4 uuid("e3514235-4b06-11d1-ab04-00c04fc2dcd2"),
6 endpoint("ncacn_np:[\\pipe\\lsass]","ncacn_np:[\\pipe\\protected_storage]","ncacn_ip_tcp:"),
7 helpstring("Active Directory Replication"),
8 pointer_default(unique)
14 typedef [bitmap32bit] bitmap {
15 DRSUAPI_SUPPORTED_EXTENSION_BASE = 0x00000001,
16 DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION = 0x00000002,
17 DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI = 0x00000004,
18 DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2 = 0x00000008,
19 DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS = 0x00000010,
20 DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1 = 0x00000020,
21 DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION = 0x00000040,
22 DRSUAPI_SUPPORTED_EXTENSION_00000080 = 0x00000080,
23 DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE = 0x00000100,
24 DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2 = 0x00000200,
25 DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION = 0x00000400,
26 DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2 = 0x00000800,
27 DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD= 0x00001000,
28 DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND = 0x00002000,
29 DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO = 0x00004000,
30 DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION = 0x00008000,
31 DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01 = 0x00010000,
32 DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP = 0x00020000,
33 DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY = 0x00040000,
34 DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3 = 0x00080000,
35 DRSUAPI_SUPPORTED_EXTENSION_00100000 = 0x00100000,
36 DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2 = 0x00200000,
37 DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6 = 0x00400000,
38 DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS = 0x00800000,
39 DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8 = 0x01000000,
40 DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5 = 0x02000000,
41 DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6 = 0x04000000,
43 * the following 3 have the same value
44 * repadmin.exe /bind says that
46 DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3 = 0x08000000,
47 DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7 = 0x08000000,
48 DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT = 0x08000000,
49 DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS = 0x10000000,
50 DRSUAPI_SUPPORTED_EXTENSION_20000000 = 0x20000000,
51 DRSUAPI_SUPPORTED_EXTENSION_40000000 = 0x40000000,
52 DRSUAPI_SUPPORTED_EXTENSION_80000000 = 0x80000000
53 } drsuapi_SupportedExtensions;
55 /* this is used by w2k */
57 drsuapi_SupportedExtensions supported_extensions;
60 } drsuapi_DsBindInfo24;
62 /* this is used by w2k3 */
64 drsuapi_SupportedExtensions supported_extensions;
68 } drsuapi_DsBindInfo28;
71 [flag(NDR_REMAINING)] DATA_BLOB info;
72 } drsuapi_DsBindInfoFallBack;
74 typedef [nodiscriminant] union {
75 [case(24)][subcontext(4)] drsuapi_DsBindInfo24 info24;
76 [case(28)][subcontext(4)] drsuapi_DsBindInfo28 info28;
