| // Licensed under the Apache License, Version 2.0 |
| // <LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0> or the MIT license |
| // <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your option. |
| // All files in the project carrying such notice may not be copied, modified, or distributed |
| // except according to those terms. |
| use shared::basetsd::{SIZE_T, ULONG_PTR}; |
| use shared::guiddef::GUID; |
| use shared::minwindef::{PUCHAR, PULONG, UCHAR, ULONG, USHORT}; |
| use shared::ntdef::{NTSTATUS, PNTSTATUS}; |
| use um::lsalookup::{ |
| LSA_TRUST_INFORMATION, LSA_UNICODE_STRING, PLSA_OBJECT_ATTRIBUTES, |
| PLSA_REFERENCED_DOMAIN_LIST, PLSA_STRING, PLSA_TRANSLATED_NAME, PLSA_TRANSLATED_SID2, |
| PLSA_TRUST_INFORMATION, PLSA_UNICODE_STRING, |
| }; |
| use um::ntsecapi::PLSA_HANDLE; |
| use um::subauth::{PUNICODE_STRING, UNICODE_STRING}; |
| use um::winnt::{ |
| ACCESS_MASK, ANYSIZE_ARRAY, BOOLEAN, HANDLE, LARGE_INTEGER, LONG, LUID, PBOOLEAN, |
| PCLAIMS_BLOB, PHANDLE, PLARGE_INTEGER, PLUID, PPRIVILEGE_SET, PQUOTA_LIMITS, |
| PSECURITY_DESCRIPTOR, PSHORT, PSID, PTOKEN_GROUPS, PTOKEN_PRIVILEGES, PTOKEN_SOURCE, PVOID, |
| PWSTR, QUOTA_LIMITS, SECURITY_INFORMATION, SID_NAME_USE, STANDARD_RIGHTS_EXECUTE, |
| STANDARD_RIGHTS_READ, STANDARD_RIGHTS_REQUIRED, STANDARD_RIGHTS_WRITE, TOKEN_DEFAULT_DACL, |
| TOKEN_DEVICE_CLAIMS, TOKEN_OWNER, TOKEN_PRIMARY_GROUP, TOKEN_USER, TOKEN_USER_CLAIMS, |
| }; |
| pub type LSA_OPERATIONAL_MODE = ULONG; |
| pub type PLSA_OPERATIONAL_MODE = *mut LSA_OPERATIONAL_MODE; |
| pub const LSA_MODE_PASSWORD_PROTECTED: ULONG = 0x00000001; |
| pub const LSA_MODE_INDIVIDUAL_ACCOUNTS: ULONG = 0x00000002; |
| pub const LSA_MODE_MANDATORY_ACCESS: ULONG = 0x00000004; |
| pub const LSA_MODE_LOG_FULL: ULONG = 0x00000008; |
| pub const LSA_MAXIMUM_SID_COUNT: SIZE_T = 0x00000100; |
| pub const LSA_MAXIMUM_ENUMERATION_LENGTH: SIZE_T = 32000; |
| pub const LSA_CALL_LICENSE_SERVER: ULONG = 0x80000000; |
| ENUM!{enum SECURITY_LOGON_TYPE { |
| UndefinedLogonType = 0, |
| Interactive = 2, |
| Network, |
| Batch, |
| Service, |
| Proxy, |
| Unlock, |
| NetworkCleartext, |
| NewCredentials, |
| RemoteInteractive, |
| CachedInteractive, |
| CachedRemoteInteractive, |
| CachedUnlock, |
| }} |
| pub type PSECURITY_LOGON_TYPE = *mut SECURITY_LOGON_TYPE; |
| pub const SECURITY_ACCESS_INTERACTIVE_LOGON: ULONG = 0x00000001; |
| pub const SECURITY_ACCESS_NETWORK_LOGON: ULONG = 0x00000002; |
| pub const SECURITY_ACCESS_BATCH_LOGON: ULONG = 0x00000004; |
| pub const SECURITY_ACCESS_SERVICE_LOGON: ULONG = 0x00000010; |
| pub const SECURITY_ACCESS_PROXY_LOGON: ULONG = 0x00000020; |
| pub const SECURITY_ACCESS_DENY_INTERACTIVE_LOGON: ULONG = 0x00000040; |
| pub const SECURITY_ACCESS_DENY_NETWORK_LOGON: ULONG = 0x00000080; |
| pub const SECURITY_ACCESS_DENY_BATCH_LOGON: ULONG = 0x00000100; |
| pub const SECURITY_ACCESS_DENY_SERVICE_LOGON: ULONG = 0x00000200; |
| pub const SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON: ULONG = 0x00000400; |
| pub const SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON: ULONG = 0x00000800; |
| ENUM!{enum SE_ADT_PARAMETER_TYPE { |
| SeAdtParmTypeNone = 0, |
| SeAdtParmTypeString, |
| SeAdtParmTypeFileSpec, |
| SeAdtParmTypeUlong, |
| SeAdtParmTypeSid, |
| SeAdtParmTypeLogonId, |
| SeAdtParmTypeNoLogonId, |
| SeAdtParmTypeAccessMask, |
| SeAdtParmTypePrivs, |
| SeAdtParmTypeObjectTypes, |
| SeAdtParmTypeHexUlong, |
| SeAdtParmTypePtr, |
| SeAdtParmTypeTime, |
| SeAdtParmTypeGuid, |
| SeAdtParmTypeLuid, |
| SeAdtParmTypeHexInt64, |
| SeAdtParmTypeStringList, |
| SeAdtParmTypeSidList, |
| SeAdtParmTypeDuration, |
| SeAdtParmTypeUserAccountControl, |
| SeAdtParmTypeNoUac, |
| SeAdtParmTypeMessage, |
| SeAdtParmTypeDateTime, |
| SeAdtParmTypeSockAddr, |
| SeAdtParmTypeSD, |
| SeAdtParmTypeLogonHours, |
| SeAdtParmTypeLogonIdNoSid, |
| SeAdtParmTypeUlongNoConv, |
| SeAdtParmTypeSockAddrNoPort, |
| SeAdtParmTypeAccessReason, |
| SeAdtParmTypeStagingReason, |
| SeAdtParmTypeResourceAttribute, |
| SeAdtParmTypeClaims, |
| SeAdtParmTypeLogonIdAsSid, |
| SeAdtParmTypeMultiSzString, |
| SeAdtParmTypeLogonIdEx, |
| }} |
| pub type PSE_ADT_PARAMETER_TYPE = *mut SE_ADT_PARAMETER_TYPE; |
| pub const SE_ADT_OBJECT_ONLY: USHORT = 0x1; |
| STRUCT!{struct SE_ADT_OBJECT_TYPE { |
| ObjectType: GUID, |
| Flags: USHORT, |
| Level: USHORT, |
| AccessMask: ACCESS_MASK, |
| }} |
| pub type PSE_ADT_OBJECT_TYPE = *mut SE_ADT_OBJECT_TYPE; |
| STRUCT!{struct SE_ADT_PARAMETER_ARRAY_ENTRY { |
| Type: SE_ADT_PARAMETER_TYPE, |
| Length: ULONG, |
| Data: [ULONG_PTR; 2], |
| Address: PVOID, |
| }} |
| pub type PSE_ADT_PARAMETER_ARRAY_ENTRY = *mut SE_ADT_PARAMETER_ARRAY_ENTRY; |
| STRUCT!{struct SE_ADT_ACCESS_REASON { |
| AccessMask: ACCESS_MASK, |
| AccessReasons: [ULONG; 32], |
| ObjectTypeIndex: ULONG, |
| AccessGranted: ULONG, |
| SecurityDescriptor: PSECURITY_DESCRIPTOR, |
| }} |
| pub type PSE_ADT_ACCESS_REASON = *mut SE_ADT_ACCESS_REASON; |
| STRUCT!{struct SE_ADT_CLAIMS { |
| Length: ULONG, |
| Claims: PCLAIMS_BLOB, |
| }} |
| pub type PSE_ADT_CLAIMS = *mut SE_ADT_CLAIMS; |
| pub const SE_MAX_AUDIT_PARAMETERS: SIZE_T = 32; |
| pub const SE_MAX_GENERIC_AUDIT_PARAMETERS: SIZE_T = 28; |
| STRUCT!{struct SE_ADT_PARAMETER_ARRAY { |
| CategoryId: ULONG, |
| AuditId: ULONG, |
| ParameterCount: ULONG, |
| Length: ULONG, |
| FlatSubCategoryId: USHORT, |
| Type: USHORT, |
| Flags: ULONG, |
| Parameters: [SE_ADT_PARAMETER_ARRAY_ENTRY; SE_MAX_AUDIT_PARAMETERS], |
| }} |
| pub type PSE_ADT_PARAMETER_ARRAY = *mut SE_ADT_PARAMETER_ARRAY; |
| STRUCT!{struct SE_ADT_PARAMETER_ARRAY_EX { |
| CategoryId: ULONG, |
| AuditId: ULONG, |
| Version: ULONG, |
| ParameterCount: ULONG, |
| Length: ULONG, |
| FlatSubCategoryId: USHORT, |
| Type: USHORT, |
| Flags: ULONG, |
| Parameters: [SE_ADT_PARAMETER_ARRAY_ENTRY; SE_MAX_AUDIT_PARAMETERS], |
| }} |
| pub type PSE_ADT_PARAMETER_ARRAY_EX = *mut SE_ADT_PARAMETER_ARRAY_EX; |
| pub const SE_ADT_PARAMETERS_SELF_RELATIVE: ULONG = 0x00000001; |
| pub const SE_ADT_PARAMETERS_SEND_TO_LSA: ULONG = 0x00000002; |
| pub const SE_ADT_PARAMETER_EXTENSIBLE_AUDIT: ULONG = 0x00000004; |
| pub const SE_ADT_PARAMETER_GENERIC_AUDIT: ULONG = 0x00000008; |
| pub const SE_ADT_PARAMETER_WRITE_SYNCHRONOUS: ULONG = 0x00000010; |
| #[cfg(target_pointer_width = "32")] |
| #[inline] |
| pub fn LSAP_SE_ADT_PARAMETER_ARRAY_TRUE_SIZE( |
| AuditParameters: SE_ADT_PARAMETER_ARRAY, |
| ) -> SIZE_T { |
| 664 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY>() |
| - (20 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY_ENTRY>() |
| * (SE_MAX_AUDIT_PARAMETERS - AuditParameters.ParameterCount as SIZE_T)) |
| } |
| #[cfg(target_pointer_width = "64")] |
| #[inline] |
| pub fn LSAP_SE_ADT_PARAMETER_ARRAY_TRUE_SIZE( |
| AuditParameters: SE_ADT_PARAMETER_ARRAY, |
| ) -> SIZE_T { |
| 1048 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY>() |
| - (32 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY_ENTRY>() |
| * (SE_MAX_AUDIT_PARAMETERS - AuditParameters.ParameterCount as SIZE_T)) |
| } |
| STRUCT!{struct LSA_ADT_STRING_LIST_ENTRY { |
| Flags: ULONG, |
| String: UNICODE_STRING, |
| }} |
| pub type PLSA_ADT_STRING_LIST_ENTRY = *mut LSA_ADT_STRING_LIST_ENTRY; |
| STRUCT!{struct LSA_ADT_STRING_LIST { |
| cStrings: ULONG, |
| String: PLSA_ADT_STRING_LIST_ENTRY, |
| }} |
| pub type PLSA_ADT_STRING_LIST = *mut LSA_ADT_STRING_LIST; |
| STRUCT!{struct LSA_ADT_SID_LIST_ENTRY { |
| Flags: ULONG, |
| Sid: PSID, |
| }} |
