source/librpc/idl/lsa.idl

   1 #include "idl_types.h"
   2
   3 /*
   4   lsa interface definition
   5 */
   6
   7 [ uuid("12345778-1234-abcd-ef00-0123456789ab"),
   8   version(0.0),
   9   endpoint("ncacn_np:[\\pipe\\lsarpc]","ncacn_np:[\\pipe\\lsass]", "ncacn_ip_tcp:"),
  10   pointer_default(unique),
  11   helpstring("Local Server Authentication(?)"),
  12   depends(security)
  13 ] interface lsarpc
  14 {
  15         /******************/
  16         /* Function: 0x00 */
  17         NTSTATUS lsa_Close (
  18                 [in,out,ref]     policy_handle *handle
  19                 );
  20
  21
  22         /******************/
  23         /* Function: 0x01 */
  24         NTSTATUS lsa_Delete (
  25                 [in,ref]     policy_handle *handle
  26                 );
  27
  28
  29         /******************/
  30         /* Function: 0x02 */
  31
  32         typedef struct {
  33                 [value(2*strlen_m(r->name))] uint16 name_len;
  34                 [value(r->name_len)] uint16 name_size;
  35                 unistr_noterm *name;
  36         } lsa_Name;
  37
  38         typedef struct {
  39                 lsa_Name name;
  40                 uint32 luid_low;
  41                 uint32 luid_high;
  42         } lsa_PrivEntry;
  43
  44         typedef struct {
  45                 uint32 count;
  46                 [size_is(count)] lsa_PrivEntry *privs;
  47         } lsa_PrivArray;
  48
  49         NTSTATUS lsa_EnumPrivs (
  50                 [in,ref]     policy_handle *handle,
  51                 [in,out,ref] uint32 *resume_handle,
  52                 [in]         uint32 max_count,
  53                 [out,ref]    lsa_PrivArray *privs
  54                 );
  55
  56         /******************/
  57         /* Function: 0x03 */
  58
  59         NTSTATUS lsa_QuerySecObj (
  60                 [in,ref]     policy_handle *handle,
  61                 [in]         uint32 sec_info,
  62                 [out]        sec_desc_buf *sd
  63                 );
  64
  65
  66         /******************/
  67         /* Function: 0x04 */
  68         NTSTATUS lsa_SetSecObj ();
  69
  70
  71         /******************/
  72         /* Function: 0x05 */
  73         NTSTATUS lsa_ChangePassword ();
  74
  75
  76         /******************/
  77         /* Function: 0x06 */
  78         typedef struct {
  79                 uint32  len; /* ignored */
  80                 uint16  impersonation_level;
  81                 uint8   context_mode;
  82                 uint8   effective_only;
  83         } lsa_QosInfo;
  84
  85         typedef struct {
  86                 uint32 len; /* ignored */
  87                 uint8 *root_dir;
  88                 unistr *object_name;
  89                 uint32 attributes;
  90                 security_descriptor *sec_desc;
  91                 lsa_QosInfo *sec_qos;
  92         } lsa_ObjectAttribute;
  93
  94         /* notice the screwup with the system_name - thats why MS created
  95            OpenPolicy2 */
  96         NTSTATUS lsa_OpenPolicy (
  97                 [in]       uint16 *system_name,
  98                 [in,ref]   lsa_ObjectAttribute *attr,
  99                 [in]       uint32 access_mask,
 100                 [out,ref]  policy_handle *handle
 101                 );
 102
 103
 104
 105         /******************/
 106         /* Function: 0x07 */
 107
 108         typedef struct {
 109                 uint32 percent_full;
 110                 uint32 log_size;
 111                 NTTIME retention_time;
 112                 uint8  shutdown_in_progress;
 113                 NTTIME time_to_shutdown;
 114                 uint32 next_audit_record;
 115                 uint32 unknown;
 116         } lsa_AuditLogInfo;
 117
 118         typedef struct {
 119                 uint32 auditing_mode;
 120                 [size_is(count)] uint32 *settings;
 121                 uint32 count;
 122         } lsa_AuditEventsInfo;
 123
 124         typedef struct {
 125                 lsa_Name name;
 126                 dom_sid2 *sid;
 127         } lsa_DomainInfo;
 128
 129         typedef struct {
 130                 lsa_Name name;
