4 lsa interface definition
7 [ uuid("12345778-1234-abcd-ef00-0123456789ab"),
9 endpoint("ncacn_np:[\\pipe\\lsarpc]","ncacn_np:[\\pipe\\lsass]", "ncacn_ip_tcp:", "ncalrpc:"),
10 pointer_default(unique),
11 helpstring("Local Security Authority"),
18 [in,out,ref] policy_handle *handle
25 [in,ref] policy_handle *handle
33 [value(2*strlen_m(r->string))] uint16 length;
34 [value(r->length)] uint16 size;
35 unistr_noterm *string;
50 [size_is(count)] lsa_PrivEntry *privs[];
53 NTSTATUS lsa_EnumPrivs (
54 [in,ref] policy_handle *handle,
55 [in,out,ref] uint32 *resume_handle,
56 [in] uint32 max_count,
57 [out,ref] lsa_PrivArray *privs
63 NTSTATUS lsa_QuerySecurity (
64 [in,ref] policy_handle *handle,
66 [out] sec_desc_buf *sdbuf
72 NTSTATUS lsa_SetSecObj ();
77 NTSTATUS lsa_ChangePassword ();
83 uint32 len; /* ignored */
84 uint16 impersonation_level;
90 uint32 len; /* ignored */
94 security_descriptor *sec_desc;
96 } lsa_ObjectAttribute;
98 /* notice the screwup with the system_name - thats why MS created
100 NTSTATUS lsa_OpenPolicy (
101 [in] uint16 *system_name,
102 [in,ref] lsa_ObjectAttribute *attr,
103 [in] uint32 access_mask,
104 [out,ref] policy_handle *handle
115 NTTIME retention_time;
116 uint8 shutdown_in_progress;
117 NTTIME time_to_shutdown;
118 uint32 next_audit_record;
123 uint32 auditing_mode;
124 [size_is(count)] uint32 *settings[];
126 } lsa_AuditEventsInfo;
138 uint16 unknown; /* an midl padding bug? */
145 } lsa_ReplicaSourceInfo;
149 uint32 non_paged_pool;
154 } lsa_DefaultQuotaInfo;
158 NTTIME db_create_time;
159 } lsa_ModificationInfo;
162 uint8 shutdown_on_full;
163 } lsa_AuditFullSetInfo;
166 uint16 unknown; /* an midl padding bug? */
167 uint8 shutdown_on_full;
169 } lsa_AuditFullQueryInfo;
173 lsa_String dns_domain;
174 lsa_String dns_forest;
180 LSA_POLICY_INFO_AUDIT_LOG=1,
181 LSA_POLICY_INFO_AUDIT_EVENTS=2,
182 LSA_POLICY_INFO_DOMAIN=3,
183 LSA_POLICY_INFO_PD=4,
184 LSA_POLICY_INFO_ACCOUNT_DOMAIN=5,
185 LSA_POLICY_INFO_ROLE=6,
186 LSA_POLICY_INFO_REPLICA=7,
187 LSA_POLICY_INFO_QUOTA=8,
188 LSA_POLICY_INFO_DB=9,
189 LSA_POLICY_INFO_AUDIT_FULL_SET=10,
190 LSA_POLICY_INFO_AUDIT_FULL_QUERY=11,
191 LSA_POLICY_INFO_DNS=12
194 typedef [switch_type(uint16)] union {
195 [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log;
196 [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events;
197 [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain;
198 [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd;
199 [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain;
200 [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role;
201 [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica;
202 [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota;
203 [case(LSA_POLICY_INFO_DB)] lsa_ModificationInfo db;
204 [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset;
205 [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery;
206 [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns;
207 } lsa_PolicyInformation;
209 NTSTATUS lsa_QueryInfoPolicy (
210 [in,ref] policy_handle *handle,
212 [out,switch_is(level)] lsa_PolicyInformation *info
217 NTSTATUS lsa_SetInfoPolicy ();
221 NTSTATUS lsa_ClearAuditLog ();
225 NTSTATUS lsa_CreateAccount (
226 [in,ref] policy_handle *handle,
227 [in,ref] dom_sid2 *sid,
228 [in] uint32 access_mask,
229 [out,ref] policy_handle *acct_handle
233 /* NOTE: This only returns accounts that have at least
241 typedef [public] struct {
242 [range(0,1000)] uint32 num_sids;
243 [size_is(num_sids)] lsa_SidPtr *sids[];
246 NTSTATUS lsa_EnumAccounts (
247 [in,ref] policy_handle *handle,
248 [in,out,ref] uint32 *resume_handle,
249 [in,range(0,8192)] uint32 num_entries,
250 [out,ref] lsa_SidArray *sids
254 /*************************************************/
260 } lsa_TrustInformation;
262 NTSTATUS lsa_CreateTrustedDomain(
263 [in,ref] policy_handle *handle,
264 [in,ref] lsa_TrustInformation *info,
265 [in] uint32 access_mask,
266 [out,ref] policy_handle *trustdom_handle
273 /* w2k3 treats max_size as max_domains*60 */
274 const int LSA_ENUM_TRUST_DOMAIN_MULTIPLIER = 60;
279 } lsa_DomainInformation;
283 [size_is(count)] lsa_DomainInformation *domains[];
286 NTSTATUS lsa_EnumTrustDom (
287 [in,ref] policy_handle *handle,
288 [in,out,ref] uint32 *resume_handle,
289 [in,range(0,1000)] uint32 max_size,
290 [out,ref] lsa_DomainList *domains
297 SID_NAME_USE_NONE = 0,/* NOTUSED */
298 SID_NAME_USER = 1, /* user */
299 SID_NAME_DOM_GRP = 2, /* domain group */
300 SID_NAME_DOMAIN = 3, /* domain: don't know what this is */
301 SID_NAME_ALIAS = 4, /* local group */
302 SID_NAME_WKN_GRP = 5, /* well-known group */
303 SID_NAME_DELETED = 6, /* deleted account: needed for c2 rating */
304 SID_NAME_INVALID = 7, /* invalid account */
305 SID_NAME_UNKNOWN = 8 /* oops. */
309 lsa_SidType sid_type;
315 [range(0,1000)] uint32 count;
316 [size_is(count)] lsa_TranslatedSid *sids[];
320 [range(0,1000)] uint32 count;
321 [size_is(count)] lsa_TrustInformation *domains[];
325 NTSTATUS lsa_LookupNames (
326 [in,ref] policy_handle *handle,
327 [in,range(0,1000)] uint32 num_names,
328 [in,size_is(num_names)] lsa_String names[],
329 [out] lsa_RefDomainList *domains,
330 [in,out,ref] lsa_TransSidArray *sids,
332 [in,out,ref] uint32 *count
340 lsa_SidType sid_type;
343 } lsa_TranslatedName;
346 [range(0,1000)] uint32 count;
347 [size_is(count)] lsa_TranslatedName *names[];
348 } lsa_TransNameArray;
350 NTSTATUS lsa_LookupSids (
351 [in,ref] policy_handle *handle,
352 [in,ref] lsa_SidArray *sids,
353 [out] lsa_RefDomainList *domains,
354 [in,out,ref] lsa_TransNameArray *names,
356 [in,out,ref] uint32 *count
361 NTSTATUS lsa_CreateSecret(
362 [in,ref] policy_handle *handle,
363 [in] lsa_String name,
364 [in] uint32 access_mask,
365 [out,ref] policy_handle *sec_handle
369 /*****************************************/
371 NTSTATUS lsa_OpenAccount (
372 [in,ref] policy_handle *handle,
373 [in,ref] dom_sid2 *sid,
374 [in] uint32 access_mask,
375 [out,ref] policy_handle *acct_handle
379 /****************************************/
388 [range(0,1000)] uint32 count;
390 [size_is(count)] lsa_LUIDAttribute set[*];
393 NTSTATUS lsa_EnumPrivsAccount (
394 [in,ref] policy_handle *handle,
395 [out] lsa_PrivilegeSet *privs
399 /****************************************/
401 NTSTATUS lsa_AddPrivilegesToAccount(
402 [in,ref] policy_handle *handle,
403 [in,ref] lsa_PrivilegeSet *privs
407 /****************************************/
409 NTSTATUS lsa_RemovePrivilegesFromAccount(
410 [in,ref] policy_handle *handle,
411 [in] uint8 remove_all,
412 [in] lsa_PrivilegeSet *privs
416 NTSTATUS lsa_GetQuotasForAccount();
419 NTSTATUS lsa_SetQuotasForAccount();
422 NTSTATUS lsa_GetSystemAccessAccount();
424 NTSTATUS lsa_SetSystemAccessAccount();
427 NTSTATUS lsa_OpenTrustedDomain(
428 [in,ref] policy_handle *handle,
429 [in,ref] dom_sid2 *sid,
430 [in] uint32 access_mask,
431 [out,ref] policy_handle *trustdom_handle
434 typedef [flag(NDR_PAHEX)] struct {
437 [size_is(size),length_is(length)] uint8 *data[];
440 typedef [flag(NDR_PAHEX)] struct {
441 [range(0,65536)] uint32 size;
442 [size_is(size)] uint8 *data[];
446 LSA_TRUSTED_DOMAIN_INFO_NAME = 1,
447 LSA_TRUSTED_DOMAIN_INFO_2 = 2,
448 LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET = 3,
449 LSA_TRUSTED_DOMAIN_INFO_PASSWORD = 4,
450 LSA_TRUSTED_DOMAIN_INFO_5 = 5,
451 LSA_TRUSTED_DOMAIN_INFO_INFO_EX = 6,
452 LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO = 7,
453 LSA_TRUSTED_DOMAIN_INFO_FULL_INFO = 8,
454 LSA_TRUSTED_DOMAIN_INFO_11 = 11,
455 LSA_TRUSTED_DOMAIN_INFO_INFO_ALL = 12
456 } lsa_TrustDomInfoEnum;
459 lsa_String netbios_name;
460 } lsa_TrustDomainInfoName;
464 } lsa_TrustDomainInfoPosixOffset;
467 lsa_DATA_BUF *password;
468 lsa_DATA_BUF *old_password;
469 } lsa_TrustDomainInfoPassword;
472 lsa_String netbios_name;
474 } lsa_TrustDomainInfo5;
477 lsa_String domain_name;
478 lsa_String netbios_name;
480 uint32 trust_direction;
482 uint32 trust_attributes;
483 } lsa_TrustDomainInfoInfoEx;
486 NTTIME_hyper last_update_time;
489 } lsa_TrustDomainInfoBuffer;
492 uint32 incoming_count;
493 lsa_TrustDomainInfoBuffer *incoming_current_auth_info;
494 lsa_TrustDomainInfoBuffer *incoming_previous_auth_info;
495 uint32 outgoing_count;
496 lsa_TrustDomainInfoBuffer *outgoing_current_auth_info;
497 lsa_TrustDomainInfoBuffer *outgoing_previous_auth_info;
498 } lsa_TrustDomainInfoAuthInfo;
501 lsa_TrustDomainInfoInfoEx info_ex;
502 lsa_TrustDomainInfoPosixOffset posix_offset;
503 lsa_TrustDomainInfoAuthInfo auth_info;
504 } lsa_TrustDomainInfoFullInfo;
507 lsa_TrustDomainInfoInfoEx info_ex;
509 } lsa_TrustDomainInfo11;
512 lsa_TrustDomainInfoInfoEx info_ex;
514 lsa_TrustDomainInfoPosixOffset posix_offset;
515 lsa_TrustDomainInfoAuthInfo auth_info;
516 } lsa_TrustDomainInfoInfoAll;
518 typedef [switch_type(lsa_TrustDomInfoEnum)] union {
519 [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name;
520 [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] lsa_TrustDomainInfoPosixOffset posix_offset;
521 [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password;
522 [case(LSA_TRUSTED_DOMAIN_INFO_5)] lsa_TrustDomainInfo5 info5;
523 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex;
524 [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info;
525 [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info;
526 [case(LSA_TRUSTED_DOMAIN_INFO_11)] lsa_TrustDomainInfo11 info11;
527 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_ALL)] lsa_TrustDomainInfoInfoAll info_all;
528 } lsa_TrustedDomainInfo;
531 NTSTATUS lsa_QueryTrustedDomainInfo(
532 [in,ref] policy_handle *trustdom_handle,
533 [in] lsa_TrustDomInfoEnum level,
534 [out,switch_is(level)] lsa_TrustedDomainInfo *info
538 NTSTATUS lsa_SetInformationTrustedDomain();
541 NTSTATUS lsa_OpenSecret(
542 [in,ref] policy_handle *handle,
543 [in] lsa_String name,
544 [in] uint32 access_mask,
545 [out,ref] policy_handle *sec_handle
550 NTSTATUS lsa_SetSecret(
551 [in,ref] policy_handle *sec_handle,
552 [in] lsa_DATA_BUF *new_val,
553 [in] lsa_DATA_BUF *old_val
561 NTSTATUS lsa_QuerySecret (
562 [in,ref] policy_handle *sec_handle,
563 [in,out] lsa_DATA_BUF_PTR *new_val,
564 [in,out] NTTIME_hyper *new_mtime,
565 [in,out] lsa_DATA_BUF_PTR *old_val,
566 [in,out] NTTIME_hyper *old_mtime
570 NTSTATUS lsa_LookupPrivValue(
571 [in,ref] policy_handle *handle,
572 [in,ref] lsa_String *name,
573 [out,ref] lsa_LUID *luid
578 NTSTATUS lsa_LookupPrivName (
579 [in,ref] policy_handle *handle,
580 [in,ref] lsa_LUID *luid,
581 [out] lsa_String *name
585 /*******************/
587 NTSTATUS lsa_LookupPrivDisplayName (
588 [in,ref] policy_handle *handle,
589 [in,ref] lsa_String *name,
590 [out] lsa_String *disp_name,
591 /* see http://www.microsoft.com/globaldev/nlsweb/ for
592 language definitions */
593 [in,out,ref] uint16 *language_id,
598 NTSTATUS lsa_DeleteObject();
601 /*******************/
603 NTSTATUS lsa_EnumAccountsWithUserRight (
604 [in,ref] policy_handle *handle,
605 [in] lsa_String *name,
606 [out,ref] lsa_SidArray *sids
612 } lsa_RightAttribute;
616 [size_is(count)] lsa_String *names[];
619 NTSTATUS lsa_EnumAccountRights (
620 [in,ref] policy_handle *handle,
621 [in,ref] dom_sid2 *sid,
622 [out,ref] lsa_RightSet *rights
626 /**********************/
628 NTSTATUS lsa_AddAccountRights (
629 [in,ref] policy_handle *handle,
630 [in,ref] dom_sid2 *sid,
631 [in,ref] lsa_RightSet *rights
634 /**********************/
636 NTSTATUS lsa_RemoveAccountRights (
637 [in,ref] policy_handle *handle,
638 [in,ref] dom_sid2 *sid,
640 [in,ref] lsa_RightSet *rights
644 NTSTATUS lsa_QueryTrustedDomainInfoBySid(
645 [in,ref] policy_handle *handle,
646 [in,ref] dom_sid2 *dom_sid,
647 [in] lsa_TrustDomInfoEnum level,
648 [out,switch_is(level)] lsa_TrustedDomainInfo *info
652 NTSTATUS lsa_SetTrustDomainInfo();
654 NTSTATUS lsa_DeleteTrustDomain();
656 NTSTATUS lsa_StorePrivateData();
658 NTSTATUS lsa_RetrievePrivateData();
661 /**********************/
663 NTSTATUS lsa_OpenPolicy2 (
664 [in] unistr *system_name,
665 [in,ref] lsa_ObjectAttribute *attr,
666 [in] uint32 access_mask,
667 [out,ref] policy_handle *handle
670 /**********************/
676 NTSTATUS lsa_GetUserName(
677 [in] unistr *system_name,
678 [in,out] lsa_String *account_name,
679 [in,out] lsa_StringPointer *authority_name
682 /**********************/
685 NTSTATUS lsa_QueryInfoPolicy2(
686 [in,ref] policy_handle *handle,
688 [out,switch_is(level)] lsa_PolicyInformation *info
692 NTSTATUS lsa_SetInfoPolicy2();
694 /**********************/
696 NTSTATUS lsa_QueryTrustedDomainInfoByName(
697 [in,ref] policy_handle *handle,
698 [in] lsa_String trusted_domain,
699 [in] lsa_TrustDomInfoEnum level,
700 [out,switch_is(level)] lsa_TrustedDomainInfo *info
704 NTSTATUS lsa_SetTrustedDomainInfoByName();
707 NTSTATUS lsa_EnumTrustedDomainsEx();
710 NTSTATUS lsa_CreateTrustedDomainEx();
713 NTSTATUS lsa_CloseTrustedDomainEx();
716 NTSTATUS lsa_QueryDomainInformationPolicy();
719 NTSTATUS lsa_SetDomInfoPolicy();
721 /**********************/
723 NTSTATUS lsa_OpenTrustedDomainByName(
724 [in,ref] policy_handle *handle,
725 [in] lsa_String name,
726 [in] uint32 access_mask,
727 [out,ref] policy_handle *trustdom_handle
731 NTSTATUS lsa_TestCall();
733 /**********************/
737 lsa_SidType sid_type;
741 } lsa_TranslatedName2;
744 [range(0,1000)] uint32 count;
745 [size_is(count)] lsa_TranslatedName2 *names[];
746 } lsa_TransNameArray2;
748 NTSTATUS lsa_LookupSids2(
749 [in,ref] policy_handle *handle,
750 [in,ref] lsa_SidArray *sids,
751 [out] lsa_RefDomainList *domains,
752 [in,out,ref] lsa_TransNameArray2 *names,
754 [in,out,ref] uint32 *count,
755 [in] uint32 unknown1,
759 /**********************/
763 lsa_SidType sid_type;
767 } lsa_TranslatedSid2;
770 [range(0,1000)] uint32 count;
771 [size_is(count)] lsa_TranslatedSid2 *sids[];
772 } lsa_TransSidArray2;
774 NTSTATUS lsa_LookupNames2 (
775 [in,ref] policy_handle *handle,
776 [in,range(0,1000)] uint32 num_names,
777 [in,size_is(num_names)] lsa_String names[],
778 [out] lsa_RefDomainList *domains,
779 [in,out,ref] lsa_TransSidArray2 *sids,
781 [in,out,ref] uint32 *count,
782 [in] uint32 unknown1,
787 NTSTATUS lsa_CreateTrustedDomainEx2();
790 NTSTATUS lsa_CREDRWRITE();
793 NTSTATUS lsa_CREDRREAD();
796 NTSTATUS lsa_CREDRENUMERATE();
799 NTSTATUS lsa_CREDRWRITEDOMAINCREDENTIALS();
802 NTSTATUS lsa_CREDRREADDOMAINCREDENTIALS();
805 NTSTATUS lsa_CREDRDELETE();
808 NTSTATUS lsa_CREDRGETTARGETINFO();
811 NTSTATUS lsa_CREDRPROFILELOADED();
813 /**********************/
816 lsa_SidType sid_type;
820 } lsa_TranslatedSid3;
823 [range(0,1000)] uint32 count;
824 [size_is(count)] lsa_TranslatedSid3 *sids[];
825 } lsa_TransSidArray3;
827 NTSTATUS lsa_LookupNames3 (
828 [in,ref] policy_handle *handle,
829 [in,range(0,1000)] uint32 num_names,
830 [in,size_is(num_names)] lsa_String names[],
831 [out] lsa_RefDomainList *domains,
832 [in,out,ref] lsa_TransSidArray3 *sids,
834 [in,out,ref] uint32 *count,
835 [in] uint32 unknown1,
840 NTSTATUS lsa_CREDRGETSESSIONTYPES();
843 NTSTATUS lsa_LSARREGISTERAUDITEVENT();
846 NTSTATUS lsa_LSARGENAUDITEVENT();
849 NTSTATUS lsa_LSARUNREGISTERAUDITEVENT();
852 NTSTATUS lsa_LSARQUERYFORESTTRUSTINFORMATION();
855 NTSTATUS lsa_LSARSETFORESTTRUSTINFORMATION();
858 NTSTATUS lsa_CREDRRENAME();
863 NTSTATUS lsa_LookupSids3(
864 [in,ref] lsa_SidArray *sids,
865 [out] lsa_RefDomainList *domains,
866 [in,out,ref] lsa_TransNameArray2 *names,
868 [in,out,ref] uint32 *count,
869 [in] uint32 unknown1,
874 NTSTATUS lsa_LSARLOOKUPNAMES4();
877 NTSTATUS lsa_LSAROPENPOLICYSCE();
880 NTSTATUS lsa_LSARADTREGISTERSECURITYEVENTSOURCE();
883 NTSTATUS lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE();
886 NTSTATUS lsa_LSARADTREPORTSECURITYEVENT();