4 lsa interface definition
7 [ uuid("12345778-1234-abcd-ef00-0123456789ab"),
9 endpoint("ncacn_np:[\\pipe\\lsarpc]","ncacn_np:[\\pipe\\lsass]", "ncacn_ip_tcp:"),
10 pointer_default(unique),
11 helpstring("Local Server Authentication(?)"),
18 [in,out,ref] policy_handle *handle
25 [in,ref] policy_handle *handle
33 [value(2*strlen_m(r->string))] uint16 length;
34 [value(r->length)] uint16 size;
35 unistr_noterm *string;
50 [size_is(count)] lsa_PrivEntry *privs;
53 NTSTATUS lsa_EnumPrivs (
54 [in,ref] policy_handle *handle,
55 [in,out,ref] uint32 *resume_handle,
56 [in] uint32 max_count,
57 [out,ref] lsa_PrivArray *privs
63 NTSTATUS lsa_QuerySecurity (
64 [in,ref] policy_handle *handle,
66 [out] sec_desc_buf *sdbuf
72 NTSTATUS lsa_SetSecObj ();
77 NTSTATUS lsa_ChangePassword ();
83 uint32 len; /* ignored */
84 uint16 impersonation_level;
90 uint32 len; /* ignored */
94 security_descriptor *sec_desc;
96 } lsa_ObjectAttribute;
98 /* notice the screwup with the system_name - thats why MS created
100 NTSTATUS lsa_OpenPolicy (
101 [in] uint16 *system_name,
102 [in,ref] lsa_ObjectAttribute *attr,
103 [in] uint32 access_mask,
104 [out,ref] policy_handle *handle
115 NTTIME retention_time;
116 uint8 shutdown_in_progress;
117 NTTIME time_to_shutdown;
118 uint32 next_audit_record;
123 uint32 auditing_mode;
124 [size_is(count)] uint32 *settings;
126 } lsa_AuditEventsInfo;
138 uint16 unknown; /* an midl padding bug? */
145 } lsa_ReplicaSourceInfo;
149 uint32 non_paged_pool;
154 } lsa_DefaultQuotaInfo;
158 NTTIME db_create_time;
159 } lsa_ModificationInfo;
162 uint8 shutdown_on_full;
163 } lsa_AuditFullSetInfo;
166 uint16 unknown; /* an midl padding bug? */
167 uint8 shutdown_on_full;
169 } lsa_AuditFullQueryInfo;
173 lsa_String dns_domain;
174 lsa_String dns_forest;
180 LSA_POLICY_INFO_AUDIT_LOG=1,
181 LSA_POLICY_INFO_AUDIT_EVENTS=2,
182 LSA_POLICY_INFO_DOMAIN=3,
183 LSA_POLICY_INFO_PD=4,
184 LSA_POLICY_INFO_ACCOUNT_DOMAIN=5,
185 LSA_POLICY_INFO_ROLE=6,
186 LSA_POLICY_INFO_REPLICA=7,
187 LSA_POLICY_INFO_QUOTA=8,
188 LSA_POLICY_INFO_DB=9,
189 LSA_POLICY_INFO_AUDIT_FULL_SET=10,
190 LSA_POLICY_INFO_AUDIT_FULL_QUERY=11,
191 LSA_POLICY_INFO_DNS=12
195 [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log;
196 [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events;
197 [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain;
198 [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd;
199 [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain;
200 [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role;
201 [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica;
202 [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota;
203 [case(LSA_POLICY_INFO_DB)] lsa_ModificationInfo db;
204 [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset;
205 [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery;
206 [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns;
207 } lsa_PolicyInformation;
209 NTSTATUS lsa_QueryInfoPolicy (
210 [in,ref] policy_handle *handle,
212 [out,switch_is(level)] lsa_PolicyInformation *info
217 NTSTATUS lsa_SetInfoPolicy ();