77 [default][subcontext(4)] drsuapi_DsBindInfoFallBack FallBack;
80 /* the drsuapi_DsBindInfoCtr was this before
81 * typedef [flag(NDR_PAHEX)] struct {
82 * [range(1,10000)] uint32 length;
83 * [size_is(length)] uint8 data[];
84 * } drsuapi_DsBindInfo;
86 * but we don't want the caller to manually decode this blob,
87 * so we're doing it here
91 [range(1,10000)] uint32 length;
92 [switch_is(length)] drsuapi_DsBindInfo info;
93 } drsuapi_DsBindInfoCtr;
95 /* this is a magic guid you need to pass to DsBind to make drsuapi_DsWriteAccountSpn() work
97 * maybe the bind_guid could also be the invocation_id see drsuapi_DsReplicaConnection04
99 const string DRSUAPI_DS_BIND_GUID = "e24d201a-4fd6-11d1-a3da-0000f875ae0d";
101 WERROR drsuapi_DsBind(
102 [in] GUID *bind_guid,
103 [in,out] drsuapi_DsBindInfoCtr *bind_info,
104 [out,ref] policy_handle *bind_handle
109 WERROR drsuapi_DsUnbind(
110 [in,out,ref] policy_handle *bind_handle
115 typedef [flag(NDR_PAHEX)] struct {
120 [flag(STR_SIZE4|STR_CHARLEN|STR_CONFORMANT)] string nc_dn;
121 } drsuapi_DsReplicaSyncRequest1Info;
124 drsuapi_DsReplicaSyncRequest1Info *info;
128 } drsuapi_DsReplicaSyncRequest1;
131 [case(1)] drsuapi_DsReplicaSyncRequest1 req1;
132 } drsuapi_DsReplicaSyncRequest;
134 WERROR drsuapi_DsReplicaSync(
135 [in,ref] policy_handle *bind_handle,
137 [in,switch_is(level)] drsuapi_DsReplicaSyncRequest req
142 WERROR DRSUAPI_GET_NC_CHANGES();
146 WERROR DRSUAPI_UPDATE_REFS();
150 WERROR DRSUAPI_REPLICA_ADD();
154 WERROR DRSUAPI_REPLICA_DEL();
158 WERROR DRSUAPI_REPLICA_MODIFY();
162 WERROR DRSUAPI_VERIFY_NAMES();
166 WERROR DRSUAPI_GET_MEMBERSHIPS();
170 WERROR DRSUAPI_INTER_DOMAIN_MOVE();
174 WERROR DRSUAPI_GET_NT4_CHANGELOG();
178 typedef [v1_enum] enum {
179 DRSUAPI_DS_NAME_STATUS_OK = 0,
180 DRSUAPI_DS_NAME_STATUS_RESOLVE_ERROR = 1,
181 DRSUAPI_DS_NAME_STATUS_NOT_FOUND = 2,
182 DRSUAPI_DS_NAME_STATUS_NOT_UNIQUE = 3,
183 DRSUAPI_DS_NAME_STATUS_NO_MAPPING = 4,
184 DRSUAPI_DS_NAME_STATUS_DOMAIN_ONLY = 5,
185 DRSUAPI_DS_NAME_STATUS_NO_SYNTACTICAL_MAPPING = 6,
186 DRSUAPI_DS_NAME_STATUS_TRUST_REFERRAL = 7
187 } drsuapi_DsNameStatus;
189 typedef [v1_enum] enum {
190 DRSUAPI_DS_NAME_FLAG_NO_FLAGS = 0x0,
191 DRSUAPI_DS_NAME_FLAG_SYNTACTICAL_ONLY = 0x1,
192 DRSUAPI_DS_NAME_FLAG_EVAL_AT_DC = 0x2,
193 DRSUAPI_DS_NAME_FLAG_GCVERIFY = 0x4,
194 DRSUAPI_DS_NAME_FLAG_TRUST_REFERRAL = 0x8
195 } drsuapi_DsNameFlags;
197 typedef [v1_enum] enum {
198 DRSUAPI_DS_NAME_FORMAT_UKNOWN = 0,
199 DRSUAPI_DS_NAME_FORMAT_FQDN_1779 = 1,
200 DRSUAPI_DS_NAME_FORMAT_NT4_ACCOUNT = 2,
201 DRSUAPI_DS_NAME_FORMAT_DISPLAY = 3,
202 DRSUAPI_DS_NAME_FORMAT_GUID = 6,
203 DRSUAPI_DS_NAME_FORMAT_CANONICAL = 7,
204 DRSUAPI_DS_NAME_FORMAT_USER_PRINCIPAL = 8,
205 DRSUAPI_DS_NAME_FORMAT_CANONICAL_EX = 9,
206 DRSUAPI_DS_NAME_FORMAT_SERVICE_PRINCIPAL = 10,
207 DRSUAPI_DS_NAME_FORMAT_SID_OR_SID_HISTORY = 11,
208 DRSUAPI_DS_NAME_FORMAT_DNS_DOMAIN = 12
209 } drsuapi_DsNameFormat;
213 } drsuapi_DsNameString;
216 uint32 unknown1; /* 0x000004e4 */
217 uint32 unknown2; /* 0x00000407 */
218 drsuapi_DsNameFlags format_flags;
219 drsuapi_DsNameFormat format_offered;