| pub type PLSA_ADT_SID_LIST_ENTRY = *mut LSA_ADT_SID_LIST_ENTRY; |
| STRUCT!{struct LSA_ADT_SID_LIST { |
| cSids: ULONG, |
| Sid: PLSA_ADT_SID_LIST_ENTRY, |
| }} |
| pub type PLSA_ADT_SID_LIST = *mut LSA_ADT_SID_LIST; |
| pub const LSA_ADT_SECURITY_SOURCE_NAME: &'static str = "Microsoft-Windows-Security-Auditing"; |
| pub const LSA_ADT_LEGACY_SECURITY_SOURCE_NAME: &'static str = "Security"; |
| pub const SE_ADT_POLICY_AUDIT_EVENT_TYPE_EX_BEGIN: ULONG = 100; |
| ENUM!{enum POLICY_AUDIT_EVENT_TYPE_EX { |
| iSystem_SecurityStateChange = SE_ADT_POLICY_AUDIT_EVENT_TYPE_EX_BEGIN, |
| iSystem_SecuritySubsystemExtension, |
| iSystem_Integrity, |
| iSystem_IPSecDriverEvents, |
| iSystem_Others, |
| iLogon_Logon, |
| iLogon_Logoff, |
| iLogon_AccountLockout, |
| iLogon_IPSecMainMode, |
| iLogon_SpecialLogon, |
| iLogon_IPSecQuickMode, |
| iLogon_IPSecUsermode, |
| iLogon_Others, |
| iLogon_NPS, |
| iLogon_Claims, |
| iLogon_Groups, |
| iObjectAccess_FileSystem, |
| iObjectAccess_Registry, |
| iObjectAccess_Kernel, |
| iObjectAccess_Sam, |
| iObjectAccess_Other, |
| iObjectAccess_CertificationAuthority, |
| iObjectAccess_ApplicationGenerated, |
| iObjectAccess_HandleBasedAudits, |
| iObjectAccess_Share, |
| iObjectAccess_FirewallPacketDrops, |
| iObjectAccess_FirewallConnection, |
| iObjectAccess_DetailedFileShare, |
| iObjectAccess_RemovableStorage, |
| iObjectAccess_CbacStaging, |
| iPrivilegeUse_Sensitive, |
| iPrivilegeUse_NonSensitive, |
| iPrivilegeUse_Others, |
| iDetailedTracking_ProcessCreation, |
| iDetailedTracking_ProcessTermination, |
| iDetailedTracking_DpapiActivity, |
| iDetailedTracking_RpcCall, |
| iDetailedTracking_PnpActivity, |
| iDetailedTracking_TokenRightAdjusted, |
| iPolicyChange_AuditPolicy, |
| iPolicyChange_AuthenticationPolicy, |
| iPolicyChange_AuthorizationPolicy, |
| iPolicyChange_MpsscvRulePolicy, |
| iPolicyChange_WfpIPSecPolicy, |
| iPolicyChange_Others, |
| iAccountManagement_UserAccount, |
| iAccountManagement_ComputerAccount, |
| iAccountManagement_SecurityGroup, |
| iAccountManagement_DistributionGroup, |
| iAccountManagement_ApplicationGroup, |
| iAccountManagement_Others, |
| iDSAccess_DSAccess, |
| iDSAccess_AdAuditChanges, |
| iDS_Replication, |
| iDS_DetailedReplication, |
| iAccountLogon_CredentialValidation, |
| iAccountLogon_Kerberos, |
| iAccountLogon_Others, |
| iAccountLogon_KerbCredentialValidation, |
| iUnknownSubCategory = 999, |
| }} |
| pub type PPOLICY_AUDIT_EVENT_TYPE_EX = *mut POLICY_AUDIT_EVENT_TYPE_EX; |
| ENUM!{enum POLICY_AUDIT_EVENT_TYPE { |
| AuditCategorySystem = 0, |
| AuditCategoryLogon, |
| AuditCategoryObjectAccess, |
| AuditCategoryPrivilegeUse, |
| AuditCategoryDetailedTracking, |
| AuditCategoryPolicyChange, |
| AuditCategoryAccountManagement, |
| AuditCategoryDirectoryServiceAccess, |
| AuditCategoryAccountLogon, |
| }} |
| pub type PPOLICY_AUDIT_EVENT_TYPE = *mut POLICY_AUDIT_EVENT_TYPE; |
| pub const POLICY_AUDIT_EVENT_UNCHANGED: ULONG = 0x00000000; |
| pub const POLICY_AUDIT_EVENT_SUCCESS: ULONG = 0x00000001; |
| pub const POLICY_AUDIT_EVENT_FAILURE: ULONG = 0x00000002; |
| pub const POLICY_AUDIT_EVENT_NONE: ULONG = 0x00000004; |
| pub const POLICY_AUDIT_EVENT_MASK: ULONG = POLICY_AUDIT_EVENT_SUCCESS | POLICY_AUDIT_EVENT_FAILURE |
| | POLICY_AUDIT_EVENT_UNCHANGED | POLICY_AUDIT_EVENT_NONE; |
| #[inline] |
| pub fn LSA_SUCCESS(Error: NTSTATUS) -> bool { |
| (Error as LONG) >= 0 |
| } |
| extern "system" { |
| pub fn LsaRegisterLogonProcess( |
| LogonProcessName: PLSA_STRING, |
| LsaHandle: PHANDLE, |
| SecurityMode: PLSA_OPERATIONAL_MODE, |
| ) -> NTSTATUS; |
| pub fn LsaLogonUser( |
| LsaHandle: HANDLE, |
| OriginName: PLSA_STRING, |
| LogonType: SECURITY_LOGON_TYPE, |
| AuthenticationPackage: ULONG, |
| AuthenticationInformation: PVOID, |
| AuthenticationInformationLength: ULONG, |
| LocalGroups: PTOKEN_GROUPS, |
| SourceContext: PTOKEN_SOURCE, |
| ProfileBuffer: *mut PVOID, |
| ProfileBufferLength: PULONG, |
| LogonId: PLUID, |
| Token: PHANDLE, |
| Quotas: PQUOTA_LIMITS, |
| SubStatus: PNTSTATUS, |
| ) -> NTSTATUS; |
| pub fn LsaLookupAuthenticationPackage( |
| LsaHandle: HANDLE, |
| PackageName: PLSA_STRING, |
| AuthenticationPackage: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaFreeReturnBuffer( |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaCallAuthenticationPackage( |
| LsaHandle: HANDLE, |
| AuthenticationPackage: ULONG, |
| ProtocolSubmitBuffer: PVOID, |
| SubmitBufferLength: ULONG, |
| ProtocolReturnBuffer: *mut PVOID, |
| ReturnBufferLength: PULONG, |
| ProtocolStatus: PNTSTATUS, |
| ) -> NTSTATUS; |
| pub fn LsaDeregisterLogonProcess( |
| LsaHandle: HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaConnectUntrusted( |
| LsaHandle: PHANDLE, |
| ) -> NTSTATUS; |
| } |
| extern "C" { |
| pub fn LsaInsertProtectedProcessAddress( |
| BufferAddress: PVOID, |
| BufferSize: ULONG, |
| ) -> NTSTATUS; |
| pub fn LsaRemoveProtectedProcessAddress( |
| BufferAddress: PVOID, |
| BufferSize: ULONG, |
| ) -> NTSTATUS; |
| } |
| FN!{stdcall PFN_LSA_CALL_AUTH_PKG( |
| LsaHandle: HANDLE, |
| AuthenticationPackage: ULONG, |
| ProtocolSubmitBuffer: PVOID, |
| SubmitBufferLength: ULONG, |
| ProtocolReturnBuffer: *mut PVOID, |
| ReturnBufferLength: PULONG, |
| ProtocolStatus: PNTSTATUS, |
| ) -> NTSTATUS} |
| FN!{stdcall PFN_LSA_DEREGISTER_PROC( |
| LsaHandle: HANDLE, |
| ) -> NTSTATUS} |
| FN!{stdcall PFN_LSA_FREE_BUFFER( |
| Buffer: PVOID, |
| ) -> NTSTATUS} |
| FN!{stdcall PFN_LSA_LOGON_USER( |
| LsaHandle: HANDLE, |
| OriginName: PLSA_STRING, |
| LogonType: SECURITY_LOGON_TYPE, |
| AuthenticationPackage: ULONG, |
| AuthenticationInformation: PVOID, |
| AuthenticationInformationLength: ULONG, |
| LocalGroups: PTOKEN_GROUPS, |
| SourceContext: PTOKEN_SOURCE, |
| ProfileBuffer: *mut PVOID, |
| ProfileBufferLength: PULONG, |
| LogonId: PLUID, |
| Token: PHANDLE, |
| Quotas: PQUOTA_LIMITS, |
| SubStatus: PNTSTATUS, |
| ) -> NTSTATUS} |
| FN!{stdcall PFN_LOOKUP_AUTH_PKG( |
| LsaHandle: HANDLE, |
| PackageName: PLSA_STRING, |
| AuthenticationPackage: PULONG, |
| ) -> NTSTATUS} |
| FN!{stdcall PFN_LSA_REGISTER_PROC( |
| LogonProcessName: PLSA_STRING, |
| LsaHandle: PHANDLE, |
| SecurityMode: PLSA_OPERATIONAL_MODE, |
| ) -> NTSTATUS} |
| STRUCT!{struct LSA_AUTH_CALLBACKS { |
| LsaCallAuthPkgFn: PFN_LSA_CALL_AUTH_PKG, |
| LsaDeregisterProcFn: PFN_LSA_DEREGISTER_PROC, |
| LsaFreeReturnBufferFn: PFN_LSA_FREE_BUFFER, |
| LsaLogonUserFn: PFN_LSA_LOGON_USER, |
| LsaLookupAuthPkgFn: PFN_LOOKUP_AUTH_PKG, |
| LsaRegisterProcFn: PFN_LSA_REGISTER_PROC, |
| }} |
| pub type PLSA_AUTH_CALLBACKS = *mut LSA_AUTH_CALLBACKS; |
| pub type PCLSA_AUTH_CALLBACKS = *const LSA_AUTH_CALLBACKS; |
| pub type PLSA_CLIENT_REQUEST = *mut PVOID; |
| ENUM!{enum LSA_TOKEN_INFORMATION_TYPE { |
| LsaTokenInformationNull, |
| LsaTokenInformationV1, |
| LsaTokenInformationV2, |
| LsaTokenInformationV3, |
| }} |
| pub type PLSA_TOKEN_INFORMATION_TYPE = *mut LSA_TOKEN_INFORMATION_TYPE; |
| STRUCT!{struct LSA_TOKEN_INFORMATION_NULL { |
| ExpirationTime: LARGE_INTEGER, |
| Groups: PTOKEN_GROUPS, |
| }} |
| pub type PLSA_TOKEN_INFORMATION_NULL = *mut LSA_TOKEN_INFORMATION_NULL; |
| STRUCT!{struct LSA_TOKEN_INFORMATION_V1 { |
| ExpirationTime: LARGE_INTEGER, |
| User: TOKEN_USER, |
| Groups: PTOKEN_GROUPS, |
| PrimaryGroup: TOKEN_PRIMARY_GROUP, |
| Privileges: PTOKEN_PRIVILEGES, |
| Owner: TOKEN_OWNER, |
| DefaultDacl: TOKEN_DEFAULT_DACL, |
| }} |
| pub type PLSA_TOKEN_INFORMATION_V1 = *mut LSA_TOKEN_INFORMATION_V1; |
