aboutsummaryrefslogtreecommitdiff
path: root/vendor/winapi/src/um/ntlsa.rs
diff options
context:
space:
mode:
authorValentin Popov <valentin@popov.link>2024-07-19 15:37:58 +0300
committerValentin Popov <valentin@popov.link>2024-07-19 15:37:58 +0300
commita990de90fe41456a23e58bd087d2f107d321f3a1 (patch)
tree15afc392522a9e85dc3332235e311b7d39352ea9 /vendor/winapi/src/um/ntlsa.rs
parent3d48cd3f81164bbfc1a755dc1d4a9a02f98c8ddd (diff)
downloadfparkan-a990de90fe41456a23e58bd087d2f107d321f3a1.tar.xz
fparkan-a990de90fe41456a23e58bd087d2f107d321f3a1.zip
Deleted vendor folder
Diffstat (limited to 'vendor/winapi/src/um/ntlsa.rs')
-rw-r--r--vendor/winapi/src/um/ntlsa.rs1530
1 files changed, 0 insertions, 1530 deletions
diff --git a/vendor/winapi/src/um/ntlsa.rs b/vendor/winapi/src/um/ntlsa.rs
deleted file mode 100644
index 0e283b1..0000000
--- a/vendor/winapi/src/um/ntlsa.rs
+++ /dev/null
@@ -1,1530 +0,0 @@
-// Licensed under the Apache License, Version 2.0
-// <LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
-// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your option.
-// All files in the project carrying such notice may not be copied, modified, or distributed
-// except according to those terms.
-use shared::basetsd::{SIZE_T, ULONG_PTR};
-use shared::guiddef::GUID;
-use shared::minwindef::{PUCHAR, PULONG, UCHAR, ULONG, USHORT};
-use shared::ntdef::{NTSTATUS, PNTSTATUS};
-use um::lsalookup::{
- LSA_TRUST_INFORMATION, LSA_UNICODE_STRING, PLSA_OBJECT_ATTRIBUTES,
- PLSA_REFERENCED_DOMAIN_LIST, PLSA_STRING, PLSA_TRANSLATED_NAME, PLSA_TRANSLATED_SID2,
- PLSA_TRUST_INFORMATION, PLSA_UNICODE_STRING,
-};
-use um::ntsecapi::PLSA_HANDLE;
-use um::subauth::{PUNICODE_STRING, UNICODE_STRING};
-use um::winnt::{
- ACCESS_MASK, ANYSIZE_ARRAY, BOOLEAN, HANDLE, LARGE_INTEGER, LONG, LUID, PBOOLEAN,
- PCLAIMS_BLOB, PHANDLE, PLARGE_INTEGER, PLUID, PPRIVILEGE_SET, PQUOTA_LIMITS,
- PSECURITY_DESCRIPTOR, PSHORT, PSID, PTOKEN_GROUPS, PTOKEN_PRIVILEGES, PTOKEN_SOURCE, PVOID,
- PWSTR, QUOTA_LIMITS, SECURITY_INFORMATION, SID_NAME_USE, STANDARD_RIGHTS_EXECUTE,
- STANDARD_RIGHTS_READ, STANDARD_RIGHTS_REQUIRED, STANDARD_RIGHTS_WRITE, TOKEN_DEFAULT_DACL,
- TOKEN_DEVICE_CLAIMS, TOKEN_OWNER, TOKEN_PRIMARY_GROUP, TOKEN_USER, TOKEN_USER_CLAIMS,
-};
-pub type LSA_OPERATIONAL_MODE = ULONG;
-pub type PLSA_OPERATIONAL_MODE = *mut LSA_OPERATIONAL_MODE;
-pub const LSA_MODE_PASSWORD_PROTECTED: ULONG = 0x00000001;
-pub const LSA_MODE_INDIVIDUAL_ACCOUNTS: ULONG = 0x00000002;
-pub const LSA_MODE_MANDATORY_ACCESS: ULONG = 0x00000004;
-pub const LSA_MODE_LOG_FULL: ULONG = 0x00000008;
-pub const LSA_MAXIMUM_SID_COUNT: SIZE_T = 0x00000100;
-pub const LSA_MAXIMUM_ENUMERATION_LENGTH: SIZE_T = 32000;
-pub const LSA_CALL_LICENSE_SERVER: ULONG = 0x80000000;
-ENUM!{enum SECURITY_LOGON_TYPE {
- UndefinedLogonType = 0,
- Interactive = 2,
- Network,
- Batch,
- Service,
- Proxy,
- Unlock,
- NetworkCleartext,
- NewCredentials,
- RemoteInteractive,
- CachedInteractive,
- CachedRemoteInteractive,
- CachedUnlock,
-}}
-pub type PSECURITY_LOGON_TYPE = *mut SECURITY_LOGON_TYPE;
-pub const SECURITY_ACCESS_INTERACTIVE_LOGON: ULONG = 0x00000001;
-pub const SECURITY_ACCESS_NETWORK_LOGON: ULONG = 0x00000002;
-pub const SECURITY_ACCESS_BATCH_LOGON: ULONG = 0x00000004;
-pub const SECURITY_ACCESS_SERVICE_LOGON: ULONG = 0x00000010;
-pub const SECURITY_ACCESS_PROXY_LOGON: ULONG = 0x00000020;
-pub const SECURITY_ACCESS_DENY_INTERACTIVE_LOGON: ULONG = 0x00000040;
-pub const SECURITY_ACCESS_DENY_NETWORK_LOGON: ULONG = 0x00000080;
-pub const SECURITY_ACCESS_DENY_BATCH_LOGON: ULONG = 0x00000100;
-pub const SECURITY_ACCESS_DENY_SERVICE_LOGON: ULONG = 0x00000200;
-pub const SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON: ULONG = 0x00000400;
-pub const SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON: ULONG = 0x00000800;
-ENUM!{enum SE_ADT_PARAMETER_TYPE {
- SeAdtParmTypeNone = 0,
- SeAdtParmTypeString,
- SeAdtParmTypeFileSpec,
- SeAdtParmTypeUlong,
- SeAdtParmTypeSid,
- SeAdtParmTypeLogonId,
- SeAdtParmTypeNoLogonId,
- SeAdtParmTypeAccessMask,
- SeAdtParmTypePrivs,
- SeAdtParmTypeObjectTypes,
- SeAdtParmTypeHexUlong,
- SeAdtParmTypePtr,
- SeAdtParmTypeTime,
- SeAdtParmTypeGuid,
- SeAdtParmTypeLuid,
- SeAdtParmTypeHexInt64,
- SeAdtParmTypeStringList,
- SeAdtParmTypeSidList,
- SeAdtParmTypeDuration,
- SeAdtParmTypeUserAccountControl,
- SeAdtParmTypeNoUac,
- SeAdtParmTypeMessage,
- SeAdtParmTypeDateTime,
- SeAdtParmTypeSockAddr,
- SeAdtParmTypeSD,
- SeAdtParmTypeLogonHours,
- SeAdtParmTypeLogonIdNoSid,
- SeAdtParmTypeUlongNoConv,
- SeAdtParmTypeSockAddrNoPort,
- SeAdtParmTypeAccessReason,
- SeAdtParmTypeStagingReason,
- SeAdtParmTypeResourceAttribute,
- SeAdtParmTypeClaims,
- SeAdtParmTypeLogonIdAsSid,
- SeAdtParmTypeMultiSzString,
- SeAdtParmTypeLogonIdEx,
-}}
-pub type PSE_ADT_PARAMETER_TYPE = *mut SE_ADT_PARAMETER_TYPE;
-pub const SE_ADT_OBJECT_ONLY: USHORT = 0x1;
-STRUCT!{struct SE_ADT_OBJECT_TYPE {
- ObjectType: GUID,
- Flags: USHORT,
- Level: USHORT,
- AccessMask: ACCESS_MASK,
-}}
-pub type PSE_ADT_OBJECT_TYPE = *mut SE_ADT_OBJECT_TYPE;
-STRUCT!{struct SE_ADT_PARAMETER_ARRAY_ENTRY {
- Type: SE_ADT_PARAMETER_TYPE,
- Length: ULONG,
- Data: [ULONG_PTR; 2],
- Address: PVOID,
-}}
-pub type PSE_ADT_PARAMETER_ARRAY_ENTRY = *mut SE_ADT_PARAMETER_ARRAY_ENTRY;
-STRUCT!{struct SE_ADT_ACCESS_REASON {
- AccessMask: ACCESS_MASK,
- AccessReasons: [ULONG; 32],
- ObjectTypeIndex: ULONG,
- AccessGranted: ULONG,
- SecurityDescriptor: PSECURITY_DESCRIPTOR,
-}}
-pub type PSE_ADT_ACCESS_REASON = *mut SE_ADT_ACCESS_REASON;
-STRUCT!{struct SE_ADT_CLAIMS {
- Length: ULONG,
- Claims: PCLAIMS_BLOB,
-}}
-pub type PSE_ADT_CLAIMS = *mut SE_ADT_CLAIMS;
-pub const SE_MAX_AUDIT_PARAMETERS: SIZE_T = 32;
-pub const SE_MAX_GENERIC_AUDIT_PARAMETERS: SIZE_T = 28;
-STRUCT!{struct SE_ADT_PARAMETER_ARRAY {
- CategoryId: ULONG,
- AuditId: ULONG,
- ParameterCount: ULONG,
- Length: ULONG,
- FlatSubCategoryId: USHORT,
- Type: USHORT,
- Flags: ULONG,
- Parameters: [SE_ADT_PARAMETER_ARRAY_ENTRY; SE_MAX_AUDIT_PARAMETERS],
-}}
-pub type PSE_ADT_PARAMETER_ARRAY = *mut SE_ADT_PARAMETER_ARRAY;
-STRUCT!{struct SE_ADT_PARAMETER_ARRAY_EX {
- CategoryId: ULONG,
- AuditId: ULONG,
- Version: ULONG,
- ParameterCount: ULONG,
- Length: ULONG,
- FlatSubCategoryId: USHORT,
- Type: USHORT,
- Flags: ULONG,
- Parameters: [SE_ADT_PARAMETER_ARRAY_ENTRY; SE_MAX_AUDIT_PARAMETERS],
-}}
-pub type PSE_ADT_PARAMETER_ARRAY_EX = *mut SE_ADT_PARAMETER_ARRAY_EX;
-pub const SE_ADT_PARAMETERS_SELF_RELATIVE: ULONG = 0x00000001;
-pub const SE_ADT_PARAMETERS_SEND_TO_LSA: ULONG = 0x00000002;
-pub const SE_ADT_PARAMETER_EXTENSIBLE_AUDIT: ULONG = 0x00000004;
-pub const SE_ADT_PARAMETER_GENERIC_AUDIT: ULONG = 0x00000008;
-pub const SE_ADT_PARAMETER_WRITE_SYNCHRONOUS: ULONG = 0x00000010;
-#[cfg(target_pointer_width = "32")]
-#[inline]
-pub fn LSAP_SE_ADT_PARAMETER_ARRAY_TRUE_SIZE(
- AuditParameters: SE_ADT_PARAMETER_ARRAY,
-) -> SIZE_T {
- 664 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY>()
- - (20 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY_ENTRY>()