220 drsuapi_DsNameFormat format_desired;
221 [range(1,10000)] uint32 count;
222 [size_is(count)] drsuapi_DsNameString *names;
223 } drsuapi_DsNameRequest1;
226 [case(1)] drsuapi_DsNameRequest1 req1;
227 } drsuapi_DsNameRequest;
230 drsuapi_DsNameStatus status;
231 unistr *dns_domain_name;
233 } drsuapi_DsNameInfo1;
237 [size_is(count)] drsuapi_DsNameInfo1 *array;
238 } drsuapi_DsNameCtr1;
241 [case(1)] drsuapi_DsNameCtr1 *ctr1;
244 WERROR drsuapi_DsCrackNames(
245 [in,ref] policy_handle *bind_handle,
246 [in, out] int32 level,
247 [in,switch_is(level)] drsuapi_DsNameRequest req,
248 [out,switch_is(level)] drsuapi_DsNameCtr ctr
253 typedef [v1_enum] enum {
254 DRSUAPI_DS_SPN_OPERATION_ADD = 0,
255 DRSUAPI_DS_SPN_OPERATION_REPLACE= 1,
256 DRSUAPI_DS_SPN_OPERATION_DELETE = 2
257 } drsuapi_DsSpnOperation;
260 drsuapi_DsSpnOperation operation;
263 [range(0,10000)] uint32 count;
264 [size_is(count)] drsuapi_DsNameString *spn_names;
265 } drsuapi_DsWriteAccountSpnRequest1;
268 [case(1)] drsuapi_DsWriteAccountSpnRequest1 req1;
269 } drsuapi_DsWriteAccountSpnRequest;
273 } drsuapi_DsWriteAccountSpnResult1;
276 [case(1)] drsuapi_DsWriteAccountSpnResult1 res1;
277 } drsuapi_DsWriteAccountSpnResult;
279 WERROR drsuapi_DsWriteAccountSpn(
280 [in,ref] policy_handle *bind_handle,
281 [in, out] int32 level,
282 [in,switch_is(level)] drsuapi_DsWriteAccountSpnRequest req,
283 [out,switch_is(level)] drsuapi_DsWriteAccountSpnResult res
288 WERROR DRSUAPI_REMOVE_DS_SERVER();
292 WERROR DRSUAPI_REMOVE_DS_DOMAIN();
297 unistr *domain_name; /* netbios or dns */
298 int32 level; /* specifies the switch level for the request */
299 } drsuapi_DsGetDCInfoRequest1;
302 [case(1)] drsuapi_DsGetDCInfoRequest1 req1;
303 } drsuapi_DsGetDCInfoRequest;
306 unistr *netbios_name;
313 } drsuapi_DsGetDCInfo1;
316 [range(0,10000)] uint32 count;
317 [size_is(count)] drsuapi_DsGetDCInfo1 *array;
318 } drsuapi_DsGetDCInfoCtr1;
321 unistr *netbios_name;
335 } drsuapi_DsGetDCInfo2;
338 [range(0,10000)] uint32 count;
339 [size_is(count)] drsuapi_DsGetDCInfo2 *array;
340 } drsuapi_DsGetDCInfoCtr2;
349 unistr *server_nt4_account;
350 } drsuapi_DsGetDCInfo01;
353 [range(0,10000)] uint32 count;
354 [size_is(count)] drsuapi_DsGetDCInfo01 *array;
355 } drsuapi_DsGetDCInfoCtr01;
358 [case(1)] drsuapi_DsGetDCInfoCtr1 ctr1;
359 [case(2)] drsuapi_DsGetDCInfoCtr2 ctr2;
360 [case(-1)] drsuapi_DsGetDCInfoCtr01 ctr01;
361 } drsuapi_DsGetDCInfoCtr;
363 WERROR drsuapi_DsGetDomainControllerInfo(
364 [in,ref] policy_handle *bind_handle,
365 [in, out] int32 level,
366 [in,switch_is(level)] drsuapi_DsGetDCInfoRequest req,
367 [out,switch_is(level)] drsuapi_DsGetDCInfoCtr ctr
372 WERROR DRSUAPI_ADD_ENTRY();
376 WERROR DRSUAPI_EXECUTE_KCC();
380 typedef [v1_enum] enum {
381 DRSUAPI_DS_REPLICA_GET_INFO = 1,
382 DRSUAPI_DS_REPLICA_GET_INFO2 = 2
383 } drsuapi_DsReplicaGetInfoLevel;
385 typedef [v1_enum] enum {
386 DRSUAPI_DS_REPLICA_INFO_NEIGHBORS = 0,
387 DRSUAPI_DS_REPLICA_INFO_CURSORS = 1,
388 DRSUAPI_DS_REPLICA_INFO_OBJ_METADATA = 2,
389 DRSUAPI_DS_REPLICA_INFO_KCC_DSA_CONNECT_FAILURES = 3,
390 DRSUAPI_DS_REPLICA_INFO_KCC_DSA_LINK_FAILURES = 4,
391 DRSUAPI_DS_REPLICA_INFO_PENDING_OPS = 5,
