4 lsa interface definition
7 [ uuid("12345778-1234-abcd-ef00-0123456789ab"),
9 endpoint("ncacn_np:[\\pipe\\lsarpc]","ncacn_np:[\\pipe\\lsass]", "ncacn_ip_tcp:", "ncalrpc:"),
10 pointer_default(unique),
11 pointer_default_top(unique),
12 helpstring("Local Security Authority"),
19 [in,out,ref] policy_handle *handle
26 [in,ref] policy_handle *handle
34 [value(2*strlen_m(r->string))] uint16 length;
35 [value(r->length)] uint16 size;
36 unistr_noterm *string;
51 [size_is(count)] lsa_PrivEntry *privs[];
54 NTSTATUS lsa_EnumPrivs (
55 [in,ref] policy_handle *handle,
56 [in,out,ref] uint32 *resume_handle,
57 [in] uint32 max_count,
58 [out,ref] lsa_PrivArray *privs
64 NTSTATUS lsa_QuerySecurity (
65 [in,ref] policy_handle *handle,
67 [out] sec_desc_buf *sdbuf
73 NTSTATUS lsa_SetSecObj ();
78 NTSTATUS lsa_ChangePassword ();
84 uint32 len; /* ignored */
85 uint16 impersonation_level;
91 uint32 len; /* ignored */
95 security_descriptor *sec_desc;
97 } lsa_ObjectAttribute;
99 /* notice the screwup with the system_name - thats why MS created
101 NTSTATUS lsa_OpenPolicy (
102 [in] uint16 *system_name,
103 [in,ref] lsa_ObjectAttribute *attr,
104 [in] uint32 access_mask,
105 [out,ref] policy_handle *handle
116 NTTIME retention_time;
117 uint8 shutdown_in_progress;
118 NTTIME time_to_shutdown;
119 uint32 next_audit_record;
124 uint32 auditing_mode;
125 [size_is(count)] uint32 *settings[];
127 } lsa_AuditEventsInfo;
139 uint16 unknown; /* an midl padding bug? */
146 } lsa_ReplicaSourceInfo;
150 uint32 non_paged_pool;
155 } lsa_DefaultQuotaInfo;
159 NTTIME db_create_time;
160 } lsa_ModificationInfo;
163 uint8 shutdown_on_full;
164 } lsa_AuditFullSetInfo;
167 uint16 unknown; /* an midl padding bug? */
168 uint8 shutdown_on_full;
170 } lsa_AuditFullQueryInfo;
174 lsa_String dns_domain;
175 lsa_String dns_forest;
181 LSA_POLICY_INFO_AUDIT_LOG=1,
182 LSA_POLICY_INFO_AUDIT_EVENTS=2,
183 LSA_POLICY_INFO_DOMAIN=3,
184 LSA_POLICY_INFO_PD=4,
185 LSA_POLICY_INFO_ACCOUNT_DOMAIN=5,
186 LSA_POLICY_INFO_ROLE=6,
187 LSA_POLICY_INFO_REPLICA=7,
188 LSA_POLICY_INFO_QUOTA=8,
189 LSA_POLICY_INFO_DB=9,
190 LSA_POLICY_INFO_AUDIT_FULL_SET=10,
191 LSA_POLICY_INFO_AUDIT_FULL_QUERY=11,
192 LSA_POLICY_INFO_DNS=12
195 typedef [switch_type(uint16)] union {
196 [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log;
197 [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events;
198 [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain;
199 [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd;
200 [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain;
201 [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role;
202 [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica;
203 [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota;
204 [case(LSA_POLICY_INFO_DB)] lsa_ModificationInfo db;
205 [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset;
206 [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery;
207 [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns;
208 } lsa_PolicyInformation;
210 NTSTATUS lsa_QueryInfoPolicy (
211 [in,ref] policy_handle *handle,
213 [out,switch_is(level)] lsa_PolicyInformation *info
218 NTSTATUS lsa_SetInfoPolicy ();
222 NTSTATUS lsa_ClearAuditLog ();
226 NTSTATUS lsa_CreateAccount (
227 [in,ref] policy_handle *handle,
228 [in,ref] dom_sid2 *sid,
229 [in] uint32 access_mask,
230 [out,ref] policy_handle *acct_handle
234 /* NOTE: This only returns accounts that have at least
242 typedef [public] struct {
243 [range(0,1000)] uint32 num_sids;
244 [size_is(num_sids)] lsa_SidPtr *sids[];
247 NTSTATUS lsa_EnumAccounts (
248 [in,ref] policy_handle *handle,
249 [in,out,ref] uint32 *resume_handle,
250 [in,range(0,8192)] uint32 num_entries,
251 [out,ref] lsa_SidArray *sids
255 /*************************************************/
261 } lsa_TrustInformation;
263 NTSTATUS lsa_CreateTrustedDomain(
264 [in,ref] policy_handle *handle,
265 [in,ref] lsa_TrustInformation *info,
266 [in] uint32 access_mask,
267 [out,ref] policy_handle *trustdom_handle
274 /* w2k3 treats max_size as max_domains*60 */
275 const int LSA_ENUM_TRUST_DOMAIN_MULTIPLIER = 60;
280 } lsa_DomainInformation;
284 [size_is(count)] lsa_DomainInformation *domains[];
287 NTSTATUS lsa_EnumTrustDom (
288 [in,ref] policy_handle *handle,
289 [in,out,ref] uint32 *resume_handle,
290 [in,range(0,1000)] uint32 max_size,
291 [out,ref] lsa_DomainList *domains
298 SID_NAME_USE_NONE = 0,/* NOTUSED */
299 SID_NAME_USER = 1, /* user */
300 SID_NAME_DOM_GRP = 2, /* domain group */
301 SID_NAME_DOMAIN = 3, /* domain: don't know what this is */
302 SID_NAME_ALIAS = 4, /* local group */
303 SID_NAME_WKN_GRP = 5, /* well-known group */
304 SID_NAME_DELETED = 6, /* deleted account: needed for c2 rating */
305 SID_NAME_INVALID = 7, /* invalid account */
306 SID_NAME_UNKNOWN = 8 /* oops. */
310 lsa_SidType sid_type;
316 [range(0,1000)] uint32 count;
317 [size_is(count)] lsa_TranslatedSid *sids[];
321 [range(0,1000)] uint32 count;
322 [size_is(count)] lsa_TrustInformation *domains[];
326 NTSTATUS lsa_LookupNames (
327 [in,ref] policy_handle *handle,
328 [in,range(0,1000)] uint32 num_names,
329 [in,size_is(num_names)] lsa_String names[],
330 [out] lsa_RefDomainList *domains,
331 [in,out,ref] lsa_TransSidArray *sids,
333 [in,out,ref] uint32 *count
341 lsa_SidType sid_type;
344 } lsa_TranslatedName;
347 [range(0,1000)] uint32 count;
348 [size_is(count)] lsa_TranslatedName *names[];
349 } lsa_TransNameArray;
351 NTSTATUS lsa_LookupSids (
352 [in,ref] policy_handle *handle,
353 [in,ref] lsa_SidArray *sids,
354 [out] lsa_RefDomainList *domains,
355 [in,out,ref] lsa_TransNameArray *names,
357 [in,out,ref] uint32 *count
362 NTSTATUS lsa_CreateSecret(
363 [in,ref] policy_handle *handle,
364 [in] lsa_String name,
365 [in] uint32 access_mask,
366 [out,ref] policy_handle *sec_handle
370 /*****************************************/
372 NTSTATUS lsa_OpenAccount (
373 [in,ref] policy_handle *handle,
374 [in,ref] dom_sid2 *sid,
375 [in] uint32 access_mask,
376 [out,ref] policy_handle *acct_handle
380 /****************************************/
389 [range(0,1000)] uint32 count;
391 [size_is(count)] lsa_LUIDAttribute set[*];
394 NTSTATUS lsa_EnumPrivsAccount (
395 [in,ref] policy_handle *handle,
396 [out] lsa_PrivilegeSet *privs
400 /****************************************/
402 NTSTATUS lsa_AddPrivilegesToAccount(
403 [in,ref] policy_handle *handle,
404 [in,ref] lsa_PrivilegeSet *privs
408 /****************************************/
410 NTSTATUS lsa_RemovePrivilegesFromAccount(
411 [in,ref] policy_handle *handle,
412 [in] uint8 remove_all,
413 [in] lsa_PrivilegeSet *privs
417 NTSTATUS lsa_GetQuotasForAccount();
420 NTSTATUS lsa_SetQuotasForAccount();
423 NTSTATUS lsa_GetSystemAccessAccount();
425 NTSTATUS lsa_SetSystemAccessAccount();
428 NTSTATUS lsa_OpenTrustedDomain(
429 [in,ref] policy_handle *handle,
430 [in,ref] dom_sid2 *sid,
431 [in] uint32 access_mask,
432 [out,ref] policy_handle *trustdom_handle
435 typedef [flag(NDR_PAHEX)] struct {
438 [size_is(size),length_is(length)] uint8 *data[];
441 typedef [flag(NDR_PAHEX)] struct {
442 [range(0,65536)] uint32 size;
443 [size_is(size)] uint8 *data[];
447 LSA_TRUSTED_DOMAIN_INFO_NAME = 1,
448 LSA_TRUSTED_DOMAIN_INFO_2 = 2,
449 LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET = 3,
450 LSA_TRUSTED_DOMAIN_INFO_PASSWORD = 4,
451 LSA_TRUSTED_DOMAIN_INFO_5 = 5,
452 LSA_TRUSTED_DOMAIN_INFO_INFO_EX = 6,
453 LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO = 7,
454 LSA_TRUSTED_DOMAIN_INFO_FULL_INFO = 8,
455 LSA_TRUSTED_DOMAIN_INFO_11 = 11,
456 LSA_TRUSTED_DOMAIN_INFO_INFO_ALL = 12
457 } lsa_TrustDomInfoEnum;
460 lsa_String netbios_name;
461 } lsa_TrustDomainInfoName;
465 } lsa_TrustDomainInfoPosixOffset;
468 lsa_DATA_BUF *password;
469 lsa_DATA_BUF *old_password;
470 } lsa_TrustDomainInfoPassword;
473 lsa_String netbios_name;
475 } lsa_TrustDomainInfo5;
478 lsa_String domain_name;
479 lsa_String netbios_name;
481 uint32 trust_direction;
483 uint32 trust_attributes;
484 } lsa_TrustDomainInfoInfoEx;
487 NTTIME_hyper last_update_time;
490 } lsa_TrustDomainInfoBuffer;
493 uint32 incoming_count;
494 lsa_TrustDomainInfoBuffer *incoming_current_auth_info;
495 lsa_TrustDomainInfoBuffer *incoming_previous_auth_info;
496 uint32 outgoing_count;
497 lsa_TrustDomainInfoBuffer *outgoing_current_auth_info;
498 lsa_TrustDomainInfoBuffer *outgoing_previous_auth_info;
499 } lsa_TrustDomainInfoAuthInfo;
502 lsa_TrustDomainInfoInfoEx info_ex;
503 lsa_TrustDomainInfoPosixOffset posix_offset;
504 lsa_TrustDomainInfoAuthInfo auth_info;
505 } lsa_TrustDomainInfoFullInfo;
508 lsa_TrustDomainInfoInfoEx info_ex;
510 } lsa_TrustDomainInfo11;
513 lsa_TrustDomainInfoInfoEx info_ex;
515 lsa_TrustDomainInfoPosixOffset posix_offset;
516 lsa_TrustDomainInfoAuthInfo auth_info;
517 } lsa_TrustDomainInfoInfoAll;
519 typedef [switch_type(lsa_TrustDomInfoEnum)] union {
520 [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name;
521 [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] lsa_TrustDomainInfoPosixOffset posix_offset;
522 [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password;
523 [case(LSA_TRUSTED_DOMAIN_INFO_5)] lsa_TrustDomainInfo5 info5;
524 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex;
525 [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info;
526 [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info;
527 [case(LSA_TRUSTED_DOMAIN_INFO_11)] lsa_TrustDomainInfo11 info11;
528 [case(LSA_TRUSTED_DOMAIN_INFO_INFO_ALL)] lsa_TrustDomainInfoInfoAll info_all;
529 } lsa_TrustedDomainInfo;
532 NTSTATUS lsa_QueryTrustedDomainInfo(
533 [in,ref] policy_handle *trustdom_handle,
534 [in] lsa_TrustDomInfoEnum level,
535 [out,switch_is(level)] lsa_TrustedDomainInfo *info
539 NTSTATUS lsa_SetInformationTrustedDomain();
542 NTSTATUS lsa_OpenSecret(
543 [in,ref] policy_handle *handle,
544 [in] lsa_String name,
545 [in] uint32 access_mask,
546 [out,ref] policy_handle *sec_handle
551 NTSTATUS lsa_SetSecret(
552 [in,ref] policy_handle *sec_handle,
553 [in] lsa_DATA_BUF *new_val,
554 [in] lsa_DATA_BUF *old_val
562 NTSTATUS lsa_QuerySecret (
563 [in,ref] policy_handle *sec_handle,
564 [in,out] lsa_DATA_BUF_PTR *new_val,
565 [in,out] NTTIME_hyper *new_mtime,
566 [in,out] lsa_DATA_BUF_PTR *old_val,
567 [in,out] NTTIME_hyper *old_mtime
571 NTSTATUS lsa_LookupPrivValue(
572 [in,ref] policy_handle *handle,
573 [in,ref] lsa_String *name,
574 [out,ref] lsa_LUID *luid
579 NTSTATUS lsa_LookupPrivName (
580 [in,ref] policy_handle *handle,
581 [in,ref] lsa_LUID *luid,
582 [out] lsa_String *name
586 /*******************/
588 NTSTATUS lsa_LookupPrivDisplayName (
589 [in,ref] policy_handle *handle,
590 [in,ref] lsa_String *name,
591 [out] lsa_String *disp_name,
592 /* see http://www.microsoft.com/globaldev/nlsweb/ for
593 language definitions */
594 [in,out,ref] uint16 *language_id,
599 NTSTATUS lsa_DeleteObject();
602 /*******************/
604 NTSTATUS lsa_EnumAccountsWithUserRight (
605 [in,ref] policy_handle *handle,
606 [in] lsa_String *name,
607 [out,ref] lsa_SidArray *sids
613 } lsa_RightAttribute;
617 [size_is(count)] lsa_String *names[];
620 NTSTATUS lsa_EnumAccountRights (
621 [in,ref] policy_handle *handle,
622 [in,ref] dom_sid2 *sid,
623 [out,ref] lsa_RightSet *rights
627 /**********************/
629 NTSTATUS lsa_AddAccountRights (
630 [in,ref] policy_handle *handle,
631 [in,ref] dom_sid2 *sid,
632 [in,ref] lsa_RightSet *rights
635 /**********************/
637 NTSTATUS lsa_RemoveAccountRights (
638 [in,ref] policy_handle *handle,
639 [in,ref] dom_sid2 *sid,
641 [in,ref] lsa_RightSet *rights
645 NTSTATUS lsa_QueryTrustedDomainInfoBySid(
646 [in,ref] policy_handle *handle,
647 [in,ref] dom_sid2 *dom_sid,
648 [in] lsa_TrustDomInfoEnum level,
649 [out,switch_is(level)] lsa_TrustedDomainInfo *info
653 NTSTATUS lsa_SetTrustDomainInfo();
655 NTSTATUS lsa_DeleteTrustDomain();
657 NTSTATUS lsa_StorePrivateData();
659 NTSTATUS lsa_RetrievePrivateData();
662 /**********************/
664 NTSTATUS lsa_OpenPolicy2 (
665 [in] unistr *system_name,
666 [in,ref] lsa_ObjectAttribute *attr,
667 [in] uint32 access_mask,
668 [out,ref] policy_handle *handle
671 /**********************/
677 NTSTATUS lsa_GetUserName(
678 [in] unistr *system_name,
679 [in,out] lsa_String *account_name,
680 [in,out] lsa_StringPointer *authority_name
683 /**********************/
686 NTSTATUS lsa_QueryInfoPolicy2(
687 [in,ref] policy_handle *handle,
689 [out,switch_is(level)] lsa_PolicyInformation *info
693 NTSTATUS lsa_SetInfoPolicy2();
695 /**********************/
697 NTSTATUS lsa_QueryTrustedDomainInfoByName(
698 [in,ref] policy_handle *handle,
699 [in] lsa_String trusted_domain,
700 [in] lsa_TrustDomInfoEnum level,
701 [out,switch_is(level)] lsa_TrustedDomainInfo *info
705 NTSTATUS lsa_SetTrustedDomainInfoByName();
708 NTSTATUS lsa_EnumTrustedDomainsEx();
711 NTSTATUS lsa_CreateTrustedDomainEx();
714 NTSTATUS lsa_CloseTrustedDomainEx();
717 NTSTATUS lsa_QueryDomainInformationPolicy();
720 NTSTATUS lsa_SetDomInfoPolicy();
722 /**********************/
724 NTSTATUS lsa_OpenTrustedDomainByName(
725 [in,ref] policy_handle *handle,
726 [in] lsa_String name,
727 [in] uint32 access_mask,
728 [out,ref] policy_handle *trustdom_handle
732 NTSTATUS lsa_TestCall();
734 /**********************/
738 lsa_SidType sid_type;
742 } lsa_TranslatedName2;
745 [range(0,1000)] uint32 count;
746 [size_is(count)] lsa_TranslatedName2 *names[];
747 } lsa_TransNameArray2;
749 NTSTATUS lsa_LookupSids2(
750 [in,ref] policy_handle *handle,
751 [in,ref] lsa_SidArray *sids,
752 [out] lsa_RefDomainList *domains,
753 [in,out,ref] lsa_TransNameArray2 *names,
755 [in,out,ref] uint32 *count,
756 [in] uint32 unknown1,
760 /**********************/
764 lsa_SidType sid_type;
768 } lsa_TranslatedSid2;
771 [range(0,1000)] uint32 count;
772 [size_is(count)] lsa_TranslatedSid2 *sids[];
773 } lsa_TransSidArray2;
775 NTSTATUS lsa_LookupNames2 (
776 [in,ref] policy_handle *handle,
777 [in,range(0,1000)] uint32 num_names,
778 [in,size_is(num_names)] lsa_String names[],
779 [out] lsa_RefDomainList *domains,
780 [in,out,ref] lsa_TransSidArray2 *sids,
782 [in,out,ref] uint32 *count,
783 [in] uint32 unknown1,
788 NTSTATUS lsa_CreateTrustedDomainEx2();
791 NTSTATUS lsa_CREDRWRITE();
794 NTSTATUS lsa_CREDRREAD();
797 NTSTATUS lsa_CREDRENUMERATE();
800 NTSTATUS lsa_CREDRWRITEDOMAINCREDENTIALS();
803 NTSTATUS lsa_CREDRREADDOMAINCREDENTIALS();
806 NTSTATUS lsa_CREDRDELETE();
809 NTSTATUS lsa_CREDRGETTARGETINFO();
812 NTSTATUS lsa_CREDRPROFILELOADED();
814 /**********************/
817 lsa_SidType sid_type;
821 } lsa_TranslatedSid3;
824 [range(0,1000)] uint32 count;
825 [size_is(count)] lsa_TranslatedSid3 *sids[];
826 } lsa_TransSidArray3;
828 NTSTATUS lsa_LookupNames3 (
829 [in,ref] policy_handle *handle,
830 [in,range(0,1000)] uint32 num_names,
831 [in,size_is(num_names)] lsa_String names[],
832 [out] lsa_RefDomainList *domains,
833 [in,out,ref] lsa_TransSidArray3 *sids,
835 [in,out,ref] uint32 *count,
836 [in] uint32 unknown1,
841 NTSTATUS lsa_CREDRGETSESSIONTYPES();
844 NTSTATUS lsa_LSARREGISTERAUDITEVENT();
847 NTSTATUS lsa_LSARGENAUDITEVENT();
850 NTSTATUS lsa_LSARUNREGISTERAUDITEVENT();
853 NTSTATUS lsa_LSARQUERYFORESTTRUSTINFORMATION();
856 NTSTATUS lsa_LSARSETFORESTTRUSTINFORMATION();
859 NTSTATUS lsa_CREDRRENAME();
864 NTSTATUS lsa_LookupSids3(
865 [in,ref] lsa_SidArray *sids,
866 [out] lsa_RefDomainList *domains,
867 [in,out,ref] lsa_TransNameArray2 *names,
869 [in,out,ref] uint32 *count,
870 [in] uint32 unknown1,
875 NTSTATUS lsa_LSARLOOKUPNAMES4();
878 NTSTATUS lsa_LSAROPENPOLICYSCE();
881 NTSTATUS lsa_LSARADTREGISTERSECURITYEVENTSOURCE();
884 NTSTATUS lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE();
887 NTSTATUS lsa_LSARADTREPORTSECURITYEVENT();