- * (SE_MAX_AUDIT_PARAMETERS - AuditParameters.ParameterCount as SIZE_T))
-}
-#[cfg(target_pointer_width = "64")]
-#[inline]
-pub fn LSAP_SE_ADT_PARAMETER_ARRAY_TRUE_SIZE(
- AuditParameters: SE_ADT_PARAMETER_ARRAY,
-) -> SIZE_T {
- 1048 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY>()
- - (32 // FIXME: sizeof::<SE_ADT_PARAMETER_ARRAY_ENTRY>()
- * (SE_MAX_AUDIT_PARAMETERS - AuditParameters.ParameterCount as SIZE_T))
-}
-STRUCT!{struct LSA_ADT_STRING_LIST_ENTRY {
- Flags: ULONG,
- String: UNICODE_STRING,
-}}
-pub type PLSA_ADT_STRING_LIST_ENTRY = *mut LSA_ADT_STRING_LIST_ENTRY;
-STRUCT!{struct LSA_ADT_STRING_LIST {
- cStrings: ULONG,
- String: PLSA_ADT_STRING_LIST_ENTRY,
-}}
-pub type PLSA_ADT_STRING_LIST = *mut LSA_ADT_STRING_LIST;
-STRUCT!{struct LSA_ADT_SID_LIST_ENTRY {
- Flags: ULONG,
- Sid: PSID,
-}}
-pub type PLSA_ADT_SID_LIST_ENTRY = *mut LSA_ADT_SID_LIST_ENTRY;
-STRUCT!{struct LSA_ADT_SID_LIST {
- cSids: ULONG,
- Sid: PLSA_ADT_SID_LIST_ENTRY,
-}}
-pub type PLSA_ADT_SID_LIST = *mut LSA_ADT_SID_LIST;
-pub const LSA_ADT_SECURITY_SOURCE_NAME: &'static str = "Microsoft-Windows-Security-Auditing";
-pub const LSA_ADT_LEGACY_SECURITY_SOURCE_NAME: &'static str = "Security";
-pub const SE_ADT_POLICY_AUDIT_EVENT_TYPE_EX_BEGIN: ULONG = 100;
-ENUM!{enum POLICY_AUDIT_EVENT_TYPE_EX {
- iSystem_SecurityStateChange = SE_ADT_POLICY_AUDIT_EVENT_TYPE_EX_BEGIN,
- iSystem_SecuritySubsystemExtension,
- iSystem_Integrity,
- iSystem_IPSecDriverEvents,
- iSystem_Others,
- iLogon_Logon,
- iLogon_Logoff,
- iLogon_AccountLockout,
- iLogon_IPSecMainMode,
- iLogon_SpecialLogon,
- iLogon_IPSecQuickMode,
- iLogon_IPSecUsermode,
- iLogon_Others,
- iLogon_NPS,
- iLogon_Claims,
- iLogon_Groups,
- iObjectAccess_FileSystem,
- iObjectAccess_Registry,
- iObjectAccess_Kernel,
- iObjectAccess_Sam,
- iObjectAccess_Other,
- iObjectAccess_CertificationAuthority,
- iObjectAccess_ApplicationGenerated,
- iObjectAccess_HandleBasedAudits,
- iObjectAccess_Share,
- iObjectAccess_FirewallPacketDrops,
- iObjectAccess_FirewallConnection,
- iObjectAccess_DetailedFileShare,
- iObjectAccess_RemovableStorage,
- iObjectAccess_CbacStaging,
- iPrivilegeUse_Sensitive,
- iPrivilegeUse_NonSensitive,
- iPrivilegeUse_Others,
- iDetailedTracking_ProcessCreation,
- iDetailedTracking_ProcessTermination,
- iDetailedTracking_DpapiActivity,
- iDetailedTracking_RpcCall,
- iDetailedTracking_PnpActivity,
- iDetailedTracking_TokenRightAdjusted,
- iPolicyChange_AuditPolicy,
- iPolicyChange_AuthenticationPolicy,
- iPolicyChange_AuthorizationPolicy,
- iPolicyChange_MpsscvRulePolicy,
- iPolicyChange_WfpIPSecPolicy,
- iPolicyChange_Others,
- iAccountManagement_UserAccount,
- iAccountManagement_ComputerAccount,
- iAccountManagement_SecurityGroup,
- iAccountManagement_DistributionGroup,
- iAccountManagement_ApplicationGroup,
- iAccountManagement_Others,
- iDSAccess_DSAccess,
- iDSAccess_AdAuditChanges,
- iDS_Replication,
- iDS_DetailedReplication,
- iAccountLogon_CredentialValidation,
- iAccountLogon_Kerberos,
- iAccountLogon_Others,
- iAccountLogon_KerbCredentialValidation,
- iUnknownSubCategory = 999,
-}}
-pub type PPOLICY_AUDIT_EVENT_TYPE_EX = *mut POLICY_AUDIT_EVENT_TYPE_EX;
-ENUM!{enum POLICY_AUDIT_EVENT_TYPE {
- AuditCategorySystem = 0,
- AuditCategoryLogon,
- AuditCategoryObjectAccess,
- AuditCategoryPrivilegeUse,
- AuditCategoryDetailedTracking,
- AuditCategoryPolicyChange,
- AuditCategoryAccountManagement,
- AuditCategoryDirectoryServiceAccess,
- AuditCategoryAccountLogon,
-}}
-pub type PPOLICY_AUDIT_EVENT_TYPE = *mut POLICY_AUDIT_EVENT_TYPE;
-pub const POLICY_AUDIT_EVENT_UNCHANGED: ULONG = 0x00000000;
-pub const POLICY_AUDIT_EVENT_SUCCESS: ULONG = 0x00000001;
-pub const POLICY_AUDIT_EVENT_FAILURE: ULONG = 0x00000002;
-pub const POLICY_AUDIT_EVENT_NONE: ULONG = 0x00000004;
-pub const POLICY_AUDIT_EVENT_MASK: ULONG = POLICY_AUDIT_EVENT_SUCCESS | POLICY_AUDIT_EVENT_FAILURE
- | POLICY_AUDIT_EVENT_UNCHANGED | POLICY_AUDIT_EVENT_NONE;
-#[inline]
-pub fn LSA_SUCCESS(Error: NTSTATUS) -> bool {
- (Error as LONG) >= 0
-}
-extern "system" {
- pub fn LsaRegisterLogonProcess(
- LogonProcessName: PLSA_STRING,
- LsaHandle: PHANDLE,
- SecurityMode: PLSA_OPERATIONAL_MODE,
- ) -> NTSTATUS;
- pub fn LsaLogonUser(
- LsaHandle: HANDLE,
- OriginName: PLSA_STRING,
- LogonType: SECURITY_LOGON_TYPE,
- AuthenticationPackage: ULONG,
- AuthenticationInformation: PVOID,
- AuthenticationInformationLength: ULONG,
- LocalGroups: PTOKEN_GROUPS,
- SourceContext: PTOKEN_SOURCE,
- ProfileBuffer: *mut PVOID,
- ProfileBufferLength: PULONG,
- LogonId: PLUID,
- Token: PHANDLE,
- Quotas: PQUOTA_LIMITS,
- SubStatus: PNTSTATUS,
- ) -> NTSTATUS;
- pub fn LsaLookupAuthenticationPackage(
- LsaHandle: HANDLE,
- PackageName: PLSA_STRING,
- AuthenticationPackage: PULONG,
- ) -> NTSTATUS;
- pub fn LsaFreeReturnBuffer(
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaCallAuthenticationPackage(
- LsaHandle: HANDLE,
- AuthenticationPackage: ULONG,
- ProtocolSubmitBuffer: PVOID,
- SubmitBufferLength: ULONG,
- ProtocolReturnBuffer: *mut PVOID,
- ReturnBufferLength: PULONG,
- ProtocolStatus: PNTSTATUS,
- ) -> NTSTATUS;
- pub fn LsaDeregisterLogonProcess(
- LsaHandle: HANDLE,
- ) -> NTSTATUS;
- pub fn LsaConnectUntrusted(
- LsaHandle: PHANDLE,
- ) -> NTSTATUS;
-}
-extern "C" {
- pub fn LsaInsertProtectedProcessAddress(
- BufferAddress: PVOID,
- BufferSize: ULONG,
- ) -> NTSTATUS;
- pub fn LsaRemoveProtectedProcessAddress(
- BufferAddress: PVOID,
- BufferSize: ULONG,
- ) -> NTSTATUS;
-}
-FN!{stdcall PFN_LSA_CALL_AUTH_PKG(
- LsaHandle: HANDLE,
- AuthenticationPackage: ULONG,
- ProtocolSubmitBuffer: PVOID,
- SubmitBufferLength: ULONG,
- ProtocolReturnBuffer: *mut PVOID,
- ReturnBufferLength: PULONG,
- ProtocolStatus: PNTSTATUS,
-) -> NTSTATUS}
-FN!{stdcall PFN_LSA_DEREGISTER_PROC(
- LsaHandle: HANDLE,
-) -> NTSTATUS}
-FN!{stdcall PFN_LSA_FREE_BUFFER(
- Buffer: PVOID,
-) -> NTSTATUS}
-FN!{stdcall PFN_LSA_LOGON_USER(
- LsaHandle: HANDLE,
- OriginName: PLSA_STRING,
- LogonType: SECURITY_LOGON_TYPE,
- AuthenticationPackage: ULONG,
- AuthenticationInformation: PVOID,
- AuthenticationInformationLength: ULONG,
- LocalGroups: PTOKEN_GROUPS,
- SourceContext: PTOKEN_SOURCE,
- ProfileBuffer: *mut PVOID,
- ProfileBufferLength: PULONG,
- LogonId: PLUID,
- Token: PHANDLE,
- Quotas: PQUOTA_LIMITS,
- SubStatus: PNTSTATUS,
-) -> NTSTATUS}
-FN!{stdcall PFN_LOOKUP_AUTH_PKG(
- LsaHandle: HANDLE,
- PackageName: PLSA_STRING,
- AuthenticationPackage: PULONG,
-) -> NTSTATUS}
-FN!{stdcall PFN_LSA_REGISTER_PROC(
- LogonProcessName: PLSA_STRING,
- LsaHandle: PHANDLE,
- SecurityMode: PLSA_OPERATIONAL_MODE,
-) -> NTSTATUS}
-STRUCT!{struct LSA_AUTH_CALLBACKS {
- LsaCallAuthPkgFn: PFN_LSA_CALL_AUTH_PKG,
- LsaDeregisterProcFn: PFN_LSA_DEREGISTER_PROC,
- LsaFreeReturnBufferFn: PFN_LSA_FREE_BUFFER,
- LsaLogonUserFn: PFN_LSA_LOGON_USER,
- LsaLookupAuthPkgFn: PFN_LOOKUP_AUTH_PKG,
- LsaRegisterProcFn: PFN_LSA_REGISTER_PROC,
-}}
-pub type PLSA_AUTH_CALLBACKS = *mut LSA_AUTH_CALLBACKS;
-pub type PCLSA_AUTH_CALLBACKS = *const LSA_AUTH_CALLBACKS;
-pub type PLSA_CLIENT_REQUEST = *mut PVOID;
-ENUM!{enum LSA_TOKEN_INFORMATION_TYPE {
- LsaTokenInformationNull,