392 DRSUAPI_DS_REPLICA_INFO_ATTRIBUTE_VALUE_METADATA = 6,
393 DRSUAPI_DS_REPLICA_INFO_CURSORS2 = 7,
394 DRSUAPI_DS_REPLICA_INFO_CURSORS3 = 8,
395 DRSUAPI_DS_REPLICA_INFO_OBJ_METADATA2 = 9,
396 DRSUAPI_DS_REPLICA_INFO_ATTRIBUTE_VALUE_METADATA2 = 10,
397 DRSUAPI_DS_REPLICA_INFO_NEIGHBORS02 = -2,
398 DRSUAPI_DS_REPLICA_INFO_CONNECTIONS04 = -4,
399 DRSUAPI_DS_REPLICA_INFO_CURSURS05 = -5,
400 DRSUAPI_DS_REPLICA_INFO_06 = -6
401 } drsuapi_DsReplicaInfoType;
404 drsuapi_DsReplicaInfoType info_type;
407 } drsuapi_DsReplicaGetInfoRequest1;
410 drsuapi_DsReplicaInfoType info_type;
417 } drsuapi_DsReplicaGetInfoRequest2;
420 [case(DRSUAPI_DS_REPLICA_GET_INFO)] drsuapi_DsReplicaGetInfoRequest1 req1;
421 [case(DRSUAPI_DS_REPLICA_GET_INFO2)] drsuapi_DsReplicaGetInfoRequest2 req2;
422 } drsuapi_DsReplicaGetInfoRequest;
425 unistr *naming_context_dn;
426 unistr *source_dsa_obj_dn;
427 unistr *source_dsa_address;
428 unistr *transport_obj_dn;
429 uint32 replica_flags;
431 GUID naming_context_obj_guid;
432 GUID source_dsa_obj_guid;
433 GUID source_dsa_invocation_id;
434 GUID transport_obj_guid;
435 HYPER_T tmp_highest_usn;
439 WERROR result_last_attempt;
440 uint32 consecutive_sync_failures;
441 } drsuapi_DsReplicaNeighbour;
446 [size_is(count)] drsuapi_DsReplicaNeighbour array[];
447 } drsuapi_DsReplicaNeighbourCtr;
450 GUID source_dsa_invocation_id;
452 } drsuapi_DsReplicaCoursor;
457 [size_is(count)] drsuapi_DsReplicaCoursor array[];
458 } drsuapi_DsReplicaCoursorCtr;
461 unistr *attribute_name;
463 NTTIME originating_last_changed;
464 GUID originating_dsa_invocation_id;
465 HYPER_T originating_usn;
467 } drsuapi_DsReplicaObjMetaData;
472 [size_is(count)] drsuapi_DsReplicaObjMetaData array[];
473 } drsuapi_DsReplicaObjMetaDataCtr;
478 NTTIME first_failure;
481 } drsuapi_DsReplicaKccDsaFailure;
486 [size_is(count)] drsuapi_DsReplicaKccDsaFailure array[];
487 } drsuapi_DsReplicaKccDsaFailuresCtr;
490 NTTIME operation_start;
491 uint32 serial_num; /* unique till reboot */
493 uint16 operation_type;
494 uint32 options_flags;
496 unistr *remote_dsa_obj_dn;
497 unistr *remote_dsa_address;
499 GUID remote_dsa_obj_guid;
500 } drsuapi_DsReplicaOp;
505 [size_is(count)] drsuapi_DsReplicaOp array[];
506 } drsuapi_DsReplicaOpCtr;
509 unistr *attribute_name;
512 [size_is(value_length)] uint8 *value;
516 NTTIME originating_last_changed;
517 GUID originating_dsa_invocation_id;
518 HYPER_T originating_usn;
520 } drsuapi_DsReplicaAttrValMetaData;
524 int32 enumeration_context;
525 [size_is(count)] drsuapi_DsReplicaAttrValMetaData array[];
526 } drsuapi_DsReplicaAttrValMetaDataCtr;
529 GUID source_dsa_invocation_id;
531 NTTIME last_sync_success;
532 } drsuapi_DsReplicaCoursor2;
536 int32 enumeration_context;
537 [size_is(count)] drsuapi_DsReplicaCoursor2 array[];
538 } drsuapi_DsReplicaCoursor2Ctr;
541 GUID source_dsa_invocation_id;
543 NTTIME last_sync_success;
544 unistr *source_dsa_obj_dn;
545 } drsuapi_DsReplicaCoursor3;
549 int32 enumeration_context;
550 [size_is(count)] drsuapi_DsReplicaCoursor3 array[];
551 } drsuapi_DsReplicaCoursor3Ctr;
554 unistr *attribute_name;
556 NTTIME originating_last_changed;