221 NTSTATUS lsa_ClearAuditLog ();
225 NTSTATUS lsa_CreateAccount (
226 [in,ref] policy_handle *handle,
227 [in,ref] dom_sid2 *sid,
228 [in] uint32 access_mask,
229 [out,ref] policy_handle *acct_handle
238 typedef [public] struct {
239 [range(0,1000)] uint32 num_sids;
240 [size_is(num_sids)] lsa_SidPtr *sids;
243 NTSTATUS lsa_EnumAccounts (
244 [in,ref] policy_handle *handle,
245 [in,out,ref] uint32 *resume_handle,
246 [in,range(0,1000)] uint32 num_entries,
247 [out,ref] lsa_SidArray *sids
251 /*************************************************/
257 } lsa_TrustInformation;
259 NTSTATUS lsa_CreateTrustedDomain(
260 [in,ref] policy_handle *handle,
261 [in,ref] lsa_TrustInformation *info,
262 [in] uint32 access_mask,
263 [out,ref] policy_handle *dom_handle
273 } lsa_DomainInformation;
277 [size_is(count)] lsa_DomainInformation *domains;
280 NTSTATUS lsa_EnumTrustDom (
281 [in,ref] policy_handle *handle,
282 [in,out,ref] uint32 *resume_handle,
283 [in,range(0,1000)] uint32 num_entries,
284 [out,ref] lsa_DomainList *domains
298 [range(0,1000)] uint32 count;
299 [size_is(count)] lsa_TranslatedSid *sids;
303 [range(0,1000)] uint32 count;
304 [size_is(count)] lsa_TrustInformation *domains;
308 NTSTATUS lsa_LookupNames (
309 [in,ref] policy_handle *handle,
310 [in,range(0,1000)] uint32 num_names,
311 [in,ref,size_is(num_names)] lsa_String *names,
312 [out] lsa_RefDomainList *domains,
313 [in,out,ref] lsa_TransSidArray *sids,
315 [in,out,ref] uint32 *count
326 } lsa_TranslatedName;
329 [range(0,1000)] uint32 count;
330 [size_is(count)] lsa_TranslatedName *names;
331 } lsa_TransNameArray;
333 NTSTATUS lsa_LookupSids (
334 [in,ref] policy_handle *handle,
335 [in,ref] lsa_SidArray *sids,
336 [out] lsa_RefDomainList *domains,
337 [in,out,ref] lsa_TransNameArray *names,
339 [in,out,ref] uint32 *count
344 NTSTATUS lsa_CreateSecret(
345 [in,ref] policy_handle *handle,
346 [in] lsa_String name,
347 [in] uint32 access_mask,
348 [out,ref] policy_handle *sec_handle
352 /*****************************************/
354 NTSTATUS lsa_OpenAccount (
355 [in,ref] policy_handle *handle,
356 [in,ref] dom_sid2 *sid,
357 [in] uint32 access_mask,
358 [out,ref] policy_handle *acct_handle
362 /****************************************/
373 [size_is(count)] lsa_LUIDAttribute set[*];
376 NTSTATUS lsa_EnumPrivsAccount (
377 [in,ref] policy_handle *handle,
378 [out] lsa_PrivilegeSet *privs
383 NTSTATUS lsa_AddPrivilegesToAccount();
386 NTSTATUS lsa_RemovePrivilegesFromAccount();
389 NTSTATUS lsa_GetQuotasForAccount();
392 NTSTATUS lsa_SetQuotasForAccount();
395 NTSTATUS lsa_GetSystemAccessAccount();
397 NTSTATUS lsa_SetSystemAccessAccount();
400 NTSTATUS lsa_OpenTrustedDomain(
401 [in,ref] policy_handle *handle,
402 [in,ref] dom_sid2 *sid,
403 [in] uint32 access_mask,
404 [out,ref] policy_handle *trustdom_handle
407 typedef [flag(NDR_PAHEX)] struct {
410 [size_is(size),length_is(length)] uint8 *data;
413 typedef [flag(NDR_PAHEX)] struct {
415 [size_is(size)] uint8 *data;
419 LSA_TRUSTED_DOMAIN_INFO_NAME=1,
420 LSA_TRUSTED_DOMAIN_INFO_2=2,