| pub type LSA_TOKEN_INFORMATION_V2 = LSA_TOKEN_INFORMATION_V1; |
| pub type PLSA_TOKEN_INFORMATION_V2 = *mut LSA_TOKEN_INFORMATION_V2; |
| STRUCT!{struct LSA_TOKEN_INFORMATION_V3 { |
| ExpirationTime: LARGE_INTEGER, |
| User: TOKEN_USER, |
| Groups: PTOKEN_GROUPS, |
| PrimaryGroup: TOKEN_PRIMARY_GROUP, |
| Privileges: PTOKEN_PRIVILEGES, |
| Owner: TOKEN_OWNER, |
| DefaultDacl: TOKEN_DEFAULT_DACL, |
| UserClaims: TOKEN_USER_CLAIMS, |
| DeviceClaims: TOKEN_DEVICE_CLAIMS, |
| DeviceGroups: PTOKEN_GROUPS, |
| }} |
| pub type PLSA_TOKEN_INFORMATION_V3 = *mut LSA_TOKEN_INFORMATION_V3; |
| FN!{stdcall PLSA_CREATE_LOGON_SESSION( |
| LogonId: PLUID, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_DELETE_LOGON_SESSION( |
| LogonId: PLUID, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_ADD_CREDENTIAL( |
| LogonId: PLUID, |
| AuthenticationPackage: ULONG, |
| PrimaryKeyValue: PLSA_STRING, |
| Credentials: PLSA_STRING, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_GET_CREDENTIALS( |
| LogonId: PLUID, |
| AuthenticationPackage: ULONG, |
| QueryContext: PULONG, |
| RetrieveAllCredentials: BOOLEAN, |
| PrimaryKeyValue: PLSA_STRING, |
| PrimaryKeyLength: PULONG, |
| Credentials: PLSA_STRING, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_DELETE_CREDENTIAL( |
| LogonId: PLUID, |
| AuthenticationPackage: ULONG, |
| PrimaryKeyValue: PLSA_STRING, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_ALLOCATE_LSA_HEAP( |
| Length: ULONG, |
| ) -> PVOID} |
| FN!{stdcall PLSA_FREE_LSA_HEAP( |
| Base: PVOID, |
| ) -> ()} |
| FN!{stdcall PLSA_ALLOCATE_PRIVATE_HEAP( |
| Length: SIZE_T, |
| ) -> PVOID} |
| FN!{stdcall PLSA_FREE_PRIVATE_HEAP( |
| Base: PVOID, |
| ) -> ()} |
| FN!{stdcall PLSA_ALLOCATE_CLIENT_BUFFER( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| LengthRequired: ULONG, |
| ClientBaseAddress: *mut PVOID, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_FREE_CLIENT_BUFFER( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| ClientBaseAddress: PVOID, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_COPY_TO_CLIENT_BUFFER( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| Length: ULONG, |
| ClientBaseAddress: PVOID, |
| BufferToCopy: PVOID, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_COPY_FROM_CLIENT_BUFFER( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| Length: ULONG, |
| BufferToCopy: PVOID, |
| ClientBaseAddress: PVOID, |
| ) -> NTSTATUS} |
| STRUCT!{struct LSA_DISPATCH_TABLE { |
| CreateLogonSession: PLSA_CREATE_LOGON_SESSION, |
| DeleteLogonSession: PLSA_DELETE_LOGON_SESSION, |
| AddCredential: PLSA_ADD_CREDENTIAL, |
| GetCredentials: PLSA_GET_CREDENTIALS, |
| DeleteCredential: PLSA_DELETE_CREDENTIAL, |
| AllocateLsaHeap: PLSA_ALLOCATE_LSA_HEAP, |
| FreeLsaHeap: PLSA_FREE_LSA_HEAP, |
| AllocateClientBuffer: PLSA_ALLOCATE_CLIENT_BUFFER, |
| FreeClientBuffer: PLSA_FREE_CLIENT_BUFFER, |
| CopyToClientBuffer: PLSA_COPY_TO_CLIENT_BUFFER, |
| CopyFromClientBuffer: PLSA_COPY_FROM_CLIENT_BUFFER, |
| }} |
| pub type PLSA_DISPATCH_TABLE = *mut LSA_DISPATCH_TABLE; |
| pub const LSA_AP_NAME_INITIALIZE_PACKAGE: &'static str = "LsaApInitializePackage"; |
| pub const LSA_AP_NAME_LOGON_USER: &'static str = "LsaApLogonUser"; |
| pub const LSA_AP_NAME_LOGON_USER_EX: &'static str = "LsaApLogonUserEx"; |
| pub const LSA_AP_NAME_CALL_PACKAGE: &'static str = "LsaApCallPackage"; |
| pub const LSA_AP_NAME_LOGON_TERMINATED: &'static str = "LsaApLogonTerminated"; |
| pub const LSA_AP_NAME_CALL_PACKAGE_UNTRUSTED: &'static str = "LsaApCallPackageUntrusted"; |
| pub const LSA_AP_NAME_CALL_PACKAGE_PASSTHROUGH: &'static str = "LsaApCallPackagePassthrough"; |
| FN!{stdcall PLSA_AP_INITIALIZE_PACKAGE( |
| AuthenticationPackageId: ULONG, |
| LsaDispatchTable: PLSA_DISPATCH_TABLE, |
| Database: PLSA_STRING, |
| Confidentiality: PLSA_STRING, |
| AuthenticationPackageName: *mut PLSA_STRING, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_AP_LOGON_USER( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| LogonType: SECURITY_LOGON_TYPE, |
| AuthenticationInformation: PVOID, |
| ClientAuthentication: PVOID, |
| AuthenticationInformationLength: ULONG, |
| ProfileBuffer: *mut PVOID, |
| ProfileBufferLength: PULONG, |
| LogonId: PLUID, |
| SubStatus: PNTSTATUS, |
| TokenInformationType: PLSA_TOKEN_INFORMATION_TYPE, |
| TokenInformation: *mut PVOID, |
| AccountName: *mut PLSA_UNICODE_STRING, |
| AuthenticatingAutority: *mut PLSA_UNICODE_STRING, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_AP_LOGON_USER_EX( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| LogonType: SECURITY_LOGON_TYPE, |
| AuthenticationInformation: PVOID, |
| ClientAuthentication: PVOID, |
| AuthenticationInformationLength: ULONG, |
| ProfileBuffer: *mut PVOID, |
| ProfileBufferLength: PULONG, |
| LogonId: PLUID, |
| SubStatus: PNTSTATUS, |
| TokenInformationType: PLSA_TOKEN_INFORMATION_TYPE, |
| TokenInformation: *mut PVOID, |
| AccountName: *mut PLSA_UNICODE_STRING, |
| AuthenticatingAutority: *mut PLSA_UNICODE_STRING, |
| MachineName: *mut PUNICODE_STRING, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_AP_CALL_PACKAGE( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| ProtocolSubmitBuffer: PVOID, |
| ClientBufferBase: PVOID, |
| SubmitBufferLength: ULONG, |
| ProtocolReturnBuffer: *mut PVOID, |
| ReturnBufferLength: PULONG, |
| ProtocolStatus: PNTSTATUS, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_AP_CALL_PACKAGE_PASSTHROUGH( |
| ClientRequest: PLSA_CLIENT_REQUEST, |
| ProtocolSubmitBuffer: PVOID, |
| ClientBufferBase: PVOID, |
| SubmitBufferLength: ULONG, |
| ProtocolReturnBuffer: *mut PVOID, |
| ReturnBufferLength: PULONG, |
| ProtocolStatus: PNTSTATUS, |
| ) -> NTSTATUS} |
| FN!{stdcall PLSA_AP_LOGON_TERMINATED( |
| LogonId: PLUID, |
| ) -> ()} |
| pub const POLICY_VIEW_LOCAL_INFORMATION: ULONG = 0x00000001; |
| pub const POLICY_VIEW_AUDIT_INFORMATION: ULONG = 0x00000002; |
| pub const POLICY_GET_PRIVATE_INFORMATION: ULONG = 0x00000004; |
| pub const POLICY_TRUST_ADMIN: ULONG = 0x00000008; |
| pub const POLICY_CREATE_ACCOUNT: ULONG = 0x00000010; |
| pub const POLICY_CREATE_SECRET: ULONG = 0x00000020; |
| pub const POLICY_CREATE_PRIVILEGE: ULONG = 0x00000040; |
| pub const POLICY_SET_DEFAULT_QUOTA_LIMITS: ULONG = 0x00000080; |
| pub const POLICY_SET_AUDIT_REQUIREMENTS: ULONG = 0x00000100; |
| pub const POLICY_AUDIT_LOG_ADMIN: ULONG = 0x00000200; |
| pub const POLICY_SERVER_ADMIN: ULONG = 0x00000400; |
| pub const POLICY_LOOKUP_NAMES: ULONG = 0x00000800; |
| pub const POLICY_NOTIFICATION: ULONG = 0x00001000; |
| pub const POLICY_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | POLICY_VIEW_LOCAL_INFORMATION |
| | POLICY_VIEW_AUDIT_INFORMATION | POLICY_GET_PRIVATE_INFORMATION | POLICY_TRUST_ADMIN |
| | POLICY_CREATE_ACCOUNT | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE |
| | POLICY_SET_DEFAULT_QUOTA_LIMITS | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN |
| | POLICY_SERVER_ADMIN | POLICY_LOOKUP_NAMES; |
| pub const POLICY_READ: ULONG = STANDARD_RIGHTS_READ | POLICY_VIEW_AUDIT_INFORMATION |
| | POLICY_GET_PRIVATE_INFORMATION; |
| pub const POLICY_WRITE: ULONG = STANDARD_RIGHTS_WRITE | POLICY_TRUST_ADMIN | POLICY_CREATE_ACCOUNT |
| | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE | POLICY_SET_DEFAULT_QUOTA_LIMITS |
| | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN | POLICY_SERVER_ADMIN; |
| pub const POLICY_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE | POLICY_VIEW_LOCAL_INFORMATION |