- LsaTokenInformationV1,
- LsaTokenInformationV2,
- LsaTokenInformationV3,
-}}
-pub type PLSA_TOKEN_INFORMATION_TYPE = *mut LSA_TOKEN_INFORMATION_TYPE;
-STRUCT!{struct LSA_TOKEN_INFORMATION_NULL {
- ExpirationTime: LARGE_INTEGER,
- Groups: PTOKEN_GROUPS,
-}}
-pub type PLSA_TOKEN_INFORMATION_NULL = *mut LSA_TOKEN_INFORMATION_NULL;
-STRUCT!{struct LSA_TOKEN_INFORMATION_V1 {
- ExpirationTime: LARGE_INTEGER,
- User: TOKEN_USER,
- Groups: PTOKEN_GROUPS,
- PrimaryGroup: TOKEN_PRIMARY_GROUP,
- Privileges: PTOKEN_PRIVILEGES,
- Owner: TOKEN_OWNER,
- DefaultDacl: TOKEN_DEFAULT_DACL,
-}}
-pub type PLSA_TOKEN_INFORMATION_V1 = *mut LSA_TOKEN_INFORMATION_V1;
-pub type LSA_TOKEN_INFORMATION_V2 = LSA_TOKEN_INFORMATION_V1;
-pub type PLSA_TOKEN_INFORMATION_V2 = *mut LSA_TOKEN_INFORMATION_V2;
-STRUCT!{struct LSA_TOKEN_INFORMATION_V3 {
- ExpirationTime: LARGE_INTEGER,
- User: TOKEN_USER,
- Groups: PTOKEN_GROUPS,
- PrimaryGroup: TOKEN_PRIMARY_GROUP,
- Privileges: PTOKEN_PRIVILEGES,
- Owner: TOKEN_OWNER,
- DefaultDacl: TOKEN_DEFAULT_DACL,
- UserClaims: TOKEN_USER_CLAIMS,
- DeviceClaims: TOKEN_DEVICE_CLAIMS,
- DeviceGroups: PTOKEN_GROUPS,
-}}
-pub type PLSA_TOKEN_INFORMATION_V3 = *mut LSA_TOKEN_INFORMATION_V3;
-FN!{stdcall PLSA_CREATE_LOGON_SESSION(
- LogonId: PLUID,
-) -> NTSTATUS}
-FN!{stdcall PLSA_DELETE_LOGON_SESSION(
- LogonId: PLUID,
-) -> NTSTATUS}
-FN!{stdcall PLSA_ADD_CREDENTIAL(
- LogonId: PLUID,
- AuthenticationPackage: ULONG,
- PrimaryKeyValue: PLSA_STRING,
- Credentials: PLSA_STRING,
-) -> NTSTATUS}
-FN!{stdcall PLSA_GET_CREDENTIALS(
- LogonId: PLUID,
- AuthenticationPackage: ULONG,
- QueryContext: PULONG,
- RetrieveAllCredentials: BOOLEAN,
- PrimaryKeyValue: PLSA_STRING,
- PrimaryKeyLength: PULONG,
- Credentials: PLSA_STRING,
-) -> NTSTATUS}
-FN!{stdcall PLSA_DELETE_CREDENTIAL(
- LogonId: PLUID,
- AuthenticationPackage: ULONG,
- PrimaryKeyValue: PLSA_STRING,
-) -> NTSTATUS}
-FN!{stdcall PLSA_ALLOCATE_LSA_HEAP(
- Length: ULONG,
-) -> PVOID}
-FN!{stdcall PLSA_FREE_LSA_HEAP(
- Base: PVOID,
-) -> ()}
-FN!{stdcall PLSA_ALLOCATE_PRIVATE_HEAP(
- Length: SIZE_T,
-) -> PVOID}
-FN!{stdcall PLSA_FREE_PRIVATE_HEAP(
- Base: PVOID,
-) -> ()}
-FN!{stdcall PLSA_ALLOCATE_CLIENT_BUFFER(
- ClientRequest: PLSA_CLIENT_REQUEST,
- LengthRequired: ULONG,
- ClientBaseAddress: *mut PVOID,
-) -> NTSTATUS}
-FN!{stdcall PLSA_FREE_CLIENT_BUFFER(
- ClientRequest: PLSA_CLIENT_REQUEST,
- ClientBaseAddress: PVOID,
-) -> NTSTATUS}
-FN!{stdcall PLSA_COPY_TO_CLIENT_BUFFER(
- ClientRequest: PLSA_CLIENT_REQUEST,
- Length: ULONG,
- ClientBaseAddress: PVOID,
- BufferToCopy: PVOID,
-) -> NTSTATUS}
-FN!{stdcall PLSA_COPY_FROM_CLIENT_BUFFER(
- ClientRequest: PLSA_CLIENT_REQUEST,
- Length: ULONG,
- BufferToCopy: PVOID,
- ClientBaseAddress: PVOID,
-) -> NTSTATUS}
-STRUCT!{struct LSA_DISPATCH_TABLE {
- CreateLogonSession: PLSA_CREATE_LOGON_SESSION,
- DeleteLogonSession: PLSA_DELETE_LOGON_SESSION,
- AddCredential: PLSA_ADD_CREDENTIAL,
- GetCredentials: PLSA_GET_CREDENTIALS,
- DeleteCredential: PLSA_DELETE_CREDENTIAL,
- AllocateLsaHeap: PLSA_ALLOCATE_LSA_HEAP,
- FreeLsaHeap: PLSA_FREE_LSA_HEAP,
- AllocateClientBuffer: PLSA_ALLOCATE_CLIENT_BUFFER,
- FreeClientBuffer: PLSA_FREE_CLIENT_BUFFER,
- CopyToClientBuffer: PLSA_COPY_TO_CLIENT_BUFFER,
- CopyFromClientBuffer: PLSA_COPY_FROM_CLIENT_BUFFER,
-}}
-pub type PLSA_DISPATCH_TABLE = *mut LSA_DISPATCH_TABLE;
-pub const LSA_AP_NAME_INITIALIZE_PACKAGE: &'static str = "LsaApInitializePackage";
-pub const LSA_AP_NAME_LOGON_USER: &'static str = "LsaApLogonUser";
-pub const LSA_AP_NAME_LOGON_USER_EX: &'static str = "LsaApLogonUserEx";
-pub const LSA_AP_NAME_CALL_PACKAGE: &'static str = "LsaApCallPackage";
-pub const LSA_AP_NAME_LOGON_TERMINATED: &'static str = "LsaApLogonTerminated";
-pub const LSA_AP_NAME_CALL_PACKAGE_UNTRUSTED: &'static str = "LsaApCallPackageUntrusted";
-pub const LSA_AP_NAME_CALL_PACKAGE_PASSTHROUGH: &'static str = "LsaApCallPackagePassthrough";
-FN!{stdcall PLSA_AP_INITIALIZE_PACKAGE(
- AuthenticationPackageId: ULONG,
- LsaDispatchTable: PLSA_DISPATCH_TABLE,
- Database: PLSA_STRING,
- Confidentiality: PLSA_STRING,
- AuthenticationPackageName: *mut PLSA_STRING,
-) -> NTSTATUS}
-FN!{stdcall PLSA_AP_LOGON_USER(
- ClientRequest: PLSA_CLIENT_REQUEST,
- LogonType: SECURITY_LOGON_TYPE,
- AuthenticationInformation: PVOID,
- ClientAuthentication: PVOID,
- AuthenticationInformationLength: ULONG,
- ProfileBuffer: *mut PVOID,
- ProfileBufferLength: PULONG,
- LogonId: PLUID,
- SubStatus: PNTSTATUS,
- TokenInformationType: PLSA_TOKEN_INFORMATION_TYPE,
- TokenInformation: *mut PVOID,
- AccountName: *mut PLSA_UNICODE_STRING,
- AuthenticatingAutority: *mut PLSA_UNICODE_STRING,
-) -> NTSTATUS}
-FN!{stdcall PLSA_AP_LOGON_USER_EX(
- ClientRequest: PLSA_CLIENT_REQUEST,
- LogonType: SECURITY_LOGON_TYPE,
- AuthenticationInformation: PVOID,
- ClientAuthentication: PVOID,
- AuthenticationInformationLength: ULONG,
- ProfileBuffer: *mut PVOID,
- ProfileBufferLength: PULONG,
- LogonId: PLUID,
- SubStatus: PNTSTATUS,
- TokenInformationType: PLSA_TOKEN_INFORMATION_TYPE,
- TokenInformation: *mut PVOID,
- AccountName: *mut PLSA_UNICODE_STRING,
- AuthenticatingAutority: *mut PLSA_UNICODE_STRING,
- MachineName: *mut PUNICODE_STRING,
-) -> NTSTATUS}
-FN!{stdcall PLSA_AP_CALL_PACKAGE(
- ClientRequest: PLSA_CLIENT_REQUEST,
- ProtocolSubmitBuffer: PVOID,
- ClientBufferBase: PVOID,
- SubmitBufferLength: ULONG,
- ProtocolReturnBuffer: *mut PVOID,
- ReturnBufferLength: PULONG,
- ProtocolStatus: PNTSTATUS,
-) -> NTSTATUS}
-FN!{stdcall PLSA_AP_CALL_PACKAGE_PASSTHROUGH(
- ClientRequest: PLSA_CLIENT_REQUEST,
- ProtocolSubmitBuffer: PVOID,
- ClientBufferBase: PVOID,
- SubmitBufferLength: ULONG,
- ProtocolReturnBuffer: *mut PVOID,
- ReturnBufferLength: PULONG,
- ProtocolStatus: PNTSTATUS,
-) -> NTSTATUS}
-FN!{stdcall PLSA_AP_LOGON_TERMINATED(
- LogonId: PLUID,
-) -> ()}
-pub const POLICY_VIEW_LOCAL_INFORMATION: ULONG = 0x00000001;
-pub const POLICY_VIEW_AUDIT_INFORMATION: ULONG = 0x00000002;
-pub const POLICY_GET_PRIVATE_INFORMATION: ULONG = 0x00000004;
-pub const POLICY_TRUST_ADMIN: ULONG = 0x00000008;
-pub const POLICY_CREATE_ACCOUNT: ULONG = 0x00000010;
-pub const POLICY_CREATE_SECRET: ULONG = 0x00000020;
-pub const POLICY_CREATE_PRIVILEGE: ULONG = 0x00000040;
-pub const POLICY_SET_DEFAULT_QUOTA_LIMITS: ULONG = 0x00000080;
-pub const POLICY_SET_AUDIT_REQUIREMENTS: ULONG = 0x00000100;
-pub const POLICY_AUDIT_LOG_ADMIN: ULONG = 0x00000200;
-pub const POLICY_SERVER_ADMIN: ULONG = 0x00000400;
-pub const POLICY_LOOKUP_NAMES: ULONG = 0x00000800;
-pub const POLICY_NOTIFICATION: ULONG = 0x00001000;
-pub const POLICY_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | POLICY_VIEW_LOCAL_INFORMATION
- | POLICY_VIEW_AUDIT_INFORMATION | POLICY_GET_PRIVATE_INFORMATION | POLICY_TRUST_ADMIN
- | POLICY_CREATE_ACCOUNT | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE
- | POLICY_SET_DEFAULT_QUOTA_LIMITS | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN
- | POLICY_SERVER_ADMIN | POLICY_LOOKUP_NAMES;
-pub const POLICY_READ: ULONG = STANDARD_RIGHTS_READ | POLICY_VIEW_AUDIT_INFORMATION
- | POLICY_GET_PRIVATE_INFORMATION;
