4 lsa interface definition
7 [ uuid("12345778-1234-abcd-ef00-0123456789ab"),
9 endpoint("ncacn_np:[\\pipe\\lsarpc]","ncacn_np:[\\pipe\\lsass]", "ncacn_ip_tcp:"),
10 pointer_default(unique),
11 helpstring("Local Server Authentication(?)"),
18 [in,out,ref] policy_handle *handle
25 [in,ref] policy_handle *handle
33 [value(2*strlen_m(r->string))] uint16 length;
34 [value(r->length)] uint16 size;
35 unistr_noterm *string;
46 [size_is(count)] lsa_PrivEntry *privs;
49 NTSTATUS lsa_EnumPrivs (
50 [in,ref] policy_handle *handle,
51 [in,out,ref] uint32 *resume_handle,
52 [in] uint32 max_count,
53 [out,ref] lsa_PrivArray *privs
59 NTSTATUS lsa_QuerySecurity (
60 [in,ref] policy_handle *handle,
62 [out] sec_desc_buf *sdbuf
68 NTSTATUS lsa_SetSecObj ();
73 NTSTATUS lsa_ChangePassword ();
79 uint32 len; /* ignored */
80 uint16 impersonation_level;
86 uint32 len; /* ignored */
90 security_descriptor *sec_desc;
92 } lsa_ObjectAttribute;
94 /* notice the screwup with the system_name - thats why MS created
96 NTSTATUS lsa_OpenPolicy (
97 [in] uint16 *system_name,
98 [in,ref] lsa_ObjectAttribute *attr,
99 [in] uint32 access_mask,
100 [out,ref] policy_handle *handle
111 NTTIME retention_time;
112 uint8 shutdown_in_progress;
113 NTTIME time_to_shutdown;
114 uint32 next_audit_record;
119 uint32 auditing_mode;
120 [size_is(count)] uint32 *settings;
122 } lsa_AuditEventsInfo;
134 uint16 unknown; /* an midl padding bug? */
141 } lsa_ReplicaSourceInfo;
145 uint32 non_paged_pool;
150 } lsa_DefaultQuotaInfo;
154 NTTIME db_create_time;
155 } lsa_ModificationInfo;
158 uint8 shutdown_on_full;
159 } lsa_AuditFullSetInfo;
162 uint16 unknown; /* an midl padding bug? */
163 uint8 shutdown_on_full;
165 } lsa_AuditFullQueryInfo;
169 lsa_String dns_domain;
170 lsa_String dns_forest;
176 LSA_POLICY_INFO_AUDIT_LOG=1,
177 LSA_POLICY_INFO_AUDIT_EVENTS=2,
178 LSA_POLICY_INFO_DOMAIN=3,
179 LSA_POLICY_INFO_PD=4,
180 LSA_POLICY_INFO_ACCOUNT_DOMAIN=5,
181 LSA_POLICY_INFO_ROLE=6,
182 LSA_POLICY_INFO_REPLICA=7,
183 LSA_POLICY_INFO_QUOTA=8,
184 LSA_POLICY_INFO_DB=9,
185 LSA_POLICY_INFO_AUDIT_FULL_SET=10,
186 LSA_POLICY_INFO_AUDIT_FULL_QUERY=11,
187 LSA_POLICY_INFO_DNS=12
191 [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log;
192 [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events;
193 [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain;
194 [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd;
195 [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain;
196 [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role;
197 [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica;
198 [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota;
199 [case(LSA_POLICY_INFO_DB)] lsa_ModificationInfo db;
200 [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset;
201 [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery;
202 [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns;
203 } lsa_PolicyInformation;
205 NTSTATUS lsa_QueryInfoPolicy (
206 [in,ref] policy_handle *handle,
208 [out,switch_is(level)] lsa_PolicyInformation *info