| | POLICY_LOOKUP_NAMES; |
| STRUCT!{struct LSA_TRANSLATED_SID { |
| Use: SID_NAME_USE, |
| RelativeId: ULONG, |
| DomainIndex: LONG, |
| }} |
| pub type PLSA_TRANSLATED_SID = *mut LSA_TRANSLATED_SID; |
| pub type POLICY_SYSTEM_ACCESS_MODE = ULONG; |
| pub type PPOLICY_SYSTEM_ACCESS_MODE = *mut POLICY_SYSTEM_ACCESS_MODE; |
| pub const POLICY_MODE_INTERACTIVE: ULONG = SECURITY_ACCESS_INTERACTIVE_LOGON; |
| pub const POLICY_MODE_NETWORK: ULONG = SECURITY_ACCESS_NETWORK_LOGON; |
| pub const POLICY_MODE_BATCH: ULONG = SECURITY_ACCESS_BATCH_LOGON; |
| pub const POLICY_MODE_SERVICE: ULONG = SECURITY_ACCESS_SERVICE_LOGON; |
| pub const POLICY_MODE_PROXY: ULONG = SECURITY_ACCESS_PROXY_LOGON; |
| pub const POLICY_MODE_DENY_INTERACTIVE: ULONG = SECURITY_ACCESS_DENY_INTERACTIVE_LOGON; |
| pub const POLICY_MODE_DENY_NETWORK: ULONG = SECURITY_ACCESS_DENY_NETWORK_LOGON; |
| pub const POLICY_MODE_DENY_BATCH: ULONG = SECURITY_ACCESS_DENY_BATCH_LOGON; |
| pub const POLICY_MODE_DENY_SERVICE: ULONG = SECURITY_ACCESS_DENY_SERVICE_LOGON; |
| pub const POLICY_MODE_REMOTE_INTERACTIVE: ULONG = SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON; |
| pub const POLICY_MODE_DENY_REMOTE_INTERACTIVE: ULONG = |
| SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON; |
| pub const POLICY_MODE_ALL: ULONG = POLICY_MODE_INTERACTIVE | POLICY_MODE_NETWORK |
| | POLICY_MODE_BATCH | POLICY_MODE_SERVICE | POLICY_MODE_PROXY | POLICY_MODE_DENY_INTERACTIVE |
| | POLICY_MODE_DENY_NETWORK | SECURITY_ACCESS_DENY_BATCH_LOGON |
| | SECURITY_ACCESS_DENY_SERVICE_LOGON | POLICY_MODE_REMOTE_INTERACTIVE |
| | POLICY_MODE_DENY_REMOTE_INTERACTIVE ; |
| pub const POLICY_MODE_ALL_NT4: ULONG = POLICY_MODE_INTERACTIVE | POLICY_MODE_NETWORK |
| | POLICY_MODE_BATCH | POLICY_MODE_SERVICE; |
| ENUM!{enum POLICY_LSA_SERVER_ROLE { |
| PolicyServerRoleBackup = 2, |
| PolicyServerRolePrimary, |
| }} |
| pub type PPOLICY_LSA_SERVER_ROLE = *mut POLICY_LSA_SERVER_ROLE; |
| ENUM!{enum POLICY_SERVER_ENABLE_STATE { |
| PolicyServerEnabled = 2, |
| PolicyServerDisabled, |
| }} |
| pub type PPOLICY_SERVER_ENABLE_STATE = *mut POLICY_SERVER_ENABLE_STATE; |
| pub type POLICY_AUDIT_EVENT_OPTIONS = ULONG; |
| pub type PPOLICY_AUDIT_EVENT_OPTIONS = *mut POLICY_AUDIT_EVENT_OPTIONS; |
| STRUCT!{struct POLICY_PRIVILEGE_DEFINITION { |
| Name: LSA_UNICODE_STRING, |
| LocalValue: LUID, |
| }} |
| pub type PPOLICY_PRIVILEGE_DEFINITION = *mut POLICY_PRIVILEGE_DEFINITION; |
| pub const LSA_LOOKUP_ISOLATED_AS_LOCAL: ULONG = 0x80000000; |
| pub const LSA_LOOKUP_DISALLOW_CONNECTED_ACCOUNT_INTERNET_SID: ULONG = 0x80000000; |
| pub const LSA_LOOKUP_PREFER_INTERNET_NAMES: ULONG = 0x40000000; |
| ENUM!{enum POLICY_INFORMATION_CLASS { |
| PolicyAuditLogInformation = 1, |
| PolicyAuditEventsInformation, |
| PolicyPrimaryDomainInformation, |
| PolicyPdAccountInformation, |
| PolicyAccountDomainInformation, |
| PolicyLsaServerRoleInformation, |
| PolicyReplicaSourceInformation, |
| PolicyDefaultQuotaInformation, |
| PolicyModificationInformation, |
| PolicyAuditFullSetInformation, |
| PolicyAuditFullQueryInformation, |
| PolicyDnsDomainInformation, |
| PolicyDnsDomainInformationInt, |
| PolicyLocalAccountDomainInformation, |
| PolicyLastEntry, |
| }} |
| pub type PPOLICY_INFORMATION_CLASS = *mut POLICY_INFORMATION_CLASS; |
| STRUCT!{struct POLICY_AUDIT_LOG_INFO { |
| AuditLogPercentFull: ULONG, |
| MaximumLogSize: ULONG, |
| AuditRetentionPeriod: LARGE_INTEGER, |
| AuditLogFullShutdownInProgress: BOOLEAN, |
| TimeToShutdown: LARGE_INTEGER, |
| NextAuditRecordId: ULONG, |
| }} |
| pub type PPOLICY_AUDIT_LOG_INFO = *mut POLICY_AUDIT_LOG_INFO; |
| STRUCT!{struct POLICY_AUDIT_EVENTS_INFO { |
| AuditingMode: BOOLEAN, |
| EventAuditingOptions: PPOLICY_AUDIT_EVENT_OPTIONS, |
| MaximumAuditEventCount: ULONG, |
| }} |
| pub type PPOLICY_AUDIT_EVENTS_INFO = *mut POLICY_AUDIT_EVENTS_INFO; |
| STRUCT!{struct POLICY_AUDIT_SUBCATEGORIES_INFO { |
| MaximumSubCategoryCount: ULONG, |
| EventAuditingOptions: PPOLICY_AUDIT_EVENT_OPTIONS, |
| }} |
| pub type PPOLICY_AUDIT_SUBCATEGORIES_INFO = *mut POLICY_AUDIT_SUBCATEGORIES_INFO; |
| STRUCT!{struct POLICY_AUDIT_CATEGORIES_INFO { |
| MaximumCategoryCount: ULONG, |
| SubCategoriesInfo: PPOLICY_AUDIT_SUBCATEGORIES_INFO, |
| }} |
| pub type PPOLICY_AUDIT_CATEGORIES_INFO = *mut POLICY_AUDIT_CATEGORIES_INFO; |
| pub const PER_USER_POLICY_UNCHANGED: UCHAR = 0x00; |
| pub const PER_USER_AUDIT_SUCCESS_INCLUDE: UCHAR = 0x01; |
| pub const PER_USER_AUDIT_SUCCESS_EXCLUDE: UCHAR = 0x02; |
| pub const PER_USER_AUDIT_FAILURE_INCLUDE: UCHAR = 0x04; |
| pub const PER_USER_AUDIT_FAILURE_EXCLUDE: UCHAR = 0x08; |
| pub const PER_USER_AUDIT_NONE: UCHAR = 0x10; |
| pub const VALID_PER_USER_AUDIT_POLICY_FLAG: UCHAR = PER_USER_AUDIT_SUCCESS_INCLUDE |
| | PER_USER_AUDIT_SUCCESS_EXCLUDE | PER_USER_AUDIT_FAILURE_INCLUDE |
| | PER_USER_AUDIT_FAILURE_EXCLUDE | PER_USER_AUDIT_NONE; |
| STRUCT!{struct POLICY_PRIMARY_DOMAIN_INFO { |
| Name: LSA_UNICODE_STRING, |
| Sid: PSID, |
| }} |
| pub type PPOLICY_PRIMARY_DOMAIN_INFO = *mut POLICY_PRIMARY_DOMAIN_INFO; |
| STRUCT!{struct POLICY_PD_ACCOUNT_INFO { |
| Name: LSA_UNICODE_STRING, |
| }} |
| pub type PPOLICY_PD_ACCOUNT_INFO = *mut POLICY_PD_ACCOUNT_INFO; |
| STRUCT!{struct POLICY_LSA_SERVER_ROLE_INFO { |
| LsaServerRole: POLICY_LSA_SERVER_ROLE, |
| }} |
| pub type PPOLICY_LSA_SERVER_ROLE_INFO = *mut POLICY_LSA_SERVER_ROLE_INFO; |
| STRUCT!{struct POLICY_REPLICA_SOURCE_INFO { |
| ReplicaSource: LSA_UNICODE_STRING, |
| ReplicaAccountName: LSA_UNICODE_STRING, |
| }} |
| pub type PPOLICY_REPLICA_SOURCE_INFO = *mut POLICY_REPLICA_SOURCE_INFO; |
| STRUCT!{struct POLICY_DEFAULT_QUOTA_INFO { |
| QuotaLimits: QUOTA_LIMITS, |
| }} |
| pub type PPOLICY_DEFAULT_QUOTA_INFO = *mut POLICY_DEFAULT_QUOTA_INFO; |
| STRUCT!{struct POLICY_MODIFICATION_INFO { |
| ModifiedId: LARGE_INTEGER, |
| DatabaseCreationTime: LARGE_INTEGER, |
| }} |
| pub type PPOLICY_MODIFICATION_INFO = *mut POLICY_MODIFICATION_INFO; |
| STRUCT!{struct POLICY_AUDIT_FULL_SET_INFO { |
| ShutDownOnFull: BOOLEAN, |
| }} |
| pub type PPOLICY_AUDIT_FULL_SET_INFO = *mut POLICY_AUDIT_FULL_SET_INFO; |
| STRUCT!{struct POLICY_AUDIT_FULL_QUERY_INFO { |
| ShutDownOnFull: BOOLEAN, |
| LogIsFull: BOOLEAN, |
| }} |
| pub type PPOLICY_AUDIT_FULL_QUERY_INFO = *mut POLICY_AUDIT_FULL_QUERY_INFO; |
| ENUM!{enum POLICY_DOMAIN_INFORMATION_CLASS { |
| PolicyDomainEfsInformation = 2, |
| PolicyDomainKerberosTicketInformation, |
| }} |
| pub type PPOLICY_DOMAIN_INFORMATION_CLASS = *mut POLICY_DOMAIN_INFORMATION_CLASS; |
| pub const POLICY_QOS_SCHANNEL_REQUIRED: ULONG = 0x00000001; |
| pub const POLICY_QOS_OUTBOUND_INTEGRITY: ULONG = 0x00000002; |
| pub const POLICY_QOS_OUTBOUND_CONFIDENTIALITY: ULONG = 0x00000004; |
| pub const POLICY_QOS_INBOUND_INTEGRITY: ULONG = 0x00000008; |
| pub const POLICY_QOS_INBOUND_CONFIDENTIALITY: ULONG = 0x00000010; |
| pub const POLICY_QOS_ALLOW_LOCAL_ROOT_CERT_STORE: ULONG = 0x00000020; |
| pub const POLICY_QOS_RAS_SERVER_ALLOWED: ULONG = 0x00000040; |
| pub const POLICY_QOS_DHCP_SERVER_ALLOWED: ULONG = 0x00000080; |
| STRUCT!{struct POLICY_DOMAIN_EFS_INFO { |
| InfoLength: ULONG, |
| EfsBlob: PUCHAR, |
| }} |
| pub type PPOLICY_DOMAIN_EFS_INFO = *mut POLICY_DOMAIN_EFS_INFO; |
| pub const POLICY_KERBEROS_VALIDATE_CLIENT: ULONG = 0x00000080; |
| STRUCT!{struct POLICY_DOMAIN_KERBEROS_TICKET_INFO { |
| AuthenticationOptions: ULONG, |
| MaxServiceTicketAge: LARGE_INTEGER, |
| MaxTicketAge: LARGE_INTEGER, |