-pub const POLICY_WRITE: ULONG = STANDARD_RIGHTS_WRITE | POLICY_TRUST_ADMIN | POLICY_CREATE_ACCOUNT
- | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE | POLICY_SET_DEFAULT_QUOTA_LIMITS
- | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN | POLICY_SERVER_ADMIN;
-pub const POLICY_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE | POLICY_VIEW_LOCAL_INFORMATION
- | POLICY_LOOKUP_NAMES;
-STRUCT!{struct LSA_TRANSLATED_SID {
- Use: SID_NAME_USE,
- RelativeId: ULONG,
- DomainIndex: LONG,
-}}
-pub type PLSA_TRANSLATED_SID = *mut LSA_TRANSLATED_SID;
-pub type POLICY_SYSTEM_ACCESS_MODE = ULONG;
-pub type PPOLICY_SYSTEM_ACCESS_MODE = *mut POLICY_SYSTEM_ACCESS_MODE;
-pub const POLICY_MODE_INTERACTIVE: ULONG = SECURITY_ACCESS_INTERACTIVE_LOGON;
-pub const POLICY_MODE_NETWORK: ULONG = SECURITY_ACCESS_NETWORK_LOGON;
-pub const POLICY_MODE_BATCH: ULONG = SECURITY_ACCESS_BATCH_LOGON;
-pub const POLICY_MODE_SERVICE: ULONG = SECURITY_ACCESS_SERVICE_LOGON;
-pub const POLICY_MODE_PROXY: ULONG = SECURITY_ACCESS_PROXY_LOGON;
-pub const POLICY_MODE_DENY_INTERACTIVE: ULONG = SECURITY_ACCESS_DENY_INTERACTIVE_LOGON;
-pub const POLICY_MODE_DENY_NETWORK: ULONG = SECURITY_ACCESS_DENY_NETWORK_LOGON;
-pub const POLICY_MODE_DENY_BATCH: ULONG = SECURITY_ACCESS_DENY_BATCH_LOGON;
-pub const POLICY_MODE_DENY_SERVICE: ULONG = SECURITY_ACCESS_DENY_SERVICE_LOGON;
-pub const POLICY_MODE_REMOTE_INTERACTIVE: ULONG = SECURITY_ACCESS_REMOTE_INTERACTIVE_LOGON;
-pub const POLICY_MODE_DENY_REMOTE_INTERACTIVE: ULONG =
- SECURITY_ACCESS_DENY_REMOTE_INTERACTIVE_LOGON;
-pub const POLICY_MODE_ALL: ULONG = POLICY_MODE_INTERACTIVE | POLICY_MODE_NETWORK
- | POLICY_MODE_BATCH | POLICY_MODE_SERVICE | POLICY_MODE_PROXY | POLICY_MODE_DENY_INTERACTIVE
- | POLICY_MODE_DENY_NETWORK | SECURITY_ACCESS_DENY_BATCH_LOGON
- | SECURITY_ACCESS_DENY_SERVICE_LOGON | POLICY_MODE_REMOTE_INTERACTIVE
- | POLICY_MODE_DENY_REMOTE_INTERACTIVE ;
-pub const POLICY_MODE_ALL_NT4: ULONG = POLICY_MODE_INTERACTIVE | POLICY_MODE_NETWORK
- | POLICY_MODE_BATCH | POLICY_MODE_SERVICE;
-ENUM!{enum POLICY_LSA_SERVER_ROLE {
- PolicyServerRoleBackup = 2,
- PolicyServerRolePrimary,
-}}
-pub type PPOLICY_LSA_SERVER_ROLE = *mut POLICY_LSA_SERVER_ROLE;
-ENUM!{enum POLICY_SERVER_ENABLE_STATE {
- PolicyServerEnabled = 2,
- PolicyServerDisabled,
-}}
-pub type PPOLICY_SERVER_ENABLE_STATE = *mut POLICY_SERVER_ENABLE_STATE;
-pub type POLICY_AUDIT_EVENT_OPTIONS = ULONG;
-pub type PPOLICY_AUDIT_EVENT_OPTIONS = *mut POLICY_AUDIT_EVENT_OPTIONS;
-STRUCT!{struct POLICY_PRIVILEGE_DEFINITION {
- Name: LSA_UNICODE_STRING,
- LocalValue: LUID,
-}}
-pub type PPOLICY_PRIVILEGE_DEFINITION = *mut POLICY_PRIVILEGE_DEFINITION;
-pub const LSA_LOOKUP_ISOLATED_AS_LOCAL: ULONG = 0x80000000;
-pub const LSA_LOOKUP_DISALLOW_CONNECTED_ACCOUNT_INTERNET_SID: ULONG = 0x80000000;
-pub const LSA_LOOKUP_PREFER_INTERNET_NAMES: ULONG = 0x40000000;
-ENUM!{enum POLICY_INFORMATION_CLASS {
- PolicyAuditLogInformation = 1,
- PolicyAuditEventsInformation,
- PolicyPrimaryDomainInformation,
- PolicyPdAccountInformation,
- PolicyAccountDomainInformation,
- PolicyLsaServerRoleInformation,
- PolicyReplicaSourceInformation,
- PolicyDefaultQuotaInformation,
- PolicyModificationInformation,
- PolicyAuditFullSetInformation,
- PolicyAuditFullQueryInformation,
- PolicyDnsDomainInformation,
- PolicyDnsDomainInformationInt,
- PolicyLocalAccountDomainInformation,
- PolicyLastEntry,
-}}
-pub type PPOLICY_INFORMATION_CLASS = *mut POLICY_INFORMATION_CLASS;
-STRUCT!{struct POLICY_AUDIT_LOG_INFO {
- AuditLogPercentFull: ULONG,
- MaximumLogSize: ULONG,
- AuditRetentionPeriod: LARGE_INTEGER,
- AuditLogFullShutdownInProgress: BOOLEAN,
- TimeToShutdown: LARGE_INTEGER,
- NextAuditRecordId: ULONG,
-}}
-pub type PPOLICY_AUDIT_LOG_INFO = *mut POLICY_AUDIT_LOG_INFO;
-STRUCT!{struct POLICY_AUDIT_EVENTS_INFO {
- AuditingMode: BOOLEAN,
- EventAuditingOptions: PPOLICY_AUDIT_EVENT_OPTIONS,
- MaximumAuditEventCount: ULONG,
-}}
-pub type PPOLICY_AUDIT_EVENTS_INFO = *mut POLICY_AUDIT_EVENTS_INFO;
-STRUCT!{struct POLICY_AUDIT_SUBCATEGORIES_INFO {
- MaximumSubCategoryCount: ULONG,
- EventAuditingOptions: PPOLICY_AUDIT_EVENT_OPTIONS,
-}}
-pub type PPOLICY_AUDIT_SUBCATEGORIES_INFO = *mut POLICY_AUDIT_SUBCATEGORIES_INFO;
-STRUCT!{struct POLICY_AUDIT_CATEGORIES_INFO {
- MaximumCategoryCount: ULONG,
- SubCategoriesInfo: PPOLICY_AUDIT_SUBCATEGORIES_INFO,
-}}
-pub type PPOLICY_AUDIT_CATEGORIES_INFO = *mut POLICY_AUDIT_CATEGORIES_INFO;
-pub const PER_USER_POLICY_UNCHANGED: UCHAR = 0x00;
-pub const PER_USER_AUDIT_SUCCESS_INCLUDE: UCHAR = 0x01;
-pub const PER_USER_AUDIT_SUCCESS_EXCLUDE: UCHAR = 0x02;
-pub const PER_USER_AUDIT_FAILURE_INCLUDE: UCHAR = 0x04;
-pub const PER_USER_AUDIT_FAILURE_EXCLUDE: UCHAR = 0x08;
-pub const PER_USER_AUDIT_NONE: UCHAR = 0x10;
-pub const VALID_PER_USER_AUDIT_POLICY_FLAG: UCHAR = PER_USER_AUDIT_SUCCESS_INCLUDE
- | PER_USER_AUDIT_SUCCESS_EXCLUDE | PER_USER_AUDIT_FAILURE_INCLUDE
- | PER_USER_AUDIT_FAILURE_EXCLUDE | PER_USER_AUDIT_NONE;
-STRUCT!{struct POLICY_PRIMARY_DOMAIN_INFO {
- Name: LSA_UNICODE_STRING,
- Sid: PSID,
-}}
-pub type PPOLICY_PRIMARY_DOMAIN_INFO = *mut POLICY_PRIMARY_DOMAIN_INFO;
-STRUCT!{struct POLICY_PD_ACCOUNT_INFO {
- Name: LSA_UNICODE_STRING,
-}}
-pub type PPOLICY_PD_ACCOUNT_INFO = *mut POLICY_PD_ACCOUNT_INFO;
-STRUCT!{struct POLICY_LSA_SERVER_ROLE_INFO {
- LsaServerRole: POLICY_LSA_SERVER_ROLE,
-}}
-pub type PPOLICY_LSA_SERVER_ROLE_INFO = *mut POLICY_LSA_SERVER_ROLE_INFO;
-STRUCT!{struct POLICY_REPLICA_SOURCE_INFO {
- ReplicaSource: LSA_UNICODE_STRING,
- ReplicaAccountName: LSA_UNICODE_STRING,
-}}
-pub type PPOLICY_REPLICA_SOURCE_INFO = *mut POLICY_REPLICA_SOURCE_INFO;
-STRUCT!{struct POLICY_DEFAULT_QUOTA_INFO {
- QuotaLimits: QUOTA_LIMITS,
-}}
-pub type PPOLICY_DEFAULT_QUOTA_INFO = *mut POLICY_DEFAULT_QUOTA_INFO;
-STRUCT!{struct POLICY_MODIFICATION_INFO {
- ModifiedId: LARGE_INTEGER,
- DatabaseCreationTime: LARGE_INTEGER,
-}}
-pub type PPOLICY_MODIFICATION_INFO = *mut POLICY_MODIFICATION_INFO;
-STRUCT!{struct POLICY_AUDIT_FULL_SET_INFO {
- ShutDownOnFull: BOOLEAN,
-}}
-pub type PPOLICY_AUDIT_FULL_SET_INFO = *mut POLICY_AUDIT_FULL_SET_INFO;
-STRUCT!{struct POLICY_AUDIT_FULL_QUERY_INFO {
- ShutDownOnFull: BOOLEAN,
- LogIsFull: BOOLEAN,
-}}
-pub type PPOLICY_AUDIT_FULL_QUERY_INFO = *mut POLICY_AUDIT_FULL_QUERY_INFO;
-ENUM!{enum POLICY_DOMAIN_INFORMATION_CLASS {
- PolicyDomainEfsInformation = 2,
- PolicyDomainKerberosTicketInformation,
-}}
-pub type PPOLICY_DOMAIN_INFORMATION_CLASS = *mut POLICY_DOMAIN_INFORMATION_CLASS;
-pub const POLICY_QOS_SCHANNEL_REQUIRED: ULONG = 0x00000001;
-pub const POLICY_QOS_OUTBOUND_INTEGRITY: ULONG = 0x00000002;
-pub const POLICY_QOS_OUTBOUND_CONFIDENTIALITY: ULONG = 0x00000004;
-pub const POLICY_QOS_INBOUND_INTEGRITY: ULONG = 0x00000008;
-pub const POLICY_QOS_INBOUND_CONFIDENTIALITY: ULONG = 0x00000010;
-pub const POLICY_QOS_ALLOW_LOCAL_ROOT_CERT_STORE: ULONG = 0x00000020;
-pub const POLICY_QOS_RAS_SERVER_ALLOWED: ULONG = 0x00000040;
-pub const POLICY_QOS_DHCP_SERVER_ALLOWED: ULONG = 0x00000080;
-STRUCT!{struct POLICY_DOMAIN_EFS_INFO {