 131         } lsa_PDAccountInfo;
 132
 133         typedef struct {
 134                 uint16 unknown; /* an midl padding bug? */
 135                 uint16 role;
 136         } lsa_ServerRole;
 137
 138         typedef struct {
 139                 lsa_Name source;
 140                 lsa_Name account;
 141         } lsa_ReplicaSourceInfo;
 142
 143         typedef struct {
 144                 uint32 paged_pool;
 145                 uint32 non_paged_pool;
 146                 uint32 min_wss;
 147                 uint32 max_wss;
 148                 uint32 pagefile;
 149                 HYPER_T unknown;
 150         } lsa_DefaultQuotaInfo;
 151
 152         typedef struct {
 153                 HYPER_T modified_id;
 154                 NTTIME db_create_time;
 155         } lsa_ModificationInfo;
 156
 157         typedef struct {
 158                 uint8 shutdown_on_full;
 159         } lsa_AuditFullSetInfo;
 160
 161         typedef struct {
 162                 uint16 unknown; /* an midl padding bug? */
 163                 uint8 shutdown_on_full;
 164                 uint8 log_is_full;
 165         } lsa_AuditFullQueryInfo;
 166
 167         typedef struct {
 168                 lsa_Name name;
 169                 lsa_Name dns_domain;
 170                 lsa_Name dns_forest;
 171                 GUID domain_guid;
 172                 dom_sid2 *sid;
 173         } lsa_DnsDomainInfo;
 174
 175         typedef enum {
 176                 LSA_POLICY_INFO_AUDIT_LOG=1,
 177                 LSA_POLICY_INFO_AUDIT_EVENTS=2,
 178                 LSA_POLICY_INFO_DOMAIN=3,
 179                 LSA_POLICY_INFO_PD=4,
 180                 LSA_POLICY_INFO_ACCOUNT_DOMAIN=5,
 181                 LSA_POLICY_INFO_ROLE=6,
 182                 LSA_POLICY_INFO_REPLICA=7,
 183                 LSA_POLICY_INFO_QUOTA=8,
 184                 LSA_POLICY_INFO_DB=9,
 185                 LSA_POLICY_INFO_AUDIT_FULL_SET=10,
 186                 LSA_POLICY_INFO_AUDIT_FULL_QUERY=11,
 187                 LSA_POLICY_INFO_DNS=12
 188         } lsaPolicyInfo;
 189
 190         typedef union {
 191                 [case(LSA_POLICY_INFO_AUDIT_LOG)]        lsa_AuditLogInfo       audit_log;
 192                 [case(LSA_POLICY_INFO_AUDIT_EVENTS)]     lsa_AuditEventsInfo    audit_events;
 193                 [case(LSA_POLICY_INFO_DOMAIN)]           lsa_DomainInfo         domain;
 194                 [case(LSA_POLICY_INFO_PD)]               lsa_PDAccountInfo      pd;
 195                 [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)]   lsa_DomainInfo         account_domain;
 196                 [case(LSA_POLICY_INFO_ROLE)]             lsa_ServerRole         role;
 197                 [case(LSA_POLICY_INFO_REPLICA)]          lsa_ReplicaSourceInfo  replica;
 198                 [case(LSA_POLICY_INFO_QUOTA)]            lsa_DefaultQuotaInfo   quota;
 199                 [case(LSA_POLICY_INFO_DB)]               lsa_ModificationInfo   db;
 200                 [case(LSA_POLICY_INFO_AUDIT_FULL_SET)]   lsa_AuditFullSetInfo   auditfullset;
 201                 [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery;
 202                 [case(LSA_POLICY_INFO_DNS)]              lsa_DnsDomainInfo      dns;
 203         } lsa_PolicyInformation;
 204
 205         NTSTATUS lsa_QueryInfoPolicy (
 206                 [in,ref]                 policy_handle *handle,
 207                 [in]                     uint16 level,
 208                 [out,switch_is(level)]   lsa_PolicyInformation *info
 209                 );
 210
 211         /******************/
 212         /* Function:       0x08 */
 213         NTSTATUS lsa_SetInfoPolicy ();
 214
 215         /******************/
 216         /* Function:       0x09 */
 217         NTSTATUS lsa_ClearAuditLog ();
 218
 219         /******************/
 220         /* Function: 0x0a */
 221         NTSTATUS lsa_CreateAccount (
 222                 [in,ref]    policy_handle *handle,
 223                 [in,ref]    dom_sid2 *sid,
 224                 [in]        uint32 access_mask,
 225                 [out,ref]   policy_handle *acct_handle
 226                 );
 227
 228         /******************/