| MaxRenewAge: LARGE_INTEGER, |
| MaxClockSkew: LARGE_INTEGER, |
| Reserved: LARGE_INTEGER, |
| }} |
| pub type PPOLICY_DOMAIN_KERBEROS_TICKET_INFO = *mut POLICY_DOMAIN_KERBEROS_TICKET_INFO; |
| ENUM!{enum POLICY_NOTIFICATION_INFORMATION_CLASS { |
| PolicyNotifyAuditEventsInformation = 1, |
| PolicyNotifyAccountDomainInformation, |
| PolicyNotifyServerRoleInformation, |
| PolicyNotifyDnsDomainInformation, |
| PolicyNotifyDomainEfsInformation, |
| PolicyNotifyDomainKerberosTicketInformation, |
| PolicyNotifyMachineAccountPasswordInformation, |
| PolicyNotifyGlobalSaclInformation, |
| PolicyNotifyMax, |
| }} |
| pub type PPOLICY_NOTIFICATION_INFORMATION_CLASS = *mut POLICY_NOTIFICATION_INFORMATION_CLASS; |
| pub const ACCOUNT_VIEW: ULONG = 0x00000001; |
| pub const ACCOUNT_ADJUST_PRIVILEGES: ULONG = 0x00000002; |
| pub const ACCOUNT_ADJUST_QUOTAS: ULONG = 0x00000004; |
| pub const ACCOUNT_ADJUST_SYSTEM_ACCESS: ULONG = 0x00000008; |
| pub const ACCOUNT_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | ACCOUNT_VIEW |
| | ACCOUNT_ADJUST_PRIVILEGES | ACCOUNT_ADJUST_QUOTAS | ACCOUNT_ADJUST_SYSTEM_ACCESS; |
| pub const ACCOUNT_READ: ULONG = STANDARD_RIGHTS_READ | ACCOUNT_VIEW; |
| pub const ACCOUNT_WRITE: ULONG = STANDARD_RIGHTS_WRITE | ACCOUNT_ADJUST_PRIVILEGES |
| | ACCOUNT_ADJUST_QUOTAS | ACCOUNT_ADJUST_SYSTEM_ACCESS; |
| pub const ACCOUNT_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE; |
| DECLARE_HANDLE!{LSA_HANDLE, __LSA_HANDLE} |
| pub const TRUSTED_QUERY_DOMAIN_NAME: ULONG = 0x00000001; |
| pub const TRUSTED_QUERY_CONTROLLERS: ULONG = 0x00000002; |
| pub const TRUSTED_SET_CONTROLLERS: ULONG = 0x00000004; |
| pub const TRUSTED_QUERY_POSIX: ULONG = 0x00000008; |
| pub const TRUSTED_SET_POSIX: ULONG = 0x00000010; |
| pub const TRUSTED_SET_AUTH: ULONG = 0x00000020; |
| pub const TRUSTED_QUERY_AUTH: ULONG = 0x00000040; |
| pub const TRUSTED_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | TRUSTED_QUERY_DOMAIN_NAME |
| | TRUSTED_QUERY_CONTROLLERS | TRUSTED_SET_CONTROLLERS | TRUSTED_QUERY_POSIX | TRUSTED_SET_POSIX |
| | TRUSTED_SET_AUTH | TRUSTED_QUERY_AUTH; |
| pub const TRUSTED_READ: ULONG = STANDARD_RIGHTS_READ | TRUSTED_QUERY_DOMAIN_NAME; |
| pub const TRUSTED_WRITE: ULONG = STANDARD_RIGHTS_WRITE | TRUSTED_SET_CONTROLLERS |
| | TRUSTED_SET_POSIX | TRUSTED_SET_AUTH; |
| pub const TRUSTED_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE | TRUSTED_QUERY_CONTROLLERS |
| | TRUSTED_QUERY_POSIX; |
| ENUM!{enum TRUSTED_INFORMATION_CLASS { |
| TrustedDomainNameInformation = 1, |
| TrustedControllersInformation, |
| TrustedPosixOffsetInformation, |
| TrustedPasswordInformation, |
| TrustedDomainInformationBasic, |
| TrustedDomainInformationEx, |
| TrustedDomainAuthInformation, |
| TrustedDomainFullInformation, |
| TrustedDomainAuthInformationInternal, |
| TrustedDomainFullInformationInternal, |
| TrustedDomainInformationEx2Internal, |
| TrustedDomainFullInformation2Internal, |
| TrustedDomainSupportedEncryptionTypes, |
| }} |
| pub type PTRUSTED_INFORMATION_CLASS = *mut TRUSTED_INFORMATION_CLASS; |
| STRUCT!{struct TRUSTED_DOMAIN_NAME_INFO { |
| Name: LSA_UNICODE_STRING, |
| }} |
| pub type PTRUSTED_DOMAIN_NAME_INFO = *mut TRUSTED_DOMAIN_NAME_INFO; |
| STRUCT!{struct TRUSTED_CONTROLLERS_INFO { |
| Entries: ULONG, |
| Names: PLSA_UNICODE_STRING, |
| }} |
| pub type PTRUSTED_CONTROLLERS_INFO = *mut TRUSTED_CONTROLLERS_INFO; |
| STRUCT!{struct TRUSTED_POSIX_OFFSET_INFO { |
| Offset: ULONG, |
| }} |
| pub type PTRUSTED_POSIX_OFFSET_INFO = *mut TRUSTED_POSIX_OFFSET_INFO; |
| STRUCT!{struct TRUSTED_PASSWORD_INFO { |
| Password: LSA_UNICODE_STRING, |
| OldPassword: LSA_UNICODE_STRING, |
| }} |
| pub type PTRUSTED_PASSWORD_INFO = *mut TRUSTED_PASSWORD_INFO; |
| pub type TRUSTED_DOMAIN_INFORMATION_BASIC = LSA_TRUST_INFORMATION; |
| pub type PTRUSTED_DOMAIN_INFORMATION_BASIC = PLSA_TRUST_INFORMATION; |
| // NOTE: Ignoring Win XP constants |
| pub const TRUST_DIRECTION_DISABLED: ULONG = 0x00000000; |
| pub const TRUST_DIRECTION_INBOUND: ULONG = 0x00000001; |
| pub const TRUST_DIRECTION_OUTBOUND: ULONG = 0x00000002; |
| pub const TRUST_DIRECTION_BIDIRECTIONAL: ULONG = TRUST_DIRECTION_INBOUND |
| | TRUST_DIRECTION_OUTBOUND; |
| pub const TRUST_TYPE_DOWNLEVEL: ULONG = 0x00000001; |
| pub const TRUST_TYPE_UPLEVEL: ULONG = 0x00000002; |
| pub const TRUST_TYPE_MIT: ULONG = 0x00000003; |
| pub const TRUST_ATTRIBUTE_NON_TRANSITIVE: ULONG = 0x00000001; |
| pub const TRUST_ATTRIBUTE_UPLEVEL_ONLY: ULONG = 0x00000002; |
| pub const TRUST_ATTRIBUTE_QUARANTINED_DOMAIN: ULONG = 0x00000004; |
| pub const TRUST_ATTRIBUTE_FOREST_TRANSITIVE: ULONG = 0x00000008; |
| pub const TRUST_ATTRIBUTE_CROSS_ORGANIZATION: ULONG = 0x00000010; |
| pub const TRUST_ATTRIBUTE_WITHIN_FOREST: ULONG = 0x00000020; |
| pub const TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL: ULONG = 0x00000040; |
| pub const TRUST_ATTRIBUTE_TRUST_USES_RC4_ENCRYPTION: ULONG = 0x00000080; |
| pub const TRUST_ATTRIBUTE_TRUST_USES_AES_KEYS: ULONG = 0x00000100; |
| pub const TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION: ULONG = 0x00000200; |
| pub const TRUST_ATTRIBUTE_PIM_TRUST: ULONG = 0x00000400; |
| pub const TRUST_ATTRIBUTES_VALID: ULONG = 0xFF03FFFF; |
| pub const TRUST_ATTRIBUTES_USER: ULONG = 0xFF000000; |
| STRUCT!{struct TRUSTED_DOMAIN_INFORMATION_EX { |
| Name: LSA_UNICODE_STRING, |
| FlatName: LSA_UNICODE_STRING, |
| Sid: PSID, |
| TrustDirection: ULONG, |
| TrustType: ULONG, |
| TrustAttributes: ULONG, |
| }} |
| pub type PTRUSTED_DOMAIN_INFORMATION_EX = *mut TRUSTED_DOMAIN_INFORMATION_EX; |
| STRUCT!{struct TRUSTED_DOMAIN_INFORMATION_EX2 { |
| Name: LSA_UNICODE_STRING, |
| FlatName: LSA_UNICODE_STRING, |
| Sid: PSID, |
| TrustDirection: ULONG, |
| TrustType: ULONG, |
| TrustAttributes: ULONG, |
| ForestTrustLength: ULONG, |
| ForestTrustInfo: PUCHAR, |
| }} |
| pub type PTRUSTED_DOMAIN_INFORMATION_EX2 = *mut TRUSTED_DOMAIN_INFORMATION_EX2; |
| pub const TRUST_AUTH_TYPE_NONE: ULONG = 0; |
| pub const TRUST_AUTH_TYPE_NT4OWF: ULONG = 1; |
| pub const TRUST_AUTH_TYPE_CLEAR: ULONG = 2; |
| pub const TRUST_AUTH_TYPE_VERSION: ULONG = 3; |
| STRUCT!{struct LSA_AUTH_INFORMATION { |
| LastUpdateTime: LARGE_INTEGER, |
| AuthType: ULONG, |
| AuthInfoLength: ULONG, |
| AuthInfo: PUCHAR, |
| }} |
| pub type PLSA_AUTH_INFORMATION = *mut LSA_AUTH_INFORMATION; |
| STRUCT!{struct TRUSTED_DOMAIN_AUTH_INFORMATION { |
| IncomingAuthInfos: ULONG, |
| IncomingAuthenticationInformation: PLSA_AUTH_INFORMATION, |
| IncomingPreviousAuthenticationInformation: PLSA_AUTH_INFORMATION, |
| OutgoingAuthInfos: ULONG, |
| OutgoingAuthenticationInformation: PLSA_AUTH_INFORMATION, |
| OutgoingPreviousAuthenticationInformation: PLSA_AUTH_INFORMATION, |
| }} |
| pub type PTRUSTED_DOMAIN_AUTH_INFORMATION = *mut TRUSTED_DOMAIN_AUTH_INFORMATION; |
| STRUCT!{struct TRUSTED_DOMAIN_FULL_INFORMATION { |
| Information: TRUSTED_DOMAIN_INFORMATION_EX, |
| PosixOffset: TRUSTED_POSIX_OFFSET_INFO, |
| AuthInformation: TRUSTED_DOMAIN_AUTH_INFORMATION, |
| }} |
| pub type PTRUSTED_DOMAIN_FULL_INFORMATION = *mut TRUSTED_DOMAIN_FULL_INFORMATION; |
| STRUCT!{struct TRUSTED_DOMAIN_FULL_INFORMATION2 { |
| Information: TRUSTED_DOMAIN_INFORMATION_EX2, |
| PosixOffset: TRUSTED_POSIX_OFFSET_INFO, |
| AuthInformation: TRUSTED_DOMAIN_AUTH_INFORMATION, |
| }} |
| pub type PTRUSTED_DOMAIN_FULL_INFORMATION2 = *mut TRUSTED_DOMAIN_FULL_INFORMATION2; |
| STRUCT!{struct TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES { |
| SupportedEncryptionTypes: ULONG, |
| }} |
| pub type PTRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES = |
| *mut TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES; |
| ENUM!{enum LSA_FOREST_TRUST_RECORD_TYPE { |
| ForestTrustTopLevelName, |
| ForestTrustTopLevelNameEx, |
| ForestTrustDomainInfo, |
| ForestTrustRecordTypeLast = ForestTrustDomainInfo, |
| }} |
| pub const LSA_FTRECORD_DISABLED_REASONS: ULONG = 0x0000FFFF; |
| pub const LSA_TLN_DISABLED_NEW: ULONG = 0x00000001; |
| pub const LSA_TLN_DISABLED_ADMIN: ULONG = 0x00000002; |
| pub const LSA_TLN_DISABLED_CONFLICT: ULONG = 0x00000004; |
| pub const LSA_SID_DISABLED_ADMIN: ULONG = 0x00000001; |
| pub const LSA_SID_DISABLED_CONFLICT: ULONG = 0x00000002; |
| pub const LSA_NB_DISABLED_ADMIN: ULONG = 0x00000004; |
| pub const LSA_NB_DISABLED_CONFLICT: ULONG = 0x00000008; |
| STRUCT!{struct LSA_FOREST_TRUST_DOMAIN_INFO { |
| Sid: PSID, |
| DnsName: LSA_UNICODE_STRING, |
| NetbiosName: LSA_UNICODE_STRING, |
| }} |
| pub type PLSA_FOREST_TRUST_DOMAIN_INFO = *mut LSA_FOREST_TRUST_DOMAIN_INFO; |
| pub const MAX_FOREST_TRUST_BINARY_DATA_SIZE: SIZE_T = 128 * 1024; |
| STRUCT!{struct LSA_FOREST_TRUST_BINARY_DATA { |
| Length: ULONG, |
| Buffer: PUCHAR, |
| }} |
| pub type PLSA_FOREST_TRUST_BINARY_DATA = *mut LSA_FOREST_TRUST_BINARY_DATA; |
| UNION!{union LSA_FOREST_TRUST_RECORD_FORESTTRUSTDATA { |
| [u32; 5] [u64; 5], |
| TopLevelName TopLevelName_mut: LSA_UNICODE_STRING, |
| DomainInfo DomainInfo_mut: LSA_FOREST_TRUST_DOMAIN_INFO, |
| Data Data_mut: LSA_FOREST_TRUST_BINARY_DATA, |
| }} |
| STRUCT!{struct LSA_FOREST_TRUST_RECORD { |
| Flags: ULONG, |
| ForestTrustType: LSA_FOREST_TRUST_RECORD_TYPE, |
| Time: LARGE_INTEGER, |
| ForestTrustData: LSA_FOREST_TRUST_RECORD_FORESTTRUSTDATA, |
| }} |
| pub type PLSA_FOREST_TRUST_RECORD = *mut LSA_FOREST_TRUST_RECORD; |
| pub const MAX_RECORDS_IN_FOREST_TRUST_INFO: SIZE_T = 4000; |
| STRUCT!{struct LSA_FOREST_TRUST_INFORMATION { |
| RecordCount: ULONG, |
| Entries: *mut PLSA_FOREST_TRUST_RECORD, |
| }} |
| pub type PLSA_FOREST_TRUST_INFORMATION = LSA_FOREST_TRUST_INFORMATION; |
| ENUM!{enum LSA_FOREST_TRUST_COLLISION_RECORD_TYPE { |
| CollisionTdo, |
| CollisionXref, |
| CollisionOther, |
| }} |
| STRUCT!{struct LSA_FOREST_TRUST_COLLISION_RECORD { |
| Index: ULONG, |
| Type: LSA_FOREST_TRUST_COLLISION_RECORD_TYPE, |
| Flags: ULONG, |
| Name: LSA_UNICODE_STRING, |
| }} |
| pub type PLSA_FOREST_TRUST_COLLISION_RECORD = *mut LSA_FOREST_TRUST_COLLISION_RECORD; |
| STRUCT!{struct LSA_FOREST_TRUST_COLLISION_INFORMATION { |
| RecordCount: ULONG, |
| Entries: *mut PLSA_FOREST_TRUST_COLLISION_RECORD, |
| }} |
| pub type PLSA_FOREST_TRUST_COLLISION_INFORMATION = *mut LSA_FOREST_TRUST_COLLISION_INFORMATION; |
| pub const SECRET_SET_VALUE: ULONG = 0x00000001; |
| pub const SECRET_QUERY_VALUE: ULONG = 0x00000002; |
| pub const SECRET_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | SECRET_SET_VALUE |
| | SECRET_QUERY_VALUE; |
| pub const SECRET_READ: ULONG = STANDARD_RIGHTS_READ | SECRET_QUERY_VALUE; |
| pub const SECRET_WRITE: ULONG = STANDARD_RIGHTS_WRITE | SECRET_SET_VALUE; |
| pub const SECRET_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE; |
| pub const LSA_GLOBAL_SECRET_PREFIX: &'static str = "G$"; |
| pub const LSA_GLOBAL_SECRET_PREFIX_LENGTH: SIZE_T = 2; |
| pub const LSA_LOCAL_SECRET_PREFIX: &'static str = "L$"; |
| pub const LSA_LOCAL_SECRET_PREFIX_LENGTH: SIZE_T = 2; |
| pub const LSA_MACHINE_SECRET_PREFIX: &'static str = "M$"; |
| pub const LSA_MACHINE_SECRET_PREFIX_LENGTH: SIZE_T = 2; |
| pub const LSA_SECRET_MAXIMUM_COUNT: SIZE_T = 0x00001000; |
| pub const LSA_SECRET_MAXIMUM_LENGTH: SIZE_T = 0x00000200; |
| DECLARE_HANDLE!{LSA_ENUMERATION_HANDLE, __LSA_ENUMERATION_HANDLE} |
| pub type PLSA_ENUMERATION_HANDLE = *mut LSA_ENUMERATION_HANDLE; |
| STRUCT!{struct LSA_ENUMERATION_INFORMATION { |
| Sid: PSID, |
| }} |
| pub type PLSA_ENUMERATION_INFORMATION = *mut LSA_ENUMERATION_INFORMATION; |
| extern "system" { |
| pub fn LsaFreeMemory( |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaClose( |
| ObjectHandle: LSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaDelete( |
| ObjectHandle: LSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaQuerySecurityObject( |
| ObjectHandle: LSA_HANDLE, |
| SecurityInformation: SECURITY_INFORMATION, |
| SecurityDescriptor: *mut PSECURITY_DESCRIPTOR, |
| ) -> NTSTATUS; |
| pub fn LsaSetSecurityObject( |
| ObjectHandle: LSA_HANDLE, |
| SecurityInformation: SECURITY_INFORMATION, |
| SecurityDescriptor: PSECURITY_DESCRIPTOR, |
| ) -> NTSTATUS; |
| pub fn LsaChangePassword( |
| ServerName: PLSA_UNICODE_STRING, |
| DomainName: PLSA_UNICODE_STRING, |
| AccountName: PLSA_UNICODE_STRING, |
| OldPassword: PLSA_UNICODE_STRING, |
| NewPassword: PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| } |
| STRUCT!{struct LSA_LAST_INTER_LOGON_INFO { |
| LastSuccessfulLogon: LARGE_INTEGER, |
| LastFailedLogon: LARGE_INTEGER, |
| FailedAttemptCountSinceLastSuccessfulLogon: ULONG, |
| }} |
| pub type PLSA_LAST_INTER_LOGON_INFO = *mut LSA_LAST_INTER_LOGON_INFO; |
| STRUCT!{struct SECURITY_LOGON_SESSION_DATA { |
| Size: ULONG, |
| LogonId: LUID, |
| UserName: LSA_UNICODE_STRING, |
| LogonDomain: LSA_UNICODE_STRING, |
| AuthenticationPackage: LSA_UNICODE_STRING, |
| LogonType: ULONG, |
| Session: ULONG, |
| Sid: PSID, |
| LogonTime: LARGE_INTEGER, |
| LogonServer: LSA_UNICODE_STRING, |
| DnsDomainName: LSA_UNICODE_STRING, |
| Upn: LSA_UNICODE_STRING, |
| UserFlags: ULONG, |
| LastLogonInfo: LSA_LAST_INTER_LOGON_INFO, |
| LogonScript: LSA_UNICODE_STRING, |
| ProfilePath: LSA_UNICODE_STRING, |
| HomeDirectory: LSA_UNICODE_STRING, |
| HomeDirectoryDrive: LSA_UNICODE_STRING, |
| LogoffTime: LARGE_INTEGER, |
| KickOffTime: LARGE_INTEGER, |
| PasswordLastSet: LARGE_INTEGER, |
| PasswordCanChange: LARGE_INTEGER, |
| PasswordMustChange: LARGE_INTEGER, |
| }} |
| pub type PSECURITY_LOGON_SESSION_DATA = *mut SECURITY_LOGON_SESSION_DATA; |
| extern "system" { |
| pub fn LsaEnumerateLogonSessions( |
| LogonSessionCount: PULONG, |
| LogonSessionList: *mut PLUID, |
| ) -> NTSTATUS; |
| pub fn LsaGetLogonSessionData( |
| LogonId: PLUID, |
| ppLogonSessionData: *mut PSECURITY_LOGON_SESSION_DATA, |
| ) -> NTSTATUS; |
| pub fn LsaOpenPolicy( |
| SystemName: PLSA_UNICODE_STRING, |
| ObjectAttributes: PLSA_OBJECT_ATTRIBUTES, |
| DesiredAccess: ACCESS_MASK, |
| PolicyHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaOpenPolicySce( |
| SystemName: PLSA_UNICODE_STRING, |
| ObjectAttributes: PLSA_OBJECT_ATTRIBUTES, |
| DesiredAccess: ACCESS_MASK, |
| PolicyHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| } |
| pub const MAXIMUM_CAPES_PER_CAP: SIZE_T = 0x7F; |
| pub const CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG: ULONG = 0x00000001; |
| pub const CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG: ULONG = 0x00000100; |
| #[inline] |
| pub fn STAGING_FLAG(Effective: ULONG) -> ULONG { |
| (Effective & 0xF) << 8 |
| } |
| pub const CENTRAL_ACCESS_POLICY_STAGED_FLAG: ULONG = 0x00010000; |
| pub const CENTRAL_ACCESS_POLICY_VALID_FLAG_MASK: ULONG = |
| CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG |
| | CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG | CENTRAL_ACCESS_POLICY_STAGED_FLAG; |
| pub const LSASETCAPS_RELOAD_FLAG: ULONG = 0x00000001; |
| pub const LSASETCAPS_VALID_FLAG_MASK: ULONG = LSASETCAPS_RELOAD_FLAG; |
| STRUCT!{struct CENTRAL_ACCESS_POLICY_ENTRY { |