421 LSA_TRUSTED_DOMAIN_INFO_FLAGS=3,
422 LSA_TRUSTED_DOMAIN_INFO_PASSWORD=4,
423 LSA_TRUSTED_DOMAIN_INFO_5=5,
424 LSA_TRUSTED_DOMAIN_INFO_INFO_EX=6,
425 LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO=7,
426 LSA_TRUSTED_DOMAIN_INFO_FULL_INFO=8,
427 LSA_TRUSTED_DOMAIN_INFO_INFO_ALL=12
428 } lsa_TrustDomInfoEnum;
431 lsa_String netbios_name;
432 } lsa_TrustDomainInfoName;
436 } lsa_TrustDomainInfoFlags;
439 lsa_DATA_BUF *password;
440 lsa_DATA_BUF *old_password;
441 } lsa_TrustDomainInfoPassword;
444 lsa_String netbios_name;
446 } lsa_TrustDomainInfo5;
449 lsa_String domain_name;
450 lsa_String netbios_name;
455 } lsa_TrustDomainInfoInfoEx;
461 } lsa_TrustDomainInfoBuffer;
465 lsa_TrustDomainInfoBuffer *buff1;
466 lsa_TrustDomainInfoBuffer *buff2;
468 lsa_TrustDomainInfoBuffer *buff3;
469 lsa_TrustDomainInfoBuffer *buff4;
470 } lsa_TrustDomainInfoAuthInfo;
473 lsa_TrustDomainInfoInfoEx info_ex;
474 lsa_TrustDomainInfoFlags flags;
475 lsa_TrustDomainInfoAuthInfo auth_info;
476 } lsa_TrustDomainInfoFullInfo;
479 lsa_TrustDomainInfoInfoEx info_ex;
481 } lsa_TrustDomainInfo11;
484 lsa_TrustDomainInfoInfoEx info_ex;
486 lsa_TrustDomainInfoFlags flags;
487 lsa_TrustDomainInfoAuthInfo auth_info;
488 } lsa_TrustDomainInfoInfoAll;
491 [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name;
492 [case(LSA_TRUSTED_DOMAIN_INFO_FLAGS)] lsa_TrustDomainInfoFlags flags;
493 [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password;
494 [case(LSA_TRUSTED_DOMAIN_INFO_5)] lsa_TrustDomainInfo5 info5;
495 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex;
496 [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info;
497 [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info;
498 [case(11)] lsa_TrustDomainInfo11 info11;
499 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_ALL)] lsa_TrustDomainInfoInfoAll info_all;
500 } lsa_TrustedDomainInfo;
503 NTSTATUS lsa_QueryTrustedDomainInfo(
504 [in,ref] policy_handle *trustdom_handle,
506 [out,switch_is(level)] lsa_TrustedDomainInfo *info
510 NTSTATUS lsa_SetInformationTrustedDomain();
513 NTSTATUS lsa_OpenSecret(
514 [in,ref] policy_handle *handle,
515 [in] lsa_String name,
516 [in] uint32 access_mask,
517 [out,ref] policy_handle *sec_handle
522 NTSTATUS lsa_SetSecret(
523 [in,ref] policy_handle *handle,
524 [in] lsa_DATA_BUF *new_val,
525 [in] lsa_DATA_BUF *old_val
533 NTSTATUS lsa_QuerySecret (
534 [in,ref] policy_handle *handle,
535 [in,out] lsa_DATA_BUF_PTR *new_val,
536 [in,out] NTTIME *new_mtime,
537 [in,out] lsa_DATA_BUF_PTR *old_val,
538 [in,out] NTTIME *old_mtime
542 NTSTATUS lsa_LookupPrivValue(
543 [in,ref] policy_handle *handle,
544 [in,ref] lsa_String *name,
545 [out,ref] lsa_LUID *luid
550 NTSTATUS lsa_LookupPrivName (
551 [in,ref] policy_handle *handle,
552 [in,ref] lsa_LUID *luid,
553 [out] lsa_String *name
557 /*******************/
559 NTSTATUS lsa_LookupPrivDisplayName (
560 [in,ref] policy_handle *handle,
561 [in,ref] lsa_String *name,
562 [out] lsa_String *disp_name,
563 /* see http://www.microsoft.com/globaldev/nlsweb/ for
564 language definitions */
565 [in,out,ref] uint16 *language_id,