 229         /* Function: 0x0b */
 230         typedef struct {
 231                 dom_sid2 *sid;
 232         } lsa_SidPtr;
 233
 234         typedef [public] struct {
 235                 [range(0,1000)] uint32 num_sids;
 236                 [size_is(num_sids)] lsa_SidPtr *sids;
 237         } lsa_SidArray;
 238
 239         NTSTATUS lsa_EnumAccounts (
 240                 [in,ref]     policy_handle *handle,
 241                 [in,out,ref] uint32 *resume_handle,
 242                 [in,range(0,1000)] uint32 num_entries,
 243                 [out,ref]    lsa_SidArray *sids
 244                 );
 245
 246
 247         /*************************************************/
 248         /* Function: 0x0c                                */
 249
 250         typedef struct {
 251                 lsa_Name name;
 252                 dom_sid2 *sid;
 253         } lsa_TrustInformation;
 254
 255         NTSTATUS lsa_CreateTrustedDomain(
 256                 [in,ref]     policy_handle *handle,
 257                 [in,ref]     lsa_TrustInformation *info,
 258                 [in]         uint32 access_mask,
 259                 [out,ref]    policy_handle *dom_handle
 260                 );
 261
 262
 263         /******************/
 264         /* Function: 0x0d */
 265
 266         typedef struct {
 267                 lsa_Name name;
 268                 dom_sid2 *sid;
 269         } lsa_DomainInformation;
 270
 271         typedef struct {
 272                 uint32 count;
 273                 [size_is(count)] lsa_DomainInformation *domains;
 274         } lsa_DomainList;
 275
 276         NTSTATUS lsa_EnumTrustDom (
 277                 [in,ref]     policy_handle *handle,
 278                 [in,out,ref] uint32 *resume_handle,
 279                 [in,range(0,1000)] uint32 num_entries,
 280                 [out,ref]    lsa_DomainList *domains
 281                 );
 282
 283
 284         /******************/
 285         /* Function: 0x0e */
 286
 287         typedef struct {
 288                 uint16 sid_type;
 289                 uint32 rid;
 290                 uint32 sid_index;
 291         } lsa_TranslatedSid;
 292
 293         typedef struct {
 294                 [range(0,1000)] uint32 count;
 295                 [size_is(count)] lsa_TranslatedSid *sids;
 296         } lsa_TransSidArray;
 297
 298         typedef struct {
 299                 [range(0,1000)] uint32 count;
 300                 [size_is(count)] lsa_TrustInformation *domains;
 301                 uint32 max_count;
 302         } lsa_RefDomainList;
 303
 304         NTSTATUS lsa_LookupNames (
 305                 [in,ref]     policy_handle *handle,
 306                 [in,range(0,1000)] uint32 num_names,
 307                 [in,ref,size_is(num_names)]  lsa_Name *names,
 308                 [out]        lsa_RefDomainList *domains,
 309                 [in,out,ref] lsa_TransSidArray *sids,
 310                 [in]         uint16 level,
 311                 [in,out,ref] uint32 *count
 312                 );
 313
 314
 315         /******************/
 316         /* Function: 0x0f */
 317
 318         typedef struct {
 319                 uint16 sid_type;
 320                 lsa_Name name;
 321                 uint32 sid_index;
 322         } lsa_TranslatedName;
 323
 324         typedef struct {
 325                 [range(0,1000)] uint32 count;
 326                 [size_is(count)] lsa_TranslatedName *names;
 327         } lsa_TransNameArray;
 328
 329         NTSTATUS lsa_LookupSids (
 330                 [in,ref]     policy_handle *handle,
 331                 [in,ref]     lsa_SidArray *sids,
 332                 [out]        lsa_RefDomainList *domains,
 333                 [in,out,ref] lsa_TransNameArray *names,
 334                 [in]         uint16 level,
 335                 [in,out,ref] uint32 *count
 336                 );
 337
 338
 339         /* Function:        0x10 */
 340         NTSTATUS lsa_CreateSecret(
 341                 [in,ref]     policy_handle *handle,
 342                 [in]         lsa_Name       name,
 343                 [in]         uint32         access_mask,
 344                 [out,ref]    policy_handle *sec_handle