| Name: LSA_UNICODE_STRING, |
| Description: LSA_UNICODE_STRING, |
| ChangeId: LSA_UNICODE_STRING, |
| LengthAppliesTo: ULONG, |
| AppliesTo: PUCHAR, |
| LengthSD: ULONG, |
| SD: PSECURITY_DESCRIPTOR, |
| LengthStagedSD: ULONG, |
| StagedSD: PSECURITY_DESCRIPTOR, |
| Flags: ULONG, |
| }} |
| pub type PCENTRAL_ACCESS_POLICY_ENTRY = *mut CENTRAL_ACCESS_POLICY_ENTRY; |
| pub type PCCENTRAL_ACCESS_POLICY_ENTRY = *const CENTRAL_ACCESS_POLICY_ENTRY; |
| STRUCT!{struct CENTRAL_ACCESS_POLICY { |
| CAPID: PSID, |
| Name: LSA_UNICODE_STRING, |
| Description: LSA_UNICODE_STRING, |
| ChangeId: LSA_UNICODE_STRING, |
| Flags: ULONG, |
| CAPECount: ULONG, |
| CAPEs: *mut PCENTRAL_ACCESS_POLICY_ENTRY, |
| }} |
| pub type PCENTRAL_ACCESS_POLICY = *mut CENTRAL_ACCESS_POLICY; |
| pub type PCCENTRAL_ACCESS_POLICY = *const CENTRAL_ACCESS_POLICY; |
| extern "system" { |
| pub fn LsaSetCAPs( |
| CAPDNs: PLSA_UNICODE_STRING, |
| CAPDNCount: ULONG, |
| Flags: ULONG, |
| ) -> NTSTATUS; |
| pub fn LsaGetAppliedCAPIDs( |
| SystemName: PLSA_UNICODE_STRING, |
| CAPIDs: *mut *mut PSID, |
| CAPIDCount: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaQueryCAPs( |
| CAPIDs: *mut PSID, |
| CAPIDCount: ULONG, |
| CAPs: *mut PCENTRAL_ACCESS_POLICY, |
| CAPCount: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaQueryInformationPolicy( |
| PolicyHandle: LSA_HANDLE, |
| InformationClass: POLICY_INFORMATION_CLASS, |
| Buffer: *mut PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaSetInformationPolicy( |
| PolicyHandle: LSA_HANDLE, |
| InformationClass: POLICY_INFORMATION_CLASS, |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaQueryDomainInformationPolicy( |
| PolicyHandle: LSA_HANDLE, |
| InformationClass: POLICY_DOMAIN_INFORMATION_CLASS, |
| Buffer: *mut PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaSetDomainInformationPolicy( |
| PolicyHandle: LSA_HANDLE, |
| InformationClass: POLICY_DOMAIN_INFORMATION_CLASS, |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaRegisterPolicyChangeNotification( |
| InformationClass: POLICY_NOTIFICATION_INFORMATION_CLASS, |
| NotifcationEventHandle: HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaUnregisterPolicyChangeNotification( |
| InformationClass: POLICY_NOTIFICATION_INFORMATION_CLASS, |
| NotifcationEventHandle: HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaClearAuditLog( |
| PolicyHandle: LSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaCreateAccount( |
| PolicyHandle: LSA_HANDLE, |
| AccountSid: PSID, |
| DesiredAccess: ACCESS_MASK, |
| AccountHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaEnumerateAccounts( |
| PolicyHandle: LSA_HANDLE, |
| EnumerationContext: PLSA_ENUMERATION_HANDLE, |
| Buffer: *mut PVOID, |
| PreferredMaximumLength: ULONG, |
| CountReturned: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaCreateTrustedDomain( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainInformation: PLSA_TRUST_INFORMATION, |
| DesiredAccess: ACCESS_MASK, |
| TrustedDomainHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaEnumerateTrustedDomains( |
| PolicyHandle: LSA_HANDLE, |
| EnumerationContext: PLSA_ENUMERATION_HANDLE, |
| Buffer: *mut PVOID, |
| PreferredMaximumLength: ULONG, |
| CountReturned: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaEnumeratePrivileges( |
| PolicyHandle: LSA_HANDLE, |
| EnumerationContext: PLSA_ENUMERATION_HANDLE, |
| Buffer: *mut PVOID, |
| PreferredMaximumLength: ULONG, |
| CountReturned: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaLookupNames( |
| PolicyHandle: LSA_HANDLE, |
| Count: ULONG, |
| Names: PLSA_UNICODE_STRING, |
| ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST, |
| Sids: *mut PLSA_TRANSLATED_SID, |
| ) -> NTSTATUS; |
| pub fn LsaLookupNames2( |
| PolicyHandle: LSA_HANDLE, |
| Flags: ULONG, |
| Count: ULONG, |
| Names: PLSA_UNICODE_STRING, |
| ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST, |
| Sids: *mut PLSA_TRANSLATED_SID2, |
| ) -> NTSTATUS; |
| pub fn LsaLookupSids( |
| PolicyHandle: LSA_HANDLE, |
| Count: ULONG, |
| Sids: *mut PSID, |
| ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST, |
| Names: *mut PLSA_TRANSLATED_NAME, |
| ) -> NTSTATUS; |
| pub fn LsaLookupSids2( |
| PolicyHandle: LSA_HANDLE, |
| LookupOptions: ULONG, |
| Count: ULONG, |
| Sids: *mut PSID, |
| ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST, |
| Names: *mut PLSA_TRANSLATED_NAME, |
| ) -> NTSTATUS; |
| pub fn LsaCreateSecret( |
| PolicyHandle: LSA_HANDLE, |
| SecretName: PLSA_UNICODE_STRING, |
| DesiredAccess: ACCESS_MASK, |
| SecretHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaOpenAccount( |
| PolicyHandle: LSA_HANDLE, |
| AccountSid: PSID, |
| DesiredAccess: ACCESS_MASK, |
| AccountHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaEnumeratePrivilegesOfAccount( |
| AccountHandle: LSA_HANDLE, |
| Privileges: *mut PPRIVILEGE_SET, |
| ) -> NTSTATUS; |
| pub fn LsaAddPrivilegesToAccount( |
| AccountHandle: LSA_HANDLE, |
| Privileges: PPRIVILEGE_SET, |
| ) -> NTSTATUS; |
| pub fn LsaRemovePrivilegesFromAccount( |
| AccountHandle: LSA_HANDLE, |
| AllPrivileges: BOOLEAN, |
| Privileges: PPRIVILEGE_SET, |
| ) -> NTSTATUS; |
| pub fn LsaGetQuotasForAccount( |
| AccountHandle: LSA_HANDLE, |
| QuotaLimits: PQUOTA_LIMITS, |
| ) -> NTSTATUS; |
| pub fn LsaSetQuotasForAccount( |
| AccountHandle: LSA_HANDLE, |
| QuotaLimits: PQUOTA_LIMITS, |
| ) -> NTSTATUS; |
| pub fn LsaGetSystemAccessAccount( |
| AccountHandle: LSA_HANDLE, |
| SystemAccess: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaSetSystemAccessAccount( |
| AccountHandle: LSA_HANDLE, |
| SystemAccess: ULONG, |
| ) -> NTSTATUS; |
| pub fn LsaOpenTrustedDomain( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainSid: PSID, |
| DesiredAccess: ACCESS_MASK, |
| TrustedDomainHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaQueryInfoTrustedDomain( |
| TrustedDomainHandle: LSA_HANDLE, |
| InformationClass: TRUSTED_INFORMATION_CLASS, |
| Buffer: *mut PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaSetInformationTrustedDomain( |
| TrustedDomainHandle: LSA_HANDLE, |
| InformationClass: TRUSTED_INFORMATION_CLASS, |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaOpenSecret( |
| PolicyHandle: LSA_HANDLE, |
| SecretName: PLSA_UNICODE_STRING, |
| DesiredAccess: ACCESS_MASK, |
| SecretHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaSetSecret( |
| SecretHandle: LSA_HANDLE, |
| CurrentValue: PLSA_UNICODE_STRING, |
| OldValue: PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| pub fn LsaQuerySecret( |
| SecretHandle: LSA_HANDLE, |
| CurrentValue: *mut PLSA_UNICODE_STRING, |
| CurrentValueSetTime: PLARGE_INTEGER, |
| OldValue: *mut PLSA_UNICODE_STRING, |
| OldValueSetTime: PLARGE_INTEGER, |
| ) -> NTSTATUS; |
| pub fn LsaLookupPrivilegeValue( |
| PolicyHandle: LSA_HANDLE, |
| Name: PLSA_UNICODE_STRING, |
| Value: PLUID, |
| ) -> NTSTATUS; |
| pub fn LsaLookupPrivilegeName( |
| PolicyHandle: LSA_HANDLE, |
| Value: PLUID, |
| Name: *mut PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| pub fn LsaLookupPrivilegeDisplayName( |
| PolicyHandle: LSA_HANDLE, |
| Name: PLSA_UNICODE_STRING, |
| DisplayName: *mut PLSA_UNICODE_STRING, |
| LanguageReturned: PSHORT, |
| ) -> NTSTATUS; |
| } |
| extern "C" { |
| pub fn LsaGetUserName( |
| UserName: *mut PLSA_UNICODE_STRING, |
| DomainName: *mut PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| pub fn LsaGetRemoteUserName( |
| SystemName: PLSA_UNICODE_STRING, |
| UserName: *mut PLSA_UNICODE_STRING, |