570 NTSTATUS lsa_DeleteObject();
573 /*******************/
575 NTSTATUS lsa_EnumAccountsWithUserRight (
576 [in,ref] policy_handle *handle,
577 [in] lsa_String *name,
578 [out,ref] lsa_SidArray *sids
584 } lsa_RightAttribute;
588 [size_is(count)] lsa_String *names;
591 NTSTATUS lsa_EnumAccountRights (
592 [in,ref] policy_handle *handle,
593 [in,ref] dom_sid2 *sid,
594 [out,ref] lsa_RightSet *rights
598 /**********************/
600 NTSTATUS lsa_AddAccountRights (
601 [in,ref] policy_handle *handle,
602 [in,ref] dom_sid2 *sid,
603 [in,ref] lsa_RightSet *rights
606 /**********************/
608 NTSTATUS lsa_RemoveAccountRights (
609 [in,ref] policy_handle *handle,
610 [in,ref] dom_sid2 *sid,
612 [in,ref] lsa_RightSet *rights
616 NTSTATUS lsa_QueryTrustedDomainInfoBySid(
617 [in,ref] policy_handle *handle,
618 [in,ref] dom_sid2 *dom_sid,
620 [out,switch_is(level)] lsa_TrustedDomainInfo *info
624 NTSTATUS lsa_SetTrustDomainInfo();
626 NTSTATUS lsa_DeleteTrustDomain();
628 NTSTATUS lsa_StorePrivateData();
630 NTSTATUS lsa_RetrievePrivateData();
633 /**********************/
635 NTSTATUS lsa_OpenPolicy2 (
636 [in] unistr *system_name,
637 [in,ref] lsa_ObjectAttribute *attr,
638 [in] uint32 access_mask,
639 [out,ref] policy_handle *handle
644 NTSTATUS lsa_GetUserName();
646 /**********************/
649 NTSTATUS lsa_QueryInfoPolicy2(
650 [in,ref] policy_handle *handle,
652 [out,switch_is(level)] lsa_PolicyInformation *info
656 NTSTATUS lsa_SetInfoPolicy2();
658 /**********************/
660 NTSTATUS lsa_QueryTrustedDomainInfoByName(
661 [in,ref] policy_handle *handle,
662 [in] lsa_String trusted_domain,
664 [out,switch_is(level)] lsa_TrustedDomainInfo *info
668 NTSTATUS lsa_SetTrustedDomainInfoByName();
671 NTSTATUS lsa_EnumTrustedDomainsEx();
674 NTSTATUS lsa_CreateTrustedDomainEx();
677 NTSTATUS lsa_CloseTrustedDomainEx();
680 NTSTATUS lsa_QueryDomainInformationPolicy();
683 NTSTATUS lsa_SetDomInfoPolicy();
685 /**********************/
687 NTSTATUS lsa_OpenTrustedDomainByName(
688 [in,ref] policy_handle *handle,
689 [in] lsa_String name,
690 [in] uint32 access_mask,
691 [out,ref] policy_handle *trustdom_handle
695 NTSTATUS lsa_TestCall();
697 /**********************/
705 } lsa_TranslatedName2;
708 [range(0,1000)] uint32 count;
709 [size_is(count)] lsa_TranslatedName2 *names;
710 } lsa_TransNameArray2;
712 NTSTATUS lsa_LookupSids2(
713 [in,ref] policy_handle *handle,
714 [in,ref] lsa_SidArray *sids,
715 [out] lsa_RefDomainList *domains,
716 [in,out,ref] lsa_TransNameArray2 *names,
718 [in,out,ref] uint32 *count,
719 [in] uint32 unknown1,
723 /**********************/
731 } lsa_TranslatedSid2;
734 [range(0,1000)] uint32 count;
735 [size_is(count)] lsa_TranslatedSid2 *sids;
736 } lsa_TransSidArray2;
738 NTSTATUS lsa_LookupNames2 (
739 [in,ref] policy_handle *handle,
740 [in,range(0,1000)] uint32 num_names,
741 [in,ref,size_is(num_names)] lsa_String *names,
742 [out] lsa_RefDomainList *domains,
743 [in,out,ref] lsa_TransSidArray2 *sids,
745 [in,out,ref] uint32 *count,
746 [in] uint32 unknown1,
751 NTSTATUS lsa_CreateTrustedDomainEx2();