213 NTSTATUS lsa_SetInfoPolicy ();
217 NTSTATUS lsa_ClearAuditLog ();
221 NTSTATUS lsa_CreateAccount (
222 [in,ref] policy_handle *handle,
223 [in,ref] dom_sid2 *sid,
224 [in] uint32 access_mask,
225 [out,ref] policy_handle *acct_handle
234 typedef [public] struct {
235 [range(0,1000)] uint32 num_sids;
236 [size_is(num_sids)] lsa_SidPtr *sids;
239 NTSTATUS lsa_EnumAccounts (
240 [in,ref] policy_handle *handle,
241 [in,out,ref] uint32 *resume_handle,
242 [in,range(0,1000)] uint32 num_entries,
243 [out,ref] lsa_SidArray *sids
247 /*************************************************/
253 } lsa_TrustInformation;
255 NTSTATUS lsa_CreateTrustedDomain(
256 [in,ref] policy_handle *handle,
257 [in,ref] lsa_TrustInformation *info,
258 [in] uint32 access_mask,
259 [out,ref] policy_handle *dom_handle
269 } lsa_DomainInformation;
273 [size_is(count)] lsa_DomainInformation *domains;
276 NTSTATUS lsa_EnumTrustDom (
277 [in,ref] policy_handle *handle,
278 [in,out,ref] uint32 *resume_handle,
279 [in,range(0,1000)] uint32 num_entries,
280 [out,ref] lsa_DomainList *domains
294 [range(0,1000)] uint32 count;
295 [size_is(count)] lsa_TranslatedSid *sids;
299 [range(0,1000)] uint32 count;
300 [size_is(count)] lsa_TrustInformation *domains;
304 NTSTATUS lsa_LookupNames (
305 [in,ref] policy_handle *handle,
306 [in,range(0,1000)] uint32 num_names,
307 [in,ref,size_is(num_names)] lsa_String *names,
308 [out] lsa_RefDomainList *domains,
309 [in,out,ref] lsa_TransSidArray *sids,
311 [in,out,ref] uint32 *count
322 } lsa_TranslatedName;
325 [range(0,1000)] uint32 count;
326 [size_is(count)] lsa_TranslatedName *names;
327 } lsa_TransNameArray;
329 NTSTATUS lsa_LookupSids (
330 [in,ref] policy_handle *handle,
331 [in,ref] lsa_SidArray *sids,
332 [out] lsa_RefDomainList *domains,
333 [in,out,ref] lsa_TransNameArray *names,
335 [in,out,ref] uint32 *count
340 NTSTATUS lsa_CreateSecret(
341 [in,ref] policy_handle *handle,
342 [in] lsa_String name,
343 [in] uint32 access_mask,
344 [out,ref] policy_handle *sec_handle
348 /*****************************************/
350 NTSTATUS lsa_OpenAccount (
351 [in,ref] policy_handle *handle,
352 [in,ref] dom_sid2 *sid,
353 [in] uint32 access_mask,
354 [out,ref] policy_handle *acct_handle
358 /****************************************/
374 [size_is(count)] lsa_LUIDAttribute set[*];
377 NTSTATUS lsa_EnumPrivsAccount (
378 [in,ref] policy_handle *handle,
379 [out] lsa_PrivilegeSet *privs
384 NTSTATUS lsa_AddPrivilegesToAccount();
387 NTSTATUS lsa_RemovePrivilegesFromAccount();
390 NTSTATUS lsa_GetQuotasForAccount();
393 NTSTATUS lsa_SetQuotasForAccount();
396 NTSTATUS lsa_GetSystemAccessAccount();
398 NTSTATUS lsa_SetSystemAccessAccount();
401 NTSTATUS lsa_OpenTrustedDomain(
402 [in,ref] policy_handle *handle,
403 [in,ref] dom_sid2 *sid,
404 [in] uint32 access_mask,
405 [out,ref] policy_handle *trustdom_handle
408 typedef [flag(NDR_PAHEX)] struct {
411 [size_is(size),length_is(length)] uint8 *data;
414 typedef [flag(NDR_PAHEX)] struct {
416 [size_is(size)] uint8 *data;
420 LSA_TRUSTED_DOMAIN_INFO_NAME=1,