| DomainName: *mut PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| } |
| pub const SE_INTERACTIVE_LOGON_NAME: &'static str = "SeInteractiveLogonRight"; |
| pub const SE_NETWORK_LOGON_NAME: &'static str = "SeNetworkLogonRight"; |
| pub const SE_BATCH_LOGON_NAME: &'static str = "SeBatchLogonRight"; |
| pub const SE_SERVICE_LOGON_NAME: &'static str = "SeServiceLogonRight"; |
| pub const SE_DENY_INTERACTIVE_LOGON_NAME: &'static str = "SeDenyInteractiveLogonRight"; |
| pub const SE_DENY_NETWORK_LOGON_NAME: &'static str = "SeDenyNetworkLogonRight"; |
| pub const SE_DENY_BATCH_LOGON_NAME: &'static str = "SeDenyBatchLogonRight"; |
| pub const SE_DENY_SERVICE_LOGON_NAME: &'static str = "SeDenyServiceLogonRight"; |
| pub const SE_REMOTE_INTERACTIVE_LOGON_NAME: &'static str = "SeRemoteInteractiveLogonRight"; |
| pub const SE_DENY_REMOTE_INTERACTIVE_LOGON_NAME: &'static str = |
| "SeDenyRemoteInteractiveLogonRight"; |
| extern "system" { |
| pub fn LsaEnumerateAccountsWithUserRight( |
| PolictHandle: LSA_HANDLE, |
| UserRights: PLSA_UNICODE_STRING, |
| EnumerationBuffer: *mut PVOID, |
| CountReturned: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaEnumerateAccountRights( |
| PolicyHandle: LSA_HANDLE, |
| AccountSid: PSID, |
| UserRights: *mut PLSA_UNICODE_STRING, |
| CountOfRights: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaAddAccountRights( |
| PolicyHandle: LSA_HANDLE, |
| AccountSid: PSID, |
| UserRights: PLSA_UNICODE_STRING, |
| CountOfRights: ULONG, |
| ) -> NTSTATUS; |
| pub fn LsaRemoveAccountRights( |
| PolicyHandle: LSA_HANDLE, |
| AccountSid: PSID, |
| AllRights: BOOLEAN, |
| UserRights: PLSA_UNICODE_STRING, |
| CountOfRights: ULONG, |
| ) -> NTSTATUS; |
| pub fn LsaOpenTrustedDomainByName( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainName: PLSA_UNICODE_STRING, |
| DesiredAccess: ACCESS_MASK, |
| TrustedDomainHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaQueryTrustedDomainInfo( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainSid: PSID, |
| InformationClass: TRUSTED_INFORMATION_CLASS, |
| Buffer: *mut PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaSetTrustedDomainInformation( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainSid: PSID, |
| InformationClass: TRUSTED_INFORMATION_CLASS, |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaDeleteTrustedDomain( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainSid: PSID, |
| ) -> NTSTATUS; |
| pub fn LsaQueryTrustedDomainInfoByName( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainName: PLSA_UNICODE_STRING, |
| InformationClass: TRUSTED_INFORMATION_CLASS, |
| Buffer: *mut PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaSetTrustedDomainInfoByName( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainName: PLSA_UNICODE_STRING, |
| InformationClass: TRUSTED_INFORMATION_CLASS, |
| Buffer: PVOID, |
| ) -> NTSTATUS; |
| pub fn LsaEnumerateTrustedDomainsEx( |
| PolicyHandle: LSA_HANDLE, |
| EnumerationContext: PLSA_ENUMERATION_HANDLE, |
| Buffer: *mut PVOID, |
| PreferredMaximumLength: ULONG, |
| CountReturned: PULONG, |
| ) -> NTSTATUS; |
| pub fn LsaCreateTrustedDomainEx( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainInformation: PTRUSTED_DOMAIN_INFORMATION_EX, |
| AuthenticationInformation: PTRUSTED_DOMAIN_AUTH_INFORMATION, |
| DesiredAccess: ACCESS_MASK, |
| TrustedDomainHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| pub fn LsaQueryForestTrustInformation( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainName: PLSA_UNICODE_STRING, |
| ForestTrustInfo: *mut PLSA_FOREST_TRUST_INFORMATION, |
| ) -> NTSTATUS; |
| pub fn LsaSetForestTrustInformation( |
| PolicyHandle: LSA_HANDLE, |
| TrustedDomainName: PLSA_UNICODE_STRING, |
| ForestTrustInfo: PLSA_FOREST_TRUST_INFORMATION, |
| CheckOnly: BOOLEAN, |
| CollisionInfo: *mut PLSA_FOREST_TRUST_COLLISION_INFORMATION, |
| ) -> NTSTATUS; |
| pub fn LsaForestTrustFindMatch( |
| PolicyHandle: LSA_HANDLE, |
| Type: ULONG, |
| Name: PLSA_UNICODE_STRING, |
| Match: *mut PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| pub fn LsaStorePrivateData( |
| PolicyHandle: LSA_HANDLE, |
| KeyName: PLSA_UNICODE_STRING, |
| PrivateData: PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| pub fn LsaRetrievePrivateData( |
| PolicyHandle: LSA_HANDLE, |
| KeyName: PLSA_UNICODE_STRING, |
| PrivateData: *mut PLSA_UNICODE_STRING, |
| ) -> NTSTATUS; |
| pub fn LsaNtStatusToWinError( |
| Status: NTSTATUS, |
| ) -> ULONG; |
| } |
| ENUM!{enum NEGOTIATE_MESSAGES { |
| NegEnumPackagePrefixes = 0, |
| NegGetCallerName = 1, |
| NegTransferCredentials = 2, |
| NegEnumPackageNames = 3, |
| NegCallPackageMax, |
| }} |
| pub const NEGOTIATE_MAX_PREFIX: SIZE_T = 32; |
| STRUCT!{struct NEGOTIATE_PACKAGE_PREFIX { |
| PackageId: ULONG_PTR, |
| PackageDataA: PVOID, |
| PackageDataW: PVOID, |
| PrefixLen: ULONG_PTR, |
| Prefix: [UCHAR; NEGOTIATE_MAX_PREFIX], |
| }} |
| pub type PNEGOTIATE_PACKAGE_PREFIX = *mut NEGOTIATE_PACKAGE_PREFIX; |
| STRUCT!{struct NEGOTIATE_PACKAGE_PREFIXES { |
| MessageType: ULONG, |
| PrefixCount: ULONG, |
| Offset: ULONG, |
| Pad: ULONG, |
| }} |
| pub type PNEGOTIATE_PACKAGE_PREFIXES = *mut NEGOTIATE_PACKAGE_PREFIXES; |
| STRUCT!{struct NEGOTIATE_CALLER_NAME_REQUEST { |
| MessageType: ULONG, |
| LogonId: LUID, |
| }} |
| pub type PNEGOTIATE_CALLER_NAME_REQUEST = *mut NEGOTIATE_CALLER_NAME_REQUEST; |
| STRUCT!{struct NEGOTIATE_CALLER_NAME_RESPONSE { |
| Messagetype: ULONG, |
| CallerName: PWSTR, |
| }} |
| pub type PNEGOTIATE_CALLER_NAME_RESPONSE = *mut NEGOTIATE_CALLER_NAME_RESPONSE; |
| STRUCT!{struct NEGOTIATE_PACKAGE_NAMES { |
| NamesCount: ULONG, |
| Names: [UNICODE_STRING; ANYSIZE_ARRAY], |
| }} |
| pub type PNEGOTIATE_PACKAGE_NAMES = *mut NEGOTIATE_PACKAGE_NAMES; |
| pub const NEGOTIATE_ALLOW_NTLM: ULONG = 0x10000000; |
| pub const NEGOTIATE_NEG_NTLM: ULONG = 0x20000000; |
| STRUCT!{struct NEGOTIATE_PACKAGE_PREFIX_WOW { |
| PackageId: ULONG, |
| PackageDataA: ULONG, |
| PackageDataW: ULONG, |
| PrefixLen: ULONG, |
| Prefix: [UCHAR; NEGOTIATE_MAX_PREFIX], |
| }} |
| pub type PNEGOTIATE_PACKAGE_PREFIX_WOW = *mut NEGOTIATE_PACKAGE_PREFIX_WOW; |
| STRUCT!{struct NEGOTIATE_CALLER_NAME_RESPONSE_WOW { |
| MessageType: ULONG, |
| CallerName: ULONG, |
| }} |
| pub type PNEGOTIATE_CALLER_NAME_RESPONSE_WOW = *mut NEGOTIATE_CALLER_NAME_RESPONSE_WOW; |
| extern "system" { |
| pub fn LsaSetPolicyReplicationHandle( |
| PolicyHandle: PLSA_HANDLE, |
| ) -> NTSTATUS; |
| } |
| pub const MAX_USER_RECORDS: SIZE_T = 1000; |
| STRUCT!{struct LSA_USER_REGISTRATION_INFO { |
| Sid: LSA_UNICODE_STRING, |
| DeviceId: LSA_UNICODE_STRING, |
| Username: LSA_UNICODE_STRING, |
| Thumbprint: LSA_UNICODE_STRING, |
| RegistrationTime: LARGE_INTEGER, |
| }} |
| pub type PLSA_USER_REGISTRATION_INFO = *mut LSA_USER_REGISTRATION_INFO; |
| STRUCT!{struct LSA_REGISTRATION_INFO { |
| RegisteredCount: ULONG, |
| UserRegistrationInfo: *mut PLSA_USER_REGISTRATION_INFO, |
| }} |
| pub type PLSA_REGISTRATION_INFO = *mut LSA_REGISTRATION_INFO; |
| extern "system" { |
| pub fn LsaGetDeviceRegistrationInfo( |
| RegistrationInfo: *mut PLSA_REGISTRATION_INFO, |
| ) -> NTSTATUS; |
| } |
| ENUM!{enum LSA_CREDENTIAL_KEY_SOURCE_TYPE { |
| eFromPrecomputed = 1, |
| eFromClearPassword, |
| eFromNtOwf, |
| }} |
| pub type PLSA_CREDENTIAL_KEY_SOURCE_TYPE = *mut LSA_CREDENTIAL_KEY_SOURCE_TYPE; |
| extern "C" { |
| pub fn SeciIsProtectedUser( |
| ProtectedUser: PBOOLEAN, |
| ) -> NTSTATUS; |
| } |