- InfoLength: ULONG,
- EfsBlob: PUCHAR,
-}}
-pub type PPOLICY_DOMAIN_EFS_INFO = *mut POLICY_DOMAIN_EFS_INFO;
-pub const POLICY_KERBEROS_VALIDATE_CLIENT: ULONG = 0x00000080;
-STRUCT!{struct POLICY_DOMAIN_KERBEROS_TICKET_INFO {
- AuthenticationOptions: ULONG,
- MaxServiceTicketAge: LARGE_INTEGER,
- MaxTicketAge: LARGE_INTEGER,
- MaxRenewAge: LARGE_INTEGER,
- MaxClockSkew: LARGE_INTEGER,
- Reserved: LARGE_INTEGER,
-}}
-pub type PPOLICY_DOMAIN_KERBEROS_TICKET_INFO = *mut POLICY_DOMAIN_KERBEROS_TICKET_INFO;
-ENUM!{enum POLICY_NOTIFICATION_INFORMATION_CLASS {
- PolicyNotifyAuditEventsInformation = 1,
- PolicyNotifyAccountDomainInformation,
- PolicyNotifyServerRoleInformation,
- PolicyNotifyDnsDomainInformation,
- PolicyNotifyDomainEfsInformation,
- PolicyNotifyDomainKerberosTicketInformation,
- PolicyNotifyMachineAccountPasswordInformation,
- PolicyNotifyGlobalSaclInformation,
- PolicyNotifyMax,
-}}
-pub type PPOLICY_NOTIFICATION_INFORMATION_CLASS = *mut POLICY_NOTIFICATION_INFORMATION_CLASS;
-pub const ACCOUNT_VIEW: ULONG = 0x00000001;
-pub const ACCOUNT_ADJUST_PRIVILEGES: ULONG = 0x00000002;
-pub const ACCOUNT_ADJUST_QUOTAS: ULONG = 0x00000004;
-pub const ACCOUNT_ADJUST_SYSTEM_ACCESS: ULONG = 0x00000008;
-pub const ACCOUNT_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | ACCOUNT_VIEW
- | ACCOUNT_ADJUST_PRIVILEGES | ACCOUNT_ADJUST_QUOTAS | ACCOUNT_ADJUST_SYSTEM_ACCESS;
-pub const ACCOUNT_READ: ULONG = STANDARD_RIGHTS_READ | ACCOUNT_VIEW;
-pub const ACCOUNT_WRITE: ULONG = STANDARD_RIGHTS_WRITE | ACCOUNT_ADJUST_PRIVILEGES
- | ACCOUNT_ADJUST_QUOTAS | ACCOUNT_ADJUST_SYSTEM_ACCESS;
-pub const ACCOUNT_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE;
-DECLARE_HANDLE!{LSA_HANDLE, __LSA_HANDLE}
-pub const TRUSTED_QUERY_DOMAIN_NAME: ULONG = 0x00000001;
-pub const TRUSTED_QUERY_CONTROLLERS: ULONG = 0x00000002;
-pub const TRUSTED_SET_CONTROLLERS: ULONG = 0x00000004;
-pub const TRUSTED_QUERY_POSIX: ULONG = 0x00000008;
-pub const TRUSTED_SET_POSIX: ULONG = 0x00000010;
-pub const TRUSTED_SET_AUTH: ULONG = 0x00000020;
-pub const TRUSTED_QUERY_AUTH: ULONG = 0x00000040;
-pub const TRUSTED_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | TRUSTED_QUERY_DOMAIN_NAME
- | TRUSTED_QUERY_CONTROLLERS | TRUSTED_SET_CONTROLLERS | TRUSTED_QUERY_POSIX | TRUSTED_SET_POSIX
- | TRUSTED_SET_AUTH | TRUSTED_QUERY_AUTH;
-pub const TRUSTED_READ: ULONG = STANDARD_RIGHTS_READ | TRUSTED_QUERY_DOMAIN_NAME;
-pub const TRUSTED_WRITE: ULONG = STANDARD_RIGHTS_WRITE | TRUSTED_SET_CONTROLLERS
- | TRUSTED_SET_POSIX | TRUSTED_SET_AUTH;
-pub const TRUSTED_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE | TRUSTED_QUERY_CONTROLLERS
- | TRUSTED_QUERY_POSIX;
-ENUM!{enum TRUSTED_INFORMATION_CLASS {
- TrustedDomainNameInformation = 1,
- TrustedControllersInformation,
- TrustedPosixOffsetInformation,
- TrustedPasswordInformation,
- TrustedDomainInformationBasic,
- TrustedDomainInformationEx,
- TrustedDomainAuthInformation,
- TrustedDomainFullInformation,
- TrustedDomainAuthInformationInternal,
- TrustedDomainFullInformationInternal,
- TrustedDomainInformationEx2Internal,
- TrustedDomainFullInformation2Internal,
- TrustedDomainSupportedEncryptionTypes,
-}}
-pub type PTRUSTED_INFORMATION_CLASS = *mut TRUSTED_INFORMATION_CLASS;
-STRUCT!{struct TRUSTED_DOMAIN_NAME_INFO {
- Name: LSA_UNICODE_STRING,
-}}
-pub type PTRUSTED_DOMAIN_NAME_INFO = *mut TRUSTED_DOMAIN_NAME_INFO;
-STRUCT!{struct TRUSTED_CONTROLLERS_INFO {
- Entries: ULONG,
- Names: PLSA_UNICODE_STRING,
-}}
-pub type PTRUSTED_CONTROLLERS_INFO = *mut TRUSTED_CONTROLLERS_INFO;
-STRUCT!{struct TRUSTED_POSIX_OFFSET_INFO {
- Offset: ULONG,
-}}
-pub type PTRUSTED_POSIX_OFFSET_INFO = *mut TRUSTED_POSIX_OFFSET_INFO;
-STRUCT!{struct TRUSTED_PASSWORD_INFO {
- Password: LSA_UNICODE_STRING,
- OldPassword: LSA_UNICODE_STRING,
-}}
-pub type PTRUSTED_PASSWORD_INFO = *mut TRUSTED_PASSWORD_INFO;
-pub type TRUSTED_DOMAIN_INFORMATION_BASIC = LSA_TRUST_INFORMATION;
-pub type PTRUSTED_DOMAIN_INFORMATION_BASIC = PLSA_TRUST_INFORMATION;
-// NOTE: Ignoring Win XP constants
-pub const TRUST_DIRECTION_DISABLED: ULONG = 0x00000000;
-pub const TRUST_DIRECTION_INBOUND: ULONG = 0x00000001;
-pub const TRUST_DIRECTION_OUTBOUND: ULONG = 0x00000002;
-pub const TRUST_DIRECTION_BIDIRECTIONAL: ULONG = TRUST_DIRECTION_INBOUND
- | TRUST_DIRECTION_OUTBOUND;
-pub const TRUST_TYPE_DOWNLEVEL: ULONG = 0x00000001;
-pub const TRUST_TYPE_UPLEVEL: ULONG = 0x00000002;
-pub const TRUST_TYPE_MIT: ULONG = 0x00000003;
-pub const TRUST_ATTRIBUTE_NON_TRANSITIVE: ULONG = 0x00000001;
-pub const TRUST_ATTRIBUTE_UPLEVEL_ONLY: ULONG = 0x00000002;
-pub const TRUST_ATTRIBUTE_QUARANTINED_DOMAIN: ULONG = 0x00000004;
-pub const TRUST_ATTRIBUTE_FOREST_TRANSITIVE: ULONG = 0x00000008;
-pub const TRUST_ATTRIBUTE_CROSS_ORGANIZATION: ULONG = 0x00000010;
-pub const TRUST_ATTRIBUTE_WITHIN_FOREST: ULONG = 0x00000020;
-pub const TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL: ULONG = 0x00000040;
-pub const TRUST_ATTRIBUTE_TRUST_USES_RC4_ENCRYPTION: ULONG = 0x00000080;
-pub const TRUST_ATTRIBUTE_TRUST_USES_AES_KEYS: ULONG = 0x00000100;
-pub const TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION: ULONG = 0x00000200;
-pub const TRUST_ATTRIBUTE_PIM_TRUST: ULONG = 0x00000400;
-pub const TRUST_ATTRIBUTES_VALID: ULONG = 0xFF03FFFF;
-pub const TRUST_ATTRIBUTES_USER: ULONG = 0xFF000000;
-STRUCT!{struct TRUSTED_DOMAIN_INFORMATION_EX {
- Name: LSA_UNICODE_STRING,
- FlatName: LSA_UNICODE_STRING,
- Sid: PSID,
- TrustDirection: ULONG,
- TrustType: ULONG,
- TrustAttributes: ULONG,
-}}
-pub type PTRUSTED_DOMAIN_INFORMATION_EX = *mut TRUSTED_DOMAIN_INFORMATION_EX;
-STRUCT!{struct TRUSTED_DOMAIN_INFORMATION_EX2 {
- Name: LSA_UNICODE_STRING,
- FlatName: LSA_UNICODE_STRING,
- Sid: PSID,
- TrustDirection: ULONG,
- TrustType: ULONG,
- TrustAttributes: ULONG,
- ForestTrustLength: ULONG,
- ForestTrustInfo: PUCHAR,
-}}
-pub type PTRUSTED_DOMAIN_INFORMATION_EX2 = *mut TRUSTED_DOMAIN_INFORMATION_EX2;
-pub const TRUST_AUTH_TYPE_NONE: ULONG = 0;
-pub const TRUST_AUTH_TYPE_NT4OWF: ULONG = 1;
-pub const TRUST_AUTH_TYPE_CLEAR: ULONG = 2;
-pub const TRUST_AUTH_TYPE_VERSION: ULONG = 3;
-STRUCT!{struct LSA_AUTH_INFORMATION {
- LastUpdateTime: LARGE_INTEGER,
- AuthType: ULONG,
- AuthInfoLength: ULONG,
- AuthInfo: PUCHAR,
-}}
-pub type PLSA_AUTH_INFORMATION = *mut LSA_AUTH_INFORMATION;
-STRUCT!{struct TRUSTED_DOMAIN_AUTH_INFORMATION {
- IncomingAuthInfos: ULONG,
- IncomingAuthenticationInformation: PLSA_AUTH_INFORMATION,
- IncomingPreviousAuthenticationInformation: PLSA_AUTH_INFORMATION,
- OutgoingAuthInfos: ULONG,
- OutgoingAuthenticationInformation: PLSA_AUTH_INFORMATION,
- OutgoingPreviousAuthenticationInformation: PLSA_AUTH_INFORMATION,
-}}
-pub type PTRUSTED_DOMAIN_AUTH_INFORMATION = *mut TRUSTED_DOMAIN_AUTH_INFORMATION;
-STRUCT!{struct TRUSTED_DOMAIN_FULL_INFORMATION {
- Information: TRUSTED_DOMAIN_INFORMATION_EX,
- PosixOffset: TRUSTED_POSIX_OFFSET_INFO,
- AuthInformation: TRUSTED_DOMAIN_AUTH_INFORMATION,
-}}
-pub type PTRUSTED_DOMAIN_FULL_INFORMATION = *mut TRUSTED_DOMAIN_FULL_INFORMATION;
-STRUCT!{struct TRUSTED_DOMAIN_FULL_INFORMATION2 {
