7 #define KERB_WRAP_NO_ENCRYPT 0x80000001
9 #define LOGON_NOENCRYPTION 2
10 #define LOGON_CACHED_ACCOUNT 4
11 #define LOGON_USED_LM_PASSWORD 8
12 #define LOGON_EXTRA_SIDS 32
13 #define LOGON_SUBAUTH_SESSION_KEY 64
14 #define LOGON_SERVER_TRUST_ACCOUNT 128
15 #define LOGON_NTLMV2_ENABLED 256
16 #define LOGON_RESOURCE_GROUPS 512
17 #define LOGON_PROFILE_PATH_RETURNED 1024
18 #define LOGON_GRACE_LOGON 16777216
19 #define LSA_MODE_PASSWORD_PROTECTED 1
20 #define LSA_MODE_INDIVIDUAL_ACCOUNTS 2
21 #define LSA_MODE_MANDATORY_ACCESS 3
22 #define LSA_MODE_LOG_FULL 4
23 #define LSA_SUCCESS(x) ((LONG)(x)>=0)
24 #define MICROSOFT_KERBEROS_NAME_A "Kerberos"
25 #define MICROSOFT_KERBEROS_NAME_W L"Kerberos"
26 #define MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT 32
27 #define MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT 2048
28 #define MSV1_0_CHALLENGE_LENGTH 8
29 #define MSV1_0_CLEARTEXT_PASSWORD_ALLOWED 2
30 #define MSV1_0_CRED_LM_PRESENT 1
31 #define MSV1_0_CRED_NT_PRESENT 2
32 #define MSV1_0_CRED_VERSION 0
33 #define MSV1_0_DONT_TRY_GUEST_ACCOUNT 16
34 #define MSV1_0_LANMAN_SESSION_KEY_LENGTH 8
35 #define MSV1_0_MAX_NTLM3_LIFE 1800
36 #define MSV1_0_MAX_AVL_SIZE 64000
37 #define MSV1_0_MNS_LOGON 16777216
38 #define MSV1_0_NTLM3_RESPONSE_LENGTH 16
39 #define MSV1_0_NTLM3_OWF_LENGTH 16
40 #define MSV1_0_NTLM3_INPUT_LENGTH (sizeof(MSV1_0_NTLM3_RESPONSE)-MSV1_0_NTLM3_RESPONSE_LENGTH)
41 #define MSV1_0_OWF_PASSWORD_LENGTH 16
42 #define MSV1_0_PACKAGE_NAME "MICROSOFT_AUTHENTICATION_PACKAGE_V1_0"
43 #define MSV1_0_PACKAGE_NAMEW L"MICROSOFT_AUTHENTICATION_PACKAGE_V1_0"
44 #define MSV1_0_PACKAGE_NAMEW_LENGTH sizeof(MSV1_0_PACKAGE_NAMEW)-sizeof(WCHAR)
45 #define MSV1_0_RETURN_USER_PARAMETERS 8
46 #define MSV1_0_RETURN_PASSWORD_EXPIRY 64
47 #define MSV1_0_RETURN_PROFILE_PATH 512
48 #define MSV1_0_SUBAUTHENTICATION_DLL_EX 1048576
49 #define MSV1_0_SUBAUTHENTICATION_DLL 0xff000000
50 #define MSV1_0_SUBAUTHENTICATION_DLL_SHIFT 24
51 #define MSV1_0_SUBAUTHENTICATION_DLL_RAS 2
52 #define MSV1_0_SUBAUTHENTICATION_DLL_IIS 132
53 #define MSV1_0_SUBAUTHENTICATION_FLAGS 0xff000000
54 #define MSV1_0_SUBAUTHENTICATION_KEY "System\\CurrentControlSet\\Control\\Lsa\\MSV1_0"
55 #define MSV1_0_SUBAUTHENTICATION_VALUE "Auth"
56 #define MSV1_0_TRY_GUEST_ACCOUNT_ONLY 256
57 #define MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY 1024
58 #define MSV1_0_UPDATE_LOGON_STATISTICS 4
59 #define MSV1_0_USE_CLIENT_CHALLENGE 128
60 #define MSV1_0_USER_SESSION_KEY_LENGTH 16
61 #define POLICY_VIEW_LOCAL_INFORMATION 1
62 #define POLICY_VIEW_AUDIT_INFORMATION 2