421 LSA_TRUSTED_DOMAIN_INFO_2=2,
422 LSA_TRUSTED_DOMAIN_INFO_FLAGS=3,
423 LSA_TRUSTED_DOMAIN_INFO_PASSWORD=4,
424 LSA_TRUSTED_DOMAIN_INFO_5=5,
425 LSA_TRUSTED_DOMAIN_INFO_INFO_EX=6,
426 LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO=7,
427 LSA_TRUSTED_DOMAIN_INFO_FULL_INFO=8,
428 LSA_TRUSTED_DOMAIN_INFO_INFO_ALL=12
429 } lsa_TrustDomInfoEnum;
432 lsa_String netbios_name;
433 } lsa_TrustDomainInfoName;
437 } lsa_TrustDomainInfoFlags;
440 lsa_DATA_BUF *password;
441 lsa_DATA_BUF *old_password;
442 } lsa_TrustDomainInfoPassword;
445 lsa_String netbios_name;
447 } lsa_TrustDomainInfo5;
450 lsa_String domain_name;
451 lsa_String netbios_name;
456 } lsa_TrustDomainInfoInfoEx;
462 } lsa_TrustDomainInfoBuffer;
466 lsa_TrustDomainInfoBuffer *buff1;
467 lsa_TrustDomainInfoBuffer *buff2;
469 lsa_TrustDomainInfoBuffer *buff3;
470 lsa_TrustDomainInfoBuffer *buff4;
471 } lsa_TrustDomainInfoAuthInfo;
474 lsa_TrustDomainInfoInfoEx info_ex;
475 lsa_TrustDomainInfoFlags flags;
476 lsa_TrustDomainInfoAuthInfo auth_info;
477 } lsa_TrustDomainInfoFullInfo;
480 lsa_TrustDomainInfoInfoEx info_ex;
482 } lsa_TrustDomainInfo11;
485 lsa_TrustDomainInfoInfoEx info_ex;
487 lsa_TrustDomainInfoFlags flags;
488 lsa_TrustDomainInfoAuthInfo auth_info;
489 } lsa_TrustDomainInfoInfoAll;
492 [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name;
493 [case(LSA_TRUSTED_DOMAIN_INFO_FLAGS)] lsa_TrustDomainInfoFlags flags;
494 [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password;
495 [case(LSA_TRUSTED_DOMAIN_INFO_5)] lsa_TrustDomainInfo5 info5;
496 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex;
497 [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info;
498 [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info;
499 [case(11)] lsa_TrustDomainInfo11 info11;
500 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_ALL)] lsa_TrustDomainInfoInfoAll info_all;
501 } lsa_TrustedDomainInfo;
504 NTSTATUS lsa_QueryTrustedDomainInfo(
505 [in,ref] policy_handle *trustdom_handle,
507 [out,switch_is(level)] lsa_TrustedDomainInfo *info
511 NTSTATUS lsa_SetInformationTrustedDomain();
514 NTSTATUS lsa_OpenSecret(
515 [in,ref] policy_handle *handle,
516 [in] lsa_String name,
517 [in] uint32 access_mask,
518 [out,ref] policy_handle *sec_handle
523 NTSTATUS lsa_SetSecret(
524 [in,ref] policy_handle *handle,
525 [in] lsa_DATA_BUF *new_val,
526 [in] lsa_DATA_BUF *old_val
534 NTSTATUS lsa_QuerySecret (
535 [in,ref] policy_handle *handle,
536 [in,out] lsa_DATA_BUF_PTR *new_val,
537 [in,out] NTTIME *new_mtime,
538 [in,out] lsa_DATA_BUF_PTR *old_val,
539 [in,out] NTTIME *old_mtime
543 NTSTATUS lsa_LookupPrivValue();
547 NTSTATUS lsa_LookupPrivName (
548 [in,ref] policy_handle *handle,
549 [in,ref] lsa_LUID *luid,
550 [out] lsa_String *name
554 /*******************/
556 NTSTATUS lsa_LookupPrivDisplayName (
557 [in,ref] policy_handle *handle,
558 [in,ref] lsa_String *name,
559 [out] lsa_String *disp_name,
560 /* see http://www.microsoft.com/globaldev/nlsweb/ for
561 language definitions */
562 [in,out,ref] uint16 *language_id,
567 NTSTATUS lsa_DeleteObject();
570 /*******************/
572 NTSTATUS lsa_EnumAccountsWithUserRight (
573 [in,ref] policy_handle *handle,
574 [in] lsa_String *name,
575 [out,ref] lsa_SidArray *sids
581 } lsa_RightAttribute;
585 [size_is(count)] lsa_String *names;
588 NTSTATUS lsa_EnumAccountRights (
589 [in,ref] policy_handle *handle,
590 [in,ref] dom_sid2 *sid,
591 [out,ref] lsa_RightSet *rights
595 /**********************/
597 NTSTATUS lsa_AddAccountRights (
598 [in,ref] policy_handle *handle,
599 [in,ref] dom_sid2 *sid,
600 [in,ref] lsa_RightSet *rights
603 /**********************/
605 NTSTATUS lsa_RemoveAccountRights (
606 [in,ref] policy_handle *handle,
607 [in,ref] dom_sid2 *sid,
609 [in,ref] lsa_RightSet *rights
613 NTSTATUS lsa_QueryTrustedDomainInfoBySid(
614 [in,ref] policy_handle *handle,
615 [in,ref] dom_sid2 *dom_sid,
617 [out,switch_is(level)] lsa_TrustedDomainInfo *info
621 NTSTATUS lsa_SetTrustDomainInfo();
623 NTSTATUS lsa_DeleteTrustDomain();
625 NTSTATUS lsa_StorePrivateData();
627 NTSTATUS lsa_RetrievePrivateData();
630 /**********************/
632 NTSTATUS lsa_OpenPolicy2 (
633 [in] unistr *system_name,
634 [in,ref] lsa_ObjectAttribute *attr,
635 [in] uint32 access_mask,
636 [out,ref] policy_handle *handle
641 NTSTATUS lsa_GetUserName();
643 /**********************/
646 NTSTATUS lsa_QueryInfoPolicy2(
647 [in,ref] policy_handle *handle,
649 [out,switch_is(level)] lsa_PolicyInformation *info
653 NTSTATUS lsa_SetInfoPolicy2();
655 /**********************/
657 NTSTATUS lsa_QueryTrustedDomainInfoByName(
658 [in,ref] policy_handle *handle,
659 [in] lsa_String trusted_domain,
661 [out,switch_is(level)] lsa_TrustedDomainInfo *info
665 NTSTATUS lsa_SetTrustedDomainInfoByName();
668 NTSTATUS lsa_EnumTrustedDomainsEx();
671 NTSTATUS lsa_CreateTrustedDomainEx();
674 NTSTATUS lsa_CloseTrustedDomainEx();
677 NTSTATUS lsa_QueryDomainInformationPolicy();
680 NTSTATUS lsa_SetDomInfoPolicy();
682 /**********************/
684 NTSTATUS lsa_OpenTrustedDomainByName(
685 [in,ref] policy_handle *handle,
686 [in] lsa_String name,
687 [in] uint32 access_mask,
688 [out,ref] policy_handle *trustdom_handle
692 NTSTATUS lsa_TestCall();
694 /**********************/
702 } lsa_TranslatedName2;
705 [range(0,1000)] uint32 count;
706 [size_is(count)] lsa_TranslatedName2 *names;
707 } lsa_TransNameArray2;
709 NTSTATUS lsa_LookupSids2(
710 [in,ref] policy_handle *handle,
711 [in,ref] lsa_SidArray *sids,
712 [out] lsa_RefDomainList *domains,
713 [in,out,ref] lsa_TransNameArray2 *names,
715 [in,out,ref] uint32 *count,
716 [in] uint32 unknown1,
720 /**********************/
728 } lsa_TranslatedSid2;
731 [range(0,1000)] uint32 count;
732 [size_is(count)] lsa_TranslatedSid2 *sids;
733 } lsa_TransSidArray2;
735 NTSTATUS lsa_LookupNames2 (
736 [in,ref] policy_handle *handle,
737 [in,range(0,1000)] uint32 num_names,
738 [in,ref,size_is(num_names)] lsa_String *names,
739 [out] lsa_RefDomainList *domains,
740 [in,out,ref] lsa_TransSidArray2 *sids,
742 [in,out,ref] uint32 *count,
743 [in] uint32 unknown1,
748 NTSTATUS lsa_CreateTrustedDomainEx2();