- Information: TRUSTED_DOMAIN_INFORMATION_EX2,
- PosixOffset: TRUSTED_POSIX_OFFSET_INFO,
- AuthInformation: TRUSTED_DOMAIN_AUTH_INFORMATION,
-}}
-pub type PTRUSTED_DOMAIN_FULL_INFORMATION2 = *mut TRUSTED_DOMAIN_FULL_INFORMATION2;
-STRUCT!{struct TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES {
- SupportedEncryptionTypes: ULONG,
-}}
-pub type PTRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES =
- *mut TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES;
-ENUM!{enum LSA_FOREST_TRUST_RECORD_TYPE {
- ForestTrustTopLevelName,
- ForestTrustTopLevelNameEx,
- ForestTrustDomainInfo,
- ForestTrustRecordTypeLast = ForestTrustDomainInfo,
-}}
-pub const LSA_FTRECORD_DISABLED_REASONS: ULONG = 0x0000FFFF;
-pub const LSA_TLN_DISABLED_NEW: ULONG = 0x00000001;
-pub const LSA_TLN_DISABLED_ADMIN: ULONG = 0x00000002;
-pub const LSA_TLN_DISABLED_CONFLICT: ULONG = 0x00000004;
-pub const LSA_SID_DISABLED_ADMIN: ULONG = 0x00000001;
-pub const LSA_SID_DISABLED_CONFLICT: ULONG = 0x00000002;
-pub const LSA_NB_DISABLED_ADMIN: ULONG = 0x00000004;
-pub const LSA_NB_DISABLED_CONFLICT: ULONG = 0x00000008;
-STRUCT!{struct LSA_FOREST_TRUST_DOMAIN_INFO {
- Sid: PSID,
- DnsName: LSA_UNICODE_STRING,
- NetbiosName: LSA_UNICODE_STRING,
-}}
-pub type PLSA_FOREST_TRUST_DOMAIN_INFO = *mut LSA_FOREST_TRUST_DOMAIN_INFO;
-pub const MAX_FOREST_TRUST_BINARY_DATA_SIZE: SIZE_T = 128 * 1024;
-STRUCT!{struct LSA_FOREST_TRUST_BINARY_DATA {
- Length: ULONG,
- Buffer: PUCHAR,
-}}
-pub type PLSA_FOREST_TRUST_BINARY_DATA = *mut LSA_FOREST_TRUST_BINARY_DATA;
-UNION!{union LSA_FOREST_TRUST_RECORD_FORESTTRUSTDATA {
- [u32; 5] [u64; 5],
- TopLevelName TopLevelName_mut: LSA_UNICODE_STRING,
- DomainInfo DomainInfo_mut: LSA_FOREST_TRUST_DOMAIN_INFO,
- Data Data_mut: LSA_FOREST_TRUST_BINARY_DATA,
-}}
-STRUCT!{struct LSA_FOREST_TRUST_RECORD {
- Flags: ULONG,
- ForestTrustType: LSA_FOREST_TRUST_RECORD_TYPE,
- Time: LARGE_INTEGER,
- ForestTrustData: LSA_FOREST_TRUST_RECORD_FORESTTRUSTDATA,
-}}
-pub type PLSA_FOREST_TRUST_RECORD = *mut LSA_FOREST_TRUST_RECORD;
-pub const MAX_RECORDS_IN_FOREST_TRUST_INFO: SIZE_T = 4000;
-STRUCT!{struct LSA_FOREST_TRUST_INFORMATION {
- RecordCount: ULONG,
- Entries: *mut PLSA_FOREST_TRUST_RECORD,
-}}
-pub type PLSA_FOREST_TRUST_INFORMATION = LSA_FOREST_TRUST_INFORMATION;
-ENUM!{enum LSA_FOREST_TRUST_COLLISION_RECORD_TYPE {
- CollisionTdo,
- CollisionXref,
- CollisionOther,
-}}
-STRUCT!{struct LSA_FOREST_TRUST_COLLISION_RECORD {
- Index: ULONG,
- Type: LSA_FOREST_TRUST_COLLISION_RECORD_TYPE,
- Flags: ULONG,
- Name: LSA_UNICODE_STRING,
-}}
-pub type PLSA_FOREST_TRUST_COLLISION_RECORD = *mut LSA_FOREST_TRUST_COLLISION_RECORD;
-STRUCT!{struct LSA_FOREST_TRUST_COLLISION_INFORMATION {
- RecordCount: ULONG,
- Entries: *mut PLSA_FOREST_TRUST_COLLISION_RECORD,
-}}
-pub type PLSA_FOREST_TRUST_COLLISION_INFORMATION = *mut LSA_FOREST_TRUST_COLLISION_INFORMATION;
-pub const SECRET_SET_VALUE: ULONG = 0x00000001;
-pub const SECRET_QUERY_VALUE: ULONG = 0x00000002;
-pub const SECRET_ALL_ACCESS: ULONG = STANDARD_RIGHTS_REQUIRED | SECRET_SET_VALUE
- | SECRET_QUERY_VALUE;
-pub const SECRET_READ: ULONG = STANDARD_RIGHTS_READ | SECRET_QUERY_VALUE;
-pub const SECRET_WRITE: ULONG = STANDARD_RIGHTS_WRITE | SECRET_SET_VALUE;
-pub const SECRET_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE;
-pub const LSA_GLOBAL_SECRET_PREFIX: &'static str = "G$";
-pub const LSA_GLOBAL_SECRET_PREFIX_LENGTH: SIZE_T = 2;
-pub const LSA_LOCAL_SECRET_PREFIX: &'static str = "L$";
-pub const LSA_LOCAL_SECRET_PREFIX_LENGTH: SIZE_T = 2;
-pub const LSA_MACHINE_SECRET_PREFIX: &'static str = "M$";
-pub const LSA_MACHINE_SECRET_PREFIX_LENGTH: SIZE_T = 2;
-pub const LSA_SECRET_MAXIMUM_COUNT: SIZE_T = 0x00001000;
-pub const LSA_SECRET_MAXIMUM_LENGTH: SIZE_T = 0x00000200;
-DECLARE_HANDLE!{LSA_ENUMERATION_HANDLE, __LSA_ENUMERATION_HANDLE}
-pub type PLSA_ENUMERATION_HANDLE = *mut LSA_ENUMERATION_HANDLE;
-STRUCT!{struct LSA_ENUMERATION_INFORMATION {
- Sid: PSID,
-}}
-pub type PLSA_ENUMERATION_INFORMATION = *mut LSA_ENUMERATION_INFORMATION;
-extern "system" {
- pub fn LsaFreeMemory(
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaClose(
- ObjectHandle: LSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaDelete(
- ObjectHandle: LSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaQuerySecurityObject(
- ObjectHandle: LSA_HANDLE,
- SecurityInformation: SECURITY_INFORMATION,
- SecurityDescriptor: *mut PSECURITY_DESCRIPTOR,
- ) -> NTSTATUS;
- pub fn LsaSetSecurityObject(
- ObjectHandle: LSA_HANDLE,
- SecurityInformation: SECURITY_INFORMATION,
- SecurityDescriptor: PSECURITY_DESCRIPTOR,
- ) -> NTSTATUS;
- pub fn LsaChangePassword(
- ServerName: PLSA_UNICODE_STRING,
- DomainName: PLSA_UNICODE_STRING,
- AccountName: PLSA_UNICODE_STRING,
- OldPassword: PLSA_UNICODE_STRING,
- NewPassword: PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
-}
-STRUCT!{struct LSA_LAST_INTER_LOGON_INFO {
- LastSuccessfulLogon: LARGE_INTEGER,
- LastFailedLogon: LARGE_INTEGER,
- FailedAttemptCountSinceLastSuccessfulLogon: ULONG,
-}}
-pub type PLSA_LAST_INTER_LOGON_INFO = *mut LSA_LAST_INTER_LOGON_INFO;
-STRUCT!{struct SECURITY_LOGON_SESSION_DATA {
- Size: ULONG,
- LogonId: LUID,
- UserName: LSA_UNICODE_STRING,
- LogonDomain: LSA_UNICODE_STRING,
- AuthenticationPackage: LSA_UNICODE_STRING,
- LogonType: ULONG,
- Session: ULONG,
- Sid: PSID,
- LogonTime: LARGE_INTEGER,
- LogonServer: LSA_UNICODE_STRING,
- DnsDomainName: LSA_UNICODE_STRING,
- Upn: LSA_UNICODE_STRING,
- UserFlags: ULONG,
- LastLogonInfo: LSA_LAST_INTER_LOGON_INFO,
- LogonScript: LSA_UNICODE_STRING,
- ProfilePath: LSA_UNICODE_STRING,
- HomeDirectory: LSA_UNICODE_STRING,
- HomeDirectoryDrive: LSA_UNICODE_STRING,
- LogoffTime: LARGE_INTEGER,
- KickOffTime: LARGE_INTEGER,
- PasswordLastSet: LARGE_INTEGER,
- PasswordCanChange: LARGE_INTEGER,
- PasswordMustChange: LARGE_INTEGER,
-}}
-pub type PSECURITY_LOGON_SESSION_DATA = *mut SECURITY_LOGON_SESSION_DATA;
-extern "system" {
- pub fn LsaEnumerateLogonSessions(
- LogonSessionCount: PULONG,
- LogonSessionList: *mut PLUID,
- ) -> NTSTATUS;
- pub fn LsaGetLogonSessionData(
- LogonId: PLUID,
- ppLogonSessionData: *mut PSECURITY_LOGON_SESSION_DATA,
- ) -> NTSTATUS;
- pub fn LsaOpenPolicy(
- SystemName: PLSA_UNICODE_STRING,
- ObjectAttributes: PLSA_OBJECT_ATTRIBUTES,
- DesiredAccess: ACCESS_MASK,
- PolicyHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaOpenPolicySce(
- SystemName: PLSA_UNICODE_STRING,
- ObjectAttributes: PLSA_OBJECT_ATTRIBUTES,
- DesiredAccess: ACCESS_MASK,
- PolicyHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
-}
-pub const MAXIMUM_CAPES_PER_CAP: SIZE_T = 0x7F;
-pub const CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG: ULONG = 0x00000001;
-pub const CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG: ULONG = 0x00000100;
-#[inline]
-pub fn STAGING_FLAG(Effective: ULONG) -> ULONG {
- (Effective & 0xF) << 8
-}
-pub const CENTRAL_ACCESS_POLICY_STAGED_FLAG: ULONG = 0x00010000;
-pub const CENTRAL_ACCESS_POLICY_VALID_FLAG_MASK: ULONG =
- CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG
- | CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG | CENTRAL_ACCESS_POLICY_STAGED_FLAG;
-pub const LSASETCAPS_RELOAD_FLAG: ULONG = 0x00000001;
-pub const LSASETCAPS_VALID_FLAG_MASK: ULONG = LSASETCAPS_RELOAD_FLAG;
-STRUCT!{struct CENTRAL_ACCESS_POLICY_ENTRY {
- Name: LSA_UNICODE_STRING,
- Description: LSA_UNICODE_STRING,
- ChangeId: LSA_UNICODE_STRING,
- LengthAppliesTo: ULONG,
- AppliesTo: PUCHAR,
- LengthSD: ULONG,
- SD: PSECURITY_DESCRIPTOR,
- LengthStagedSD: ULONG,
- StagedSD: PSECURITY_DESCRIPTOR,
- Flags: ULONG,
-}}
-pub type PCENTRAL_ACCESS_POLICY_ENTRY = *mut CENTRAL_ACCESS_POLICY_ENTRY;
-pub type PCCENTRAL_ACCESS_POLICY_ENTRY = *const CENTRAL_ACCESS_POLICY_ENTRY;
-STRUCT!{struct CENTRAL_ACCESS_POLICY {
- CAPID: PSID,
- Name: LSA_UNICODE_STRING,
- Description: LSA_UNICODE_STRING,
- ChangeId: LSA_UNICODE_STRING,
- Flags: ULONG,
- CAPECount: ULONG,
- CAPEs: *mut PCENTRAL_ACCESS_POLICY_ENTRY,
-}}
-pub type PCENTRAL_ACCESS_POLICY = *mut CENTRAL_ACCESS_POLICY;
-pub type PCCENTRAL_ACCESS_POLICY = *const CENTRAL_ACCESS_POLICY;
-extern "system" {
- pub fn LsaSetCAPs(
- CAPDNs: PLSA_UNICODE_STRING,
- CAPDNCount: ULONG,
- Flags: ULONG,
- ) -> NTSTATUS;
- pub fn LsaGetAppliedCAPIDs(
- SystemName: PLSA_UNICODE_STRING,
- CAPIDs: *mut *mut PSID,
- CAPIDCount: PULONG,
- ) -> NTSTATUS;
- pub fn LsaQueryCAPs(
- CAPIDs: *mut PSID,
- CAPIDCount: ULONG,
- CAPs: *mut PCENTRAL_ACCESS_POLICY,
- CAPCount: PULONG,
- ) -> NTSTATUS;
- pub fn LsaQueryInformationPolicy(
- PolicyHandle: LSA_HANDLE,
- InformationClass: POLICY_INFORMATION_CLASS,
- Buffer: *mut PVOID,
- ) -> NTSTATUS;
- pub fn LsaSetInformationPolicy(
- PolicyHandle: LSA_HANDLE,
- InformationClass: POLICY_INFORMATION_CLASS,
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaQueryDomainInformationPolicy(
- PolicyHandle: LSA_HANDLE,
- InformationClass: POLICY_DOMAIN_INFORMATION_CLASS,
- Buffer: *mut PVOID,
- ) -> NTSTATUS;
- pub fn LsaSetDomainInformationPolicy(
- PolicyHandle: LSA_HANDLE,
- InformationClass: POLICY_DOMAIN_INFORMATION_CLASS,
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaRegisterPolicyChangeNotification(
- InformationClass: POLICY_NOTIFICATION_INFORMATION_CLASS,
- NotifcationEventHandle: HANDLE,
- ) -> NTSTATUS;
- pub fn LsaUnregisterPolicyChangeNotification(
- InformationClass: POLICY_NOTIFICATION_INFORMATION_CLASS,
- NotifcationEventHandle: HANDLE,
- ) -> NTSTATUS;
- pub fn LsaClearAuditLog(
- PolicyHandle: LSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaCreateAccount(
- PolicyHandle: LSA_HANDLE,
- AccountSid: PSID,
- DesiredAccess: ACCESS_MASK,
- AccountHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaEnumerateAccounts(
- PolicyHandle: LSA_HANDLE,
- EnumerationContext: PLSA_ENUMERATION_HANDLE,
- Buffer: *mut PVOID,
- PreferredMaximumLength: ULONG,
- CountReturned: PULONG,
- ) -> NTSTATUS;
- pub fn LsaCreateTrustedDomain(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainInformation: PLSA_TRUST_INFORMATION,
- DesiredAccess: ACCESS_MASK,
- TrustedDomainHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaEnumerateTrustedDomains(
- PolicyHandle: LSA_HANDLE,
- EnumerationContext: PLSA_ENUMERATION_HANDLE,
- Buffer: *mut PVOID,
- PreferredMaximumLength: ULONG,
- CountReturned: PULONG,
- ) -> NTSTATUS;
- pub fn LsaEnumeratePrivileges(
- PolicyHandle: LSA_HANDLE,
- EnumerationContext: PLSA_ENUMERATION_HANDLE,
- Buffer: *mut PVOID,
- PreferredMaximumLength: ULONG,
- CountReturned: PULONG,
- ) -> NTSTATUS;
- pub fn LsaLookupNames(
- PolicyHandle: LSA_HANDLE,
- Count: ULONG,
- Names: PLSA_UNICODE_STRING,
- ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST,
- Sids: *mut PLSA_TRANSLATED_SID,
- ) -> NTSTATUS;
- pub fn LsaLookupNames2(
- PolicyHandle: LSA_HANDLE,
- Flags: ULONG,
- Count: ULONG,
- Names: PLSA_UNICODE_STRING,
- ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST,
- Sids: *mut PLSA_TRANSLATED_SID2,
- ) -> NTSTATUS;
- pub fn LsaLookupSids(
- PolicyHandle: LSA_HANDLE,
- Count: ULONG,
- Sids: *mut PSID,
- ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST,
- Names: *mut PLSA_TRANSLATED_NAME,
- ) -> NTSTATUS;
- pub fn LsaLookupSids2(
- PolicyHandle: LSA_HANDLE,
- LookupOptions: ULONG,
- Count: ULONG,
- Sids: *mut PSID,
- ReferencedDomains: *mut PLSA_REFERENCED_DOMAIN_LIST,
- Names: *mut PLSA_TRANSLATED_NAME,
- ) -> NTSTATUS;
- pub fn LsaCreateSecret(
- PolicyHandle: LSA_HANDLE,
- SecretName: PLSA_UNICODE_STRING,
- DesiredAccess: ACCESS_MASK,
- SecretHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaOpenAccount(
- PolicyHandle: LSA_HANDLE,
- AccountSid: PSID,
- DesiredAccess: ACCESS_MASK,
- AccountHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaEnumeratePrivilegesOfAccount(
- AccountHandle: LSA_HANDLE,
- Privileges: *mut PPRIVILEGE_SET,
- ) -> NTSTATUS;
- pub fn LsaAddPrivilegesToAccount(
- AccountHandle: LSA_HANDLE,
- Privileges: PPRIVILEGE_SET,
- ) -> NTSTATUS;
- pub fn LsaRemovePrivilegesFromAccount(
- AccountHandle: LSA_HANDLE,
- AllPrivileges: BOOLEAN,
- Privileges: PPRIVILEGE_SET,
- ) -> NTSTATUS;
- pub fn LsaGetQuotasForAccount(
- AccountHandle: LSA_HANDLE,
- QuotaLimits: PQUOTA_LIMITS,
- ) -> NTSTATUS;
- pub fn LsaSetQuotasForAccount(
- AccountHandle: LSA_HANDLE,
- QuotaLimits: PQUOTA_LIMITS,
- ) -> NTSTATUS;
- pub fn LsaGetSystemAccessAccount(
- AccountHandle: LSA_HANDLE,
- SystemAccess: PULONG,
- ) -> NTSTATUS;
- pub fn LsaSetSystemAccessAccount(
- AccountHandle: LSA_HANDLE,
- SystemAccess: ULONG,
- ) -> NTSTATUS;
- pub fn LsaOpenTrustedDomain(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainSid: PSID,
- DesiredAccess: ACCESS_MASK,
- TrustedDomainHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaQueryInfoTrustedDomain(
- TrustedDomainHandle: LSA_HANDLE,
- InformationClass: TRUSTED_INFORMATION_CLASS,
- Buffer: *mut PVOID,
- ) -> NTSTATUS;
- pub fn LsaSetInformationTrustedDomain(
- TrustedDomainHandle: LSA_HANDLE,
- InformationClass: TRUSTED_INFORMATION_CLASS,
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaOpenSecret(
- PolicyHandle: LSA_HANDLE,
- SecretName: PLSA_UNICODE_STRING,
- DesiredAccess: ACCESS_MASK,
- SecretHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaSetSecret(
- SecretHandle: LSA_HANDLE,
- CurrentValue: PLSA_UNICODE_STRING,
- OldValue: PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
- pub fn LsaQuerySecret(
- SecretHandle: LSA_HANDLE,
- CurrentValue: *mut PLSA_UNICODE_STRING,
- CurrentValueSetTime: PLARGE_INTEGER,
- OldValue: *mut PLSA_UNICODE_STRING,
- OldValueSetTime: PLARGE_INTEGER,
- ) -> NTSTATUS;
- pub fn LsaLookupPrivilegeValue(
- PolicyHandle: LSA_HANDLE,
- Name: PLSA_UNICODE_STRING,
- Value: PLUID,
- ) -> NTSTATUS;
- pub fn LsaLookupPrivilegeName(
- PolicyHandle: LSA_HANDLE,
- Value: PLUID,
- Name: *mut PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
- pub fn LsaLookupPrivilegeDisplayName(
- PolicyHandle: LSA_HANDLE,
- Name: PLSA_UNICODE_STRING,
- DisplayName: *mut PLSA_UNICODE_STRING,
- LanguageReturned: PSHORT,
- ) -> NTSTATUS;
-}
-extern "C" {
- pub fn LsaGetUserName(
- UserName: *mut PLSA_UNICODE_STRING,
- DomainName: *mut PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
