [string,charset(UTF16)] uint16 *dns_hostname;
1335                 [string,charset(UTF16)] uint16 *sitename;
1336                 [string,charset(UTF16)] uint16 *dummy1;
1337                 [string,charset(UTF16)] uint16 *dummy2;
1338                 [string,charset(UTF16)] uint16 *dummy3;
1339                 [string,charset(UTF16)] uint16 *dummy4;
1340                 netr_OsVersionContainer os_version;
1341                 lsa_String os_name;
1342                 lsa_String dummy_string3;
1343                 lsa_String dummy_string4;
1344                 netr_WorkstationFlags workstation_flags;
1345                 kerb_EncTypes supported_enc_types;
1346                 uint32 dummy_long3;
1347                 uint32 dummy_long4;
1348         } netr_WorkstationInformation;
1349
1350         typedef union {
1351                 [case(1)] netr_WorkstationInformation *workstation_info;
1352                 [case(2)] netr_WorkstationInformation *lsa_policy_info;
1353         } netr_WorkstationInfo;
1354
1355         typedef struct {
1356                 /* these first 3 values come from the fact windows
1357                    actually encodes this structure as a UNICODE_STRING
1358                    - see MS-NRPC section 2.2.1.3.9 */
1359                 [value(8)] uint32 length;
1360                 [value(0)] uint32 dummy;
1361                 [value(8)] uint32 size;
1362                 netr_TrustFlags flags;
1363                 uint32 parent_index;
1364                 uint32 trust_type;
1365                 uint32 trust_attributes;
1366         } netr_trust_extension;
1367
1368         typedef struct {
1369                 uint16 length; /* value is 16 when info != NULL, otherwise 0 */
1370                 [value(length)] uint16 size;   /* value is 16 when info != NULL, otherwise 0 */
1371                 netr_trust_extension *info;
1372         } netr_trust_extension_container;
1373
1374         typedef struct {
1375                 lsa_StringLarge domainname;
1376                 lsa_StringLarge dns_domainname;
1377                 lsa_StringLarge dns_forestname;
1378                 GUID domain_guid;
1379                 dom_sid2 *domain_sid;
1380                 netr_trust_extension_container trust_extension;
1381                 lsa_StringLarge dummy_string2;
1382                 lsa_StringLarge dummy_string3;
1383                 lsa_StringLarge dummy_string4;
1384                 uint32 dummy_long1;
1385                 uint32 dummy_long2;
1386                 uint32 dummy_long3;
1387                 uint32 dummy_long4;
1388         } netr_OneDomainInfo;
1389
1390         typedef struct {
1391                 netr_OneDomainInfo primary_domain;
1392                 uint32 trusted_domain_count;
1393                 [size_is(trusted_domain_count)] netr_OneDomainInfo *trusted_domains;
1394                 netr_LsaPolicyInformation lsa_policy;
1395                 lsa_StringLarge dns_hostname;
1396                 lsa_StringLarge dummy_string2;
1397                 lsa_StringLarge dummy_string3;
1398                 lsa_StringLarge dummy_string4;
1399                 netr_WorkstationFlags workstation_flags;
1400                 kerb_EncTypes supported_enc_types;
1401                 uint32 dummy_long3;
1402                 uint32 dummy_long4;
1403         } netr_DomainInformation;
1404
1405         typedef union {
1406                 [case(1)] netr_DomainInformation *domain_info;
1407                 [case(2)] netr_LsaPolicyInformation *lsa_policy_info;
1408         } netr_DomainInfo;
1409
1410         NTSTATUS netr_LogonGetDomainInfo(
1411                 [in]         [string,charset(UTF16)] uint16 *server_name,
1412                 [in,unique]  [string,charset(UTF16)] uint16 *computer_name,
1413                 [in,ref]     netr_Authenticator *credential,
1414                 [in,out,ref] netr_Authenticator *return_authenticator,
1415                 [in]         uint32 level,
1416                 [in,ref,switch_is(level)] netr_WorkstationInfo *query,
1417                 [out,ref,switch_is(level)] netr_DomainInfo *info
1418                 );
1419
1420         /*****************/
1421         /* Function 0x1e */
1422
1423         /* [MS-NRPC] 2.2.1.3.8 NL_PASSWORD_VERSION */