557 GUID originating_dsa_invocation_id;
558 HYPER_T originating_usn;
560 unistr *originating_dsa_obj_dn;
561 } drsuapi_DsReplicaObjMetaData2;
565 int32 enumeration_context;
566 [size_is(count)] drsuapi_DsReplicaObjMetaData2 array[];
567 } drsuapi_DsReplicaObjMetaData2Ctr;
570 unistr *attribute_name;
573 [size_is(value_length)] uint8 *value;
577 NTTIME originating_last_changed;
578 GUID originating_dsa_invocation_id;
579 HYPER_T originating_usn;
581 unistr *originating_dsa_obj_dn;
582 } drsuapi_DsReplicaAttrValMetaData2;
586 int32 enumeration_context;
587 [size_is(count)] drsuapi_DsReplicaAttrValMetaData2 array[];
588 } drsuapi_DsReplicaAttrValMetaData2Ctr;
591 HYPER_T u1; /* session number? */
595 NTTIME_1sec bind_time;
596 uint32 u4; /* flags? */
598 } drsuapi_DsReplicaConnection04;
601 [range(0,10000)] uint32 count;
603 [size_is(count)] drsuapi_DsReplicaConnection04 array[];
604 } drsuapi_DsReplicaConnection04Ctr;
609 [range(0,0x100000)] uint32 count;
611 [size_is(count)] drsuapi_DsReplicaCoursor array[];
612 } drsuapi_DsReplicaCoursor05Ctr;
623 } drsuapi_DsReplica06;
626 [range(0,256)] uint32 count;
628 [size_is(count)] drsuapi_DsReplica06 array[];
629 } drsuapi_DsReplica06Ctr;
632 [case(DRSUAPI_DS_REPLICA_INFO_NEIGHBORS)] drsuapi_DsReplicaNeighbourCtr *neighbours;
633 [case(DRSUAPI_DS_REPLICA_INFO_CURSORS)] drsuapi_DsReplicaCoursorCtr *coursors;
634 [case(DRSUAPI_DS_REPLICA_INFO_OBJ_METADATA)] drsuapi_DsReplicaObjMetaDataCtr *objmetadata;
635 [case(DRSUAPI_DS_REPLICA_INFO_KCC_DSA_CONNECT_FAILURES)] drsuapi_DsReplicaKccDsaFailuresCtr *connectfailures;
636 [case(DRSUAPI_DS_REPLICA_INFO_KCC_DSA_LINK_FAILURES)] drsuapi_DsReplicaKccDsaFailuresCtr *linkfailures;
637 [case(DRSUAPI_DS_REPLICA_INFO_PENDING_OPS)] drsuapi_DsReplicaOpCtr *pendingops;
638 [case(DRSUAPI_DS_REPLICA_INFO_ATTRIBUTE_VALUE_METADATA)] drsuapi_DsReplicaAttrValMetaDataCtr *attrvalmetadata;
639 [case(DRSUAPI_DS_REPLICA_INFO_CURSORS2)] drsuapi_DsReplicaCoursor2Ctr *coursors2;
640 [case(DRSUAPI_DS_REPLICA_INFO_CURSORS3)] drsuapi_DsReplicaCoursor3Ctr *coursors3;
641 [case(DRSUAPI_DS_REPLICA_INFO_OBJ_METADATA2)] drsuapi_DsReplicaObjMetaData2Ctr *objmetadata2;
642 [case(DRSUAPI_DS_REPLICA_INFO_ATTRIBUTE_VALUE_METADATA2)] drsuapi_DsReplicaAttrValMetaData2Ctr *attrvalmetadata2;
643 [case(DRSUAPI_DS_REPLICA_INFO_NEIGHBORS02)] drsuapi_DsReplicaNeighbourCtr *neighbours02;
644 [case(DRSUAPI_DS_REPLICA_INFO_CONNECTIONS04)] drsuapi_DsReplicaConnection04Ctr *connections04;
645 [case(DRSUAPI_DS_REPLICA_INFO_CURSURS05)] drsuapi_DsReplicaCoursor05Ctr *coursors05;
646 [case(DRSUAPI_DS_REPLICA_INFO_06)] drsuapi_DsReplica06Ctr *i06;
647 } drsuapi_DsReplicaInfo;
649 WERROR drsuapi_DsReplicaGetInfo(
650 [in,ref] policy_handle *bind_handle,
651 [in] drsuapi_DsReplicaGetInfoLevel level,
652 [in,switch_is(level)] drsuapi_DsReplicaGetInfoRequest req,
653 [out] drsuapi_DsReplicaInfoType info_type,
654 [out,switch_is(info_type)] drsuapi_DsReplicaInfo info
659 WERROR DRSUAPI_ADD_SID_HISTORY();
663 WERROR DRSUAPI_GET_MEMBERSHIPS2();
667 WERROR DRSUAPI_REPLICA_VERIFY_OBJECTS();
671 WERROR DRSUAPI_GET_OBJECT_EXISTENCE();
675 WERROR DRSUAPI_QUERY_SITES_BY_COST();