 345                 );
 346
 347
 348         /*****************************************/
 349         /* Function:     0x11                    */
 350         NTSTATUS lsa_OpenAccount (
 351                 [in,ref]     policy_handle *handle,
 352                 [in,ref]     dom_sid2 *sid,
 353                 [in]         uint32 access_mask,
 354                 [out,ref]    policy_handle *acct_handle
 355                 );
 356
 357
 358         /****************************************/
 359         /* Function:    0x12                    */
 360
 361         typedef struct {
 362                 uint32 low;
 363                 uint32 high;
 364         } lsa_LUID;
 365
 366         typedef struct {
 367                 lsa_LUID luid;
 368                 uint32 attribute;
 369         } lsa_LUIDAttribute;
 370
 371         typedef struct {
 372                 uint32 count;
 373                 uint32 unknown;
 374                 [size_is(count)] lsa_LUIDAttribute set[*];
 375         } lsa_PrivilegeSet;
 376
 377         NTSTATUS lsa_EnumPrivsAccount (
 378                 [in,ref]     policy_handle *handle,
 379                 [out]        lsa_PrivilegeSet *privs
 380                 );
 381
 382
 383         /* Function:            0x13 */
 384         NTSTATUS lsa_AddPrivilegesToAccount();
 385
 386         /* Function:         0x14 */
 387         NTSTATUS lsa_RemovePrivilegesFromAccount();
 388
 389         /* Function:           0x15 */
 390         NTSTATUS lsa_GetQuotasForAccount();
 391
 392         /* Function:           0x16 */
 393         NTSTATUS lsa_SetQuotasForAccount();
 394
 395         /* Function:    0x17 */
 396         NTSTATUS lsa_GetSystemAccessAccount();
 397         /* Function:    0x18 */
 398         NTSTATUS lsa_SetSystemAccessAccount();
 399         /* Function:        0x19 */
 400         NTSTATUS lsa_OpenTrustedDomain();
 401         /* Function:       0x1a */
 402         NTSTATUS lsa_QueryInfoTrustedDomain();
 403         /* Function:     0x1b */
 404         NTSTATUS lsa_SetInformationTrustedDomain();
 405
 406         /* Function:          0x1c */
 407         NTSTATUS lsa_OpenSecret(
 408                 [in,ref]     policy_handle *handle,
 409                 [in]         lsa_Name       name,
 410                 [in]         uint32         access_mask,
 411                 [out,ref]    policy_handle *sec_handle
 412                 );
 413
 414         /* Function:           0x1d */
 415         typedef [flag(NDR_PAHEX)] struct {
 416                 uint32 length;
 417                 uint32 size;
 418                 [size_is(size),length_is(length)] uint8 *data;
 419         } lsa_DATA_BUF;
 420
 421         NTSTATUS lsa_SetSecret(
 422                 [in,ref]     policy_handle *handle,
 423                 [in]         lsa_DATA_BUF     *new_val,
 424                 [in]         lsa_DATA_BUF     *old_val
 425                 );
 426
 427         typedef struct {
 428                 lsa_DATA_BUF *buf;
 429         } lsa_DATA_BUF_PTR;
 430
 431         /* Function:         0x1e */
 432         NTSTATUS lsa_QuerySecret (
 433                 [in,ref]     policy_handle *handle,
 434                 [in,out]     lsa_DATA_BUF_PTR  *new_val,
 435                 [in,out]     NTTIME            *new_mtime,
 436                 [in,out]     lsa_DATA_BUF_PTR  *old_val,
 437                 [in,out]     NTTIME            *old_mtime
 438                 );
 439
 440         /* Function:     0x1f */
 441         NTSTATUS lsa_LookupPrivValue();
 442
 443
 444         /* Function:      0x20 */
 445         NTSTATUS lsa_LookupPrivName (
 446                 [in,ref]     policy_handle *handle,
 447                 [in,ref]     lsa_LUID *luid,
 448                 [out]        lsa_Name *name
 449                 );
 450
 451
 452         /*******************/
 453         /* Function:  0x21 */
 454         NTSTATUS lsa_LookupPrivDisplayName (
 455                 [in,ref]     policy_handle *handle,
 456                 [in,ref]     lsa_Name *name,
 457                 [out]        lsa_Name *disp_name,
 458                 /* see http://www.microsoft.com/globaldev/nlsweb/ for