- pub fn LsaGetRemoteUserName(
- SystemName: PLSA_UNICODE_STRING,
- UserName: *mut PLSA_UNICODE_STRING,
- DomainName: *mut PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
-}
-pub const SE_INTERACTIVE_LOGON_NAME: &'static str = "SeInteractiveLogonRight";
-pub const SE_NETWORK_LOGON_NAME: &'static str = "SeNetworkLogonRight";
-pub const SE_BATCH_LOGON_NAME: &'static str = "SeBatchLogonRight";
-pub const SE_SERVICE_LOGON_NAME: &'static str = "SeServiceLogonRight";
-pub const SE_DENY_INTERACTIVE_LOGON_NAME: &'static str = "SeDenyInteractiveLogonRight";
-pub const SE_DENY_NETWORK_LOGON_NAME: &'static str = "SeDenyNetworkLogonRight";
-pub const SE_DENY_BATCH_LOGON_NAME: &'static str = "SeDenyBatchLogonRight";
-pub const SE_DENY_SERVICE_LOGON_NAME: &'static str = "SeDenyServiceLogonRight";
-pub const SE_REMOTE_INTERACTIVE_LOGON_NAME: &'static str = "SeRemoteInteractiveLogonRight";
-pub const SE_DENY_REMOTE_INTERACTIVE_LOGON_NAME: &'static str =
- "SeDenyRemoteInteractiveLogonRight";
-extern "system" {
- pub fn LsaEnumerateAccountsWithUserRight(
- PolictHandle: LSA_HANDLE,
- UserRights: PLSA_UNICODE_STRING,
- EnumerationBuffer: *mut PVOID,
- CountReturned: PULONG,
- ) -> NTSTATUS;
- pub fn LsaEnumerateAccountRights(
- PolicyHandle: LSA_HANDLE,
- AccountSid: PSID,
- UserRights: *mut PLSA_UNICODE_STRING,
- CountOfRights: PULONG,
- ) -> NTSTATUS;
- pub fn LsaAddAccountRights(
- PolicyHandle: LSA_HANDLE,
- AccountSid: PSID,
- UserRights: PLSA_UNICODE_STRING,
- CountOfRights: ULONG,
- ) -> NTSTATUS;
- pub fn LsaRemoveAccountRights(
- PolicyHandle: LSA_HANDLE,
- AccountSid: PSID,
- AllRights: BOOLEAN,
- UserRights: PLSA_UNICODE_STRING,
- CountOfRights: ULONG,
- ) -> NTSTATUS;
- pub fn LsaOpenTrustedDomainByName(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainName: PLSA_UNICODE_STRING,
- DesiredAccess: ACCESS_MASK,
- TrustedDomainHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaQueryTrustedDomainInfo(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainSid: PSID,
- InformationClass: TRUSTED_INFORMATION_CLASS,
- Buffer: *mut PVOID,
- ) -> NTSTATUS;
- pub fn LsaSetTrustedDomainInformation(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainSid: PSID,
- InformationClass: TRUSTED_INFORMATION_CLASS,
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaDeleteTrustedDomain(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainSid: PSID,
- ) -> NTSTATUS;
- pub fn LsaQueryTrustedDomainInfoByName(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainName: PLSA_UNICODE_STRING,
- InformationClass: TRUSTED_INFORMATION_CLASS,
- Buffer: *mut PVOID,
- ) -> NTSTATUS;
- pub fn LsaSetTrustedDomainInfoByName(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainName: PLSA_UNICODE_STRING,
- InformationClass: TRUSTED_INFORMATION_CLASS,
- Buffer: PVOID,
- ) -> NTSTATUS;
- pub fn LsaEnumerateTrustedDomainsEx(
- PolicyHandle: LSA_HANDLE,
- EnumerationContext: PLSA_ENUMERATION_HANDLE,
- Buffer: *mut PVOID,
- PreferredMaximumLength: ULONG,
- CountReturned: PULONG,
- ) -> NTSTATUS;
- pub fn LsaCreateTrustedDomainEx(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainInformation: PTRUSTED_DOMAIN_INFORMATION_EX,
- AuthenticationInformation: PTRUSTED_DOMAIN_AUTH_INFORMATION,
- DesiredAccess: ACCESS_MASK,
- TrustedDomainHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
- pub fn LsaQueryForestTrustInformation(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainName: PLSA_UNICODE_STRING,
- ForestTrustInfo: *mut PLSA_FOREST_TRUST_INFORMATION,
- ) -> NTSTATUS;
- pub fn LsaSetForestTrustInformation(
- PolicyHandle: LSA_HANDLE,
- TrustedDomainName: PLSA_UNICODE_STRING,
- ForestTrustInfo: PLSA_FOREST_TRUST_INFORMATION,
- CheckOnly: BOOLEAN,
- CollisionInfo: *mut PLSA_FOREST_TRUST_COLLISION_INFORMATION,
- ) -> NTSTATUS;
- pub fn LsaForestTrustFindMatch(
- PolicyHandle: LSA_HANDLE,
- Type: ULONG,
- Name: PLSA_UNICODE_STRING,
- Match: *mut PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
- pub fn LsaStorePrivateData(
- PolicyHandle: LSA_HANDLE,
- KeyName: PLSA_UNICODE_STRING,
- PrivateData: PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
- pub fn LsaRetrievePrivateData(
- PolicyHandle: LSA_HANDLE,
- KeyName: PLSA_UNICODE_STRING,
- PrivateData: *mut PLSA_UNICODE_STRING,
- ) -> NTSTATUS;
- pub fn LsaNtStatusToWinError(
- Status: NTSTATUS,
- ) -> ULONG;
-}
-ENUM!{enum NEGOTIATE_MESSAGES {
- NegEnumPackagePrefixes = 0,
- NegGetCallerName = 1,
- NegTransferCredentials = 2,
- NegEnumPackageNames = 3,
- NegCallPackageMax,
-}}
-pub const NEGOTIATE_MAX_PREFIX: SIZE_T = 32;
-STRUCT!{struct NEGOTIATE_PACKAGE_PREFIX {
- PackageId: ULONG_PTR,
- PackageDataA: PVOID,
- PackageDataW: PVOID,
- PrefixLen: ULONG_PTR,
- Prefix: [UCHAR; NEGOTIATE_MAX_PREFIX],
-}}
-pub type PNEGOTIATE_PACKAGE_PREFIX = *mut NEGOTIATE_PACKAGE_PREFIX;
-STRUCT!{struct NEGOTIATE_PACKAGE_PREFIXES {
- MessageType: ULONG,
- PrefixCount: ULONG,
- Offset: ULONG,
- Pad: ULONG,
-}}
-pub type PNEGOTIATE_PACKAGE_PREFIXES = *mut NEGOTIATE_PACKAGE_PREFIXES;
-STRUCT!{struct NEGOTIATE_CALLER_NAME_REQUEST {
- MessageType: ULONG,
- LogonId: LUID,
-}}
-pub type PNEGOTIATE_CALLER_NAME_REQUEST = *mut NEGOTIATE_CALLER_NAME_REQUEST;
-STRUCT!{struct NEGOTIATE_CALLER_NAME_RESPONSE {
- Messagetype: ULONG,
- CallerName: PWSTR,
-}}
-pub type PNEGOTIATE_CALLER_NAME_RESPONSE = *mut NEGOTIATE_CALLER_NAME_RESPONSE;
-STRUCT!{struct NEGOTIATE_PACKAGE_NAMES {
- NamesCount: ULONG,
- Names: [UNICODE_STRING; ANYSIZE_ARRAY],
-}}
-pub type PNEGOTIATE_PACKAGE_NAMES = *mut NEGOTIATE_PACKAGE_NAMES;
-pub const NEGOTIATE_ALLOW_NTLM: ULONG = 0x10000000;
-pub const NEGOTIATE_NEG_NTLM: ULONG = 0x20000000;
-STRUCT!{struct NEGOTIATE_PACKAGE_PREFIX_WOW {
- PackageId: ULONG,
- PackageDataA: ULONG,
- PackageDataW: ULONG,
- PrefixLen: ULONG,
- Prefix: [UCHAR; NEGOTIATE_MAX_PREFIX],
-}}
-pub type PNEGOTIATE_PACKAGE_PREFIX_WOW = *mut NEGOTIATE_PACKAGE_PREFIX_WOW;
-STRUCT!{struct NEGOTIATE_CALLER_NAME_RESPONSE_WOW {
- MessageType: ULONG,
- CallerName: ULONG,
-}}
-pub type PNEGOTIATE_CALLER_NAME_RESPONSE_WOW = *mut NEGOTIATE_CALLER_NAME_RESPONSE_WOW;
-extern "system" {
- pub fn LsaSetPolicyReplicationHandle(
- PolicyHandle: PLSA_HANDLE,
- ) -> NTSTATUS;
-}
-pub const MAX_USER_RECORDS: SIZE_T = 1000;
-STRUCT!{struct LSA_USER_REGISTRATION_INFO {
- Sid: LSA_UNICODE_STRING,
- DeviceId: LSA_UNICODE_STRING,
- Username: LSA_UNICODE_STRING,
- Thumbprint: LSA_UNICODE_STRING,
- RegistrationTime: LARGE_INTEGER,
-}}
-pub type PLSA_USER_REGISTRATION_INFO = *mut LSA_USER_REGISTRATION_INFO;
-STRUCT!{struct LSA_REGISTRATION_INFO {
- RegisteredCount: ULONG,
- UserRegistrationInfo: *mut PLSA_USER_REGISTRATION_INFO,
-}}
-pub type PLSA_REGISTRATION_INFO = *mut LSA_REGISTRATION_INFO;
-extern "system" {
- pub fn LsaGetDeviceRegistrationInfo(
- RegistrationInfo: *mut PLSA_REGISTRATION_INFO,
- ) -> NTSTATUS;
-}
-ENUM!{enum LSA_CREDENTIAL_KEY_SOURCE_TYPE {
- eFromPrecomputed = 1,
- eFromClearPassword,
- eFromNtOwf,
-}}
-pub type PLSA_CREDENTIAL_KEY_SOURCE_TYPE = *mut LSA_CREDENTIAL_KEY_SOURCE_TYPE;
-extern "C" {
- pub fn SeciIsProtectedUser(
- ProtectedUser: PBOOLEAN,
- ) -> NTSTATUS;
-}