63 #define POLICY_GET_PRIVATE_INFORMATION 4
64 #define POLICY_TRUST_ADMIN 8
65 #define POLICY_CREATE_ACCOUNT 16
66 #define POLICY_CREATE_SECRET 32
67 #define POLICY_CREATE_PRIVILEGE 64
68 #define POLICY_SET_DEFAULT_QUOTA_LIMITS 128
69 #define POLICY_SET_AUDIT_REQUIREMENTS 256
70 #define POLICY_AUDIT_LOG_ADMIN 512
71 #define POLICY_SERVER_ADMIN 1024
72 #define POLICY_LOOKUP_NAMES 2048
73 #define POLICY_READ (STANDARD_RIGHTS_READ|6)
74 #define POLICY_WRITE (STANDARD_RIGHTS_WRITE|2040)
75 #define POLICY_EXECUTE (STANDARD_RIGHTS_EXECUTE|2049)
76 #define POLICY_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|4095)
77 #define POLICY_AUDIT_EVENT_UNCHANGED 0
78 #define POLICY_AUDIT_EVENT_SUCCESS 1
79 #define POLICY_AUDIT_EVENT_FAILURE 2
80 #define POLICY_AUDIT_EVENT_NONE 4
81 #define POLICY_AUDIT_EVENT_MASK 7
82 #define POLICY_LOCATION_LOCAL 1
83 #define POLICY_LOCATION_DS 2
84 #define POLICY_MACHINE_POLICY_LOCAL 0
85 #define POLICY_MACHINE_POLICY_DEFAULTED 1
86 #define POLICY_MACHINE_POLICY_EXPLICIT 2
87 #define POLICY_MACHINE_POLICY_UNKNOWN 0xFFFFFFFF
88 #define POLICY_QOS_SCHANEL_REQUIRED 1
89 #define POLICY_QOS_OUTBOUND_INTEGRITY 2
90 #define POLICY_QOS_OUTBOUND_CONFIDENTIALITY 4
91 #define POLICY_QOS_INBOUND_INTEGREITY 8
92 #define POLICY_QOS_INBOUND_CONFIDENTIALITY 16
93 #define POLICY_QOS_ALLOW_LOCAL_ROOT_CERT_STORE 32
94 #define POLICY_QOS_RAS_SERVER_ALLOWED 64
95 #define POLICY_QOS_DHCP_SERVER_ALLOWD 128
96 #define POLICY_KERBEROS_FORWARDABLE 1
97 #define POLICY_KERBEROS_PROXYABLE 2
98 #define POLICY_KERBEROS_RENEWABLE 4
99 #define POLICY_KERBEROS_POSTDATEABLE 8
100 #define SAM_PASSWORD_CHANGE_NOTIFY_ROUTINE "PasswordChangeNotify"
101 #define SAM_INIT_NOTIFICATION_ROUTINE "InitializeChangeNotify"
102 #define SAM_PASSWORD_FILTER_ROUTINE "PasswordFilter"
103 #define SE_INTERACTIVE_LOGON_NAME TEXT("SeInteractiveLogonRight")
104 #define SE_NETWORK_LOGON_NAME TEXT("SeNetworkLogonRight")
105 #define SE_BATCH_LOGON_NAME TEXT("SeBatchLogonRight")
106 #define SE_SERVICE_LOGON_NAME TEXT("SeServiceLogonRight")
107 #define TRUST_ATTRIBUTE_NON_TRANSITIVE 1
108 #define TRUST_ATTRIBUTE_UPLEVEL_ONLY 2
109 #define TRUST_ATTRIBUTE_TREE_PARENT 4194304
110 #define TRUST_ATTRIBUTES_VALID -16580609
111 #define TRUST_AUTH_TYPE_NONE 0
112 #define TRUST_AUTH_TYPE_NT4OWF 1
113 #define TRUST_AUTH_TYPE_CLEAR 2
114 #define TRUST_DIRECTION_DISABLED 0
115 #define TRUST_DIRECTION_INBOUND 1
116 #define TRUST_DIRECTION_OUTBOUND 2
117 #define TRUST_DIRECTION_BIDIRECTIONAL 3
118 #define TRUST_TYPE_DOWNLEVEL 1
119 #define TRUST_TYPE_UPLEVEL 2
120 #define TRUST_TYPE_MIT 3
121 #define TRUST_TYPE_DCE 4
123 #define SCESTATUS_SUCCESS 0L
124 #define SCESTATUS_INVALID_PARAMETER 1L
125 #define SCESTATUS_RECORD_NOT_FOUND 2L
126 #define SCESTATUS_INVALID_DATA 3L
127 #define SCESTATUS_OBJECT_EXISTS 4L
128 #define SCESTATUS_BUFFER_TOO_SMALL 5L
129 #define SCESTATUS_PROFILE_NOT_FOUND 6L
130 #define SCESTATUS_BAD_FORMAT 7L
131 #define SCESTATUS_NOT_ENOUGH_RESOURCE 8L
132 #define SCESTATUS_ACCESS_DENIED 9L
133 #define SCESTATUS_CANT_DELETE 10L
134 #define SCESTATUS_PREFIX_OVERFLOW 11L
135 #define SCESTATUS_OTHER_ERROR 12L
136 #define SCESTATUS_ALREADY_RUNNING 13L
137 #define SCESTATUS_SERVICE_NOT_SUPPORT 14L
138 #define SCESTATUS_MOD_NOT_FOUND 15L
139 #define SCESTATUS_EXCEPTION_IN_SERVER 16L
140 #define SCESTATUS_NO_TEMPLATE_GIVEN 17L
141 #define SCESTATUS_NO_MAPPING 18L
142 #define SCESTATUS_TRUST_FAIL 19L
144 #if !defined(_NTDEF_) && !defined(__WINE_WINTERNL_H)
145 typedef LONG NTSTATUS
, *PNTSTATUS
;
148 #if defined (_NTDEF_) || defined(__WINE_WINTERNL_H)
149 typedef UNICODE_STRING LSA_UNICODE_STRING
, *PLSA_UNICODE_STRING
;
150 typedef STRING LSA_STRING
, *PLSA_STRING
;
151 typedef OBJECT_ATTRIBUTES LSA_OBJECT_ATTRIBUTES
, *PLSA_OBJECT_ATTRIBUTES
;
155 typedef struct _LSA_UNICODE_STRING
{
157 USHORT MaximumLength
;
159 [size_is(MaximumLength
/ 2), length_is(Length
/ 2)]
162 } LSA_UNICODE_STRING
, *PLSA_UNICODE_STRING
;
164 typedef struct _LSA_STRING
{
166 USHORT MaximumLength
;
168 } LSA_STRING
, *PLSA_STRING
;
170 typedef struct _LSA_OBJECT_ATTRIBUTES
{
172 HANDLE RootDirectory
;
173 PLSA_UNICODE_STRING ObjectName
;
175 PVOID SecurityDescriptor
;
176 PVOID SecurityQualityOfService
;
177 } LSA_OBJECT_ATTRIBUTES
, *PLSA_OBJECT_ATTRIBUTES
;
179 typedef LSA_UNICODE_STRING UNICODE_STRING
, *PUNICODE_STRING
;
180 typedef LSA_STRING STRING
, *PSTRING
;
184 typedef enum _KERB_LOGON_SUBMIT_TYPE
186 KerbInteractiveLogon
= 2,
188 KerbTicketLogon
= 10,
189 KerbTicketUnlockLogon
= 11
190 } KERB_LOGON_SUBMIT_TYPE
, *PKERB_LOGON_SUBMIT_TYPE
;
191 typedef enum _MSV1_0_LOGON_SUBMIT_TYPE
{
192 MsV1_0InteractiveLogon
= 2,
196 MsV1_0WorkstationUnlockLogon
= 7
197 } MSV1_0_LOGON_SUBMIT_TYPE
, *PMSV1_0_LOGON_SUBMIT_TYPE
;
198 typedef enum _MSV1_0_PROFILE_BUFFER_TYPE
{
199 MsV1_0InteractiveProfile
= 2,
200 MsV1_0Lm20LogonProfile
,
201 MsV1_0SmartCardProfile
202 } MSV1_0_PROFILE_BUFFER_TYPE
, *PMSV1_0_PROFILE_BUFFER_TYPE
;
207 MsvAvDnsComputerName
,
210 typedef enum _MSV1_0_PROTOCOL_MESSAGE_TYPE
{
211 MsV1_0Lm20ChallengeRequest
= 0,
212 MsV1_0Lm20GetChallengeResponse
,
213 MsV1_0EnumerateUsers
,
216 MsV1_0ChangePassword
,
217 MsV1_0ChangeCachedPassword
,
218 MsV1_0GenericPassthrough
,
221