1424
1425         /* someone's birthday ? */
1426         const int NETLOGON_PASSWORD_VERSION_NUMBER_PRESENT = 0x02231968;
1427
1428         typedef struct {
1429                 uint32 ReservedField;
1430                 uint32 PasswordVersionNumber;
1431                 uint32 PasswordVersionPresent;
1432         } NL_PASSWORD_VERSION;
1433
1434         typedef [flag(NDR_PAHEX)] struct {
1435                 uint8 data[512];
1436                 uint32 length;
1437         } netr_CryptPassword;
1438
1439         NTSTATUS netr_ServerPasswordSet2(
1440                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1441                 [in]  [string,charset(UTF16)] uint16 *account_name,
1442                 [in]  netr_SchannelType secure_channel_type,
1443                 [in]  [string,charset(UTF16)] uint16 *computer_name,
1444                 [in,ref] netr_Authenticator *credential,
1445                 [out,ref] netr_Authenticator *return_authenticator,
1446                 [in,ref] netr_CryptPassword *new_password
1447                 );
1448
1449         /****************/
1450         /* Function 0x1f */
1451         NTSTATUS netr_ServerPasswordGet(
1452                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1453                 [in]  [string,charset(UTF16)] uint16 *account_name,
1454                 [in]  netr_SchannelType secure_channel_type,
1455                 [in]  [string,charset(UTF16)] uint16 *computer_name,
1456                 [in,ref] netr_Authenticator *credential,
1457                 [out,ref] netr_Authenticator *return_authenticator,
1458                 [out,ref] samr_Password *password
1459                 );
1460
1461         /****************/
1462         /* Function 0x20 */
1463         [todo] WERROR netr_NETRLOGONSENDTOSAM();
1464
1465         /****************/
1466         /* Function 0x21 */
1467         typedef struct {
1468                 uint32 count;
1469                 [size_is(count)] lsa_String *sitename;
1470         } netr_DsRAddressToSitenamesWCtr;
1471
1472         typedef struct {
1473                 [size_is(size)] uint8 *buffer;
1474                 uint32 size;
1475         } netr_DsRAddress;
1476
1477         WERROR netr_DsRAddressToSitenamesW(
1478                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1479                 [in] [range(0,32000)] uint32 count,
1480                 [in] [size_is(count)] [ref] netr_DsRAddress *addresses,
1481                 [out] [ref] netr_DsRAddressToSitenamesWCtr **ctr
1482                 );
1483
1484         /****************/
1485         /* Function 0x22 */
1486         WERROR netr_DsRGetDCNameEx2(
1487                 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1488                 [in,unique] [string,charset(UTF16)] uint16 *client_account,
1489                 [in] samr_AcctFlags mask,
1490                 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1491                 [in,unique] GUID *domain_guid,
1492                 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1493                 [in] netr_DsRGetDCName_flags flags,
1494                 [out,ref] netr_DsRGetDCNameInfo **info
1495                 );
1496
1497         /****************/
1498         /* Function 0x23 */
1499         [todo] WERROR netr_NETRLOGONGETTIMESERVICEPARENTDOMAIN();
1500
1501         /****************/
1502         /* Function 0x24 */
1503
1504         typedef struct {
1505                 [string,charset(UTF16)] uint16                  *netbios_name;
1506                 [string,charset(UTF16)] uint16                  *dns_name;
1507                 netr_TrustFlags         trust_flags;
1508                 uint32                  parent_index;
1509                 lsa_TrustType           trust_type;
1510                 lsa_TrustAttributes     trust_attributes;
1511                 dom_sid2                *sid;
1512                 GUID                    guid;
1513         } netr_DomainTrust;
1514
1515         typedef struct {
1516                 uint32 count;
1517                 [size_is(count)] netr_DomainTrust *array;
1518         } netr_DomainTrustList;
1519
1520         WERROR netr_NetrEnumerateTrustedDomainsEx(
1521                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1522                 [out,ref] netr_DomainTrustList *dom_trust_list
1523         );
1524
1525         /****************/
1526         /* Function 0x25 */
1527         typedef struct {
1528                 uint32 count;
1529                 [size_is(count)] lsa_String *sitename;
1530                 [size_is(count)] lsa_String *subnetname;
1531         } netr_DsRAddressToSitenamesExWCtr;
1532
1533         WERROR netr_DsRAddressToSitenamesExW(
1534                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1535                 [in] [range(0,32000)] uint32 count,
1536                 [in] [size_is(count)] [ref] netr_DsRAddress *addresses,
1537                 [out] [ref] netr_DsRAddressToSitenamesExWCtr **ctr
1538                 );
1539
1540         /****************/
1541         /* Function 0x26 */
1542
1543         typedef struct {
1544                 uint32 num_sites;
1545                 [size_is(num_sites)] [unique] lsa_String *sites;
1546         } DcSitesCtr;
1547
1548         WERROR netr_DsrGetDcSiteCoverageW(
1549                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1550                 [out,ref] DcSitesCtr **ctr
1551                 );
1552
1553         /****************/
1554         /* Function 0x27 */
1555         NTSTATUS netr_LogonSamLogonEx(
1556                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1557                 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1558                 [in]  netr_LogonInfoClass logon_level,
1559                 [in,ref]  [switch_is(logon_level)] netr_LogonLevel *logon,
1560                 [in]  uint16 validation_level,
1561                 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
1562                 [out,ref] uint8 *authoritative,
1563                 [in,out,ref] uint32 *flags
1564                 );
1565
1566         /****************/
1567         /* Function 0x28 */
1568
1569         WERROR netr_DsrEnumerateDomainTrusts(
1570                 [in,unique]          [string,charset(UTF16)] uint16           *server_name,
1571                 [in]                 netr_TrustFlags  trust_flags,
1572                 [out,ref]            netr_DomainTrustList *trusts
1573                 );
1574
1575
1576         /****************/
1577         /* Function 0x29 */
1578         WERROR netr_DsrDeregisterDNSHostRecords(
1579                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1580                 [in,unique] [string,charset(UTF16)] uint16 *domain,
1581                 [in,unique] GUID *domain_guid,
1582                 [in,unique] GUID *dsa_guid,
1583                 [in,ref] [string,charset(UTF16)] uint16 *dns_host
1584                 );
1585
1586         /****************/
1587         /* Function 0x2a */
1588         NTSTATUS netr_ServerTrustPasswordsGet(
1589                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1590                 [in]  [string,charset(UTF16)] uint16 *account_name,
1591                 [in]  netr_SchannelType secure_channel_type,
1592                 [in]  [string,charset(UTF16)] uint16 *computer_name,
1593                 [in,ref] netr_Authenticator *credential,
1594                 [out,ref] netr_Authenticator *return_authenticator,
1595                 [out,ref] samr_Password *new_owf_password,
1596                 [out,ref] samr_Password *old_owf_password
1597         );
1598
1599         /****************/
1600         /* Function 0x2b */
1601
1602         const int DS_GFTI_UPDATE_TDO = 0x1;
1603
1604         WERROR netr_DsRGetForestTrustInformation(
1605                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1606                 [in,unique] [string,charset(UTF16)] uint16 *trusted_domain_name,
1607                 [in] uint32 flags,
1608                 [out,ref] lsa_ForestTrustInformation **forest_trust_info
1609                 );
1610
1611         /****************/
1612         /* Function 0x2c */
1613         NTSTATUS netr_GetForestTrustInformation(
1614                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1615                 [in,ref] [string,charset(UTF16)] uint16 *computer_name,
1616                 [in,ref] netr_Authenticator *credential,
1617                 [out,ref] netr_Authenticator *return_authenticator,
1618                 [in] uint32 flags,
1619                 [out,ref] lsa_ForestTrustInformation **forest_trust_info
1620                 );
1621
1622         /****************/
1623         /* Function 0x2d */
1624
1625         /* this is the ADS varient. I don't yet know what the "flags" are for */
1626         NTSTATUS netr_LogonSamLogonWithFlags(
1627                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1628                 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1629                 [in,unique] netr_Authenticator *credential,
1630                 [in,out,unique] netr_Authenticator *return_authenticator,
1631                 [in]  netr_LogonInfoClass logon_level,
1632                 [in,ref]  [switch_is(logon_level)] netr_LogonLevel *logon,
1633                 [in]  uint16 validation_level,
1634                 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
1635                 [out,ref] uint8 *authoritative,
1636                 [in,out,ref] uint32 *flags
1637                 );
1638
1639         /****************/
1640         /* Function 0x2e */
1641
1642         typedef struct {
1643                 uint32 count;
1644                 [size_is(count)] uint32 *data;
1645                 uint32 entry_count;
1646                 [size_is(count)] lsa_String *entries;
1647         } netr_TrustInfo;
1648
1649         NTSTATUS netr_ServerGetTrustInfo(
1650                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1651                 [in,ref] [string,charset(UTF16)] uint16 *account_name,
1652                 [in] netr_SchannelType secure_channel_type,
1653                 [in,ref] [string,charset(UTF16)] uint16 *computer_name,
1654                 [in,ref] netr_Authenticator *credential,
1655                 [out,ref] netr_Authenticator *return_authenticator,
1656                 [out,ref] samr_Password *new_owf_password,
1657                 [out,ref] samr_Password *old_owf_password,
1658                 [out,ref] netr_TrustInfo **trust_info
1659                 );
1660
1661         /****************/
1662         /* Function 0x2f */
1663
1664         NTSTATUS netr_Unused47(void);
1665
1666
1667         /****************/
1668         /* Function 0x30 */
1669
1670         typedef enum {
1671                 NlDnsLdapAtSite       = 22,
1672                 NlDnsGcAtSite         = 25,
1673                 NlDnsDsaCname         = 28,
1674                 NlDnsKdcAtSite        = 30,
1675                 NlDnsDcAtSite         = 32,
1676                 NlDnsRfc1510KdcAtSite = 34,
1677                 NlDnsGenericGcAtSite  = 36
1678         } netr_DnsType;
1679
1680         typedef enum {
1681                 NlDnsInfoTypeNone    = 0,
1682                 NlDnsDomainName      = 1,
1683                 NlDnsDomainNameAlias = 2,
1684                 NlDnsForestName      = 3,
1685                 NlDnsForestNameAlias = 4,
1686                 NlDnsNdncDomainName  = 5,
1687                 NlDnsRecordName      = 6
1688         } netr_DnsDomainInfoType;
1689
1690         typedef struct {
1691                 netr_DnsType type;
1692                 [string,charset(UTF16)] uint16 *dns_domain_info;
1693                 netr_DnsDomainInfoType dns_domain_info_type;
1694                 uint32 priority;
1695                 uint32 weight;
1696                 uint32 port;
1697                 boolean32 dns_register;
1698                 uint32 status;
1699         } NL_DNS_NAME_INFO;
1700
1701         typedef [public] struct {
1702                 uint32 count;
1703                 [size_is(count)] NL_DNS_NAME_INFO *names;
1704         } NL_DNS_NAME_INFO_ARRAY;
1705
1706         NTSTATUS netr_DsrUpdateReadOnlyServerDnsRecords(
1707                 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1708                 [in,ref] [string,charset(UTF16)] uint16 *computer_name,
1709                 [in, ref] netr_Authenticator *credential,
1710                 [out,ref]   netr_Authenticator *return_authenticator,
1711                 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1712                 [in] uint32 dns_ttl,
1713                 [in,out,ref] NL_DNS_NAME_INFO_ARRAY *dns_names
1714                 );
1715 }