 459                    language definitions */
 460                 [in,out,ref] uint16 *language_id,
 461                 [in]         uint16 unknown
 462                 );
 463
 464         /* Function:        0x22 */
 465         NTSTATUS lsa_DeleteObject();
 466
 467
 468         /*******************/
 469         /* Function:      0x23 */
 470         NTSTATUS lsa_EnumAccountsWithUserRight (
 471                 [in,ref]     policy_handle *handle,
 472                 [in]         lsa_Name *name,
 473                 [out,ref]    lsa_SidArray *sids
 474                 );
 475
 476         /* Function:      0x24 */
 477         typedef struct {
 478                 unistr *name;
 479         } lsa_RightAttribute;
 480
 481         typedef struct {
 482                 uint32 count;
 483                 [size_is(count)] lsa_Name *names;
 484         } lsa_RightSet;
 485
 486         NTSTATUS lsa_EnumAccountRights (
 487                 [in,ref]     policy_handle *handle,
 488                 [in,ref]     dom_sid2 *sid,
 489                 [out,ref]    lsa_RightSet *rights
 490                 );
 491
 492
 493         /**********************/
 494         /* Function:       0x25 */
 495         NTSTATUS lsa_AddAccountRights (
 496                 [in,ref]     policy_handle *handle,
 497                 [in,ref]     dom_sid2 *sid,
 498                 [in,ref]     lsa_RightSet *rights
 499                 );
 500
 501         /**********************/
 502         /* Function:       0x26 */
 503         NTSTATUS lsa_RemoveAccountRights (
 504                 [in,ref]     policy_handle *handle,
 505                 [in,ref]     dom_sid2 *sid,
 506                 [in]         uint32 unknown,
 507                 [in,ref]     lsa_RightSet *rights
 508                 );
 509
 510         /* Function:   0x27 */
 511         NTSTATUS lsa_QueryTrustDomainInfo();
 512         /* Function:     0x28 */
 513         NTSTATUS lsa_SetTrustDomainInfo();
 514         /* Function:      0x29 */
 515         NTSTATUS lsa_DeleteTrustDomain();
 516         /* Function:       0x2a */
 517         NTSTATUS lsa_StorePrivateData();
 518         /* Function:        0x2b */
 519         NTSTATUS lsa_RetrievePrivateData();
 520
 521
 522         /**********************/
 523         /* Function:     0x2c */
 524         NTSTATUS lsa_OpenPolicy2 (
 525                 [in]      unistr *system_name,
 526                 [in,ref]  lsa_ObjectAttribute *attr,
 527                 [in]      uint32 access_mask,
 528                 [out,ref] policy_handle *handle
 529                 );
 530
 531
 532         /* Function:    0x2d */
 533         NTSTATUS lsa_GetUserName();
 534
 535         /**********************/
 536         /* Function:          0x2e */
 537
 538         NTSTATUS lsa_QueryInfoPolicy2(
 539                 [in,ref]                 policy_handle *handle,
 540                 [in]                     uint16 level,
 541                 [out,switch_is(level)]   lsa_PolicyInformation *info
 542                 );
 543
 544         /* Function 0x2f */
 545         NTSTATUS lsa_SetInfoPolicy2();
 546
 547         /* Function 0x30 */
 548         NTSTATUS lsa_QueryTrustedDomainInfoByName();
 549
 550         /* Function 0x31 */
 551         NTSTATUS lsa_SetTrustedDomainInfoByName();
 552
 553         /* Function 0x32 */
 554         NTSTATUS lsa_EnumTrustedDomainsEx();
 555
 556         /* Function 0x33 */
 557         NTSTATUS lsa_CreateTrustedDomainEx();
 558
 559         /* Function 0x34 */
 560         NTSTATUS lsa_CloseTrustedDomainEx();
 561
 562         /* Function 0x35 */
 563         NTSTATUS lsa_QueryDomainInformationPolicy();
 564
 565         /* Function 0x36 */
 566         NTSTATUS lsa_SetDomInfoPolicy();
 567
 568         /* Function 0x37 */
 569         NTSTATUS lsa_OpenTrustedDomainByName();
 570
 571         /* Function 0x38 */
 572         NTSTATUS lsa_TestCall();
 573
 574         /* Function 0x39 */
 575         NTSTATUS lsa_LookupSids2();
 576
 577         /* Function 0x3a */
 578         NTSTATUS lsa_LookupNames2();
 579
 580         /* Function 0x3b */
 581         NTSTATUS lsa_CreateTrustedDomainEx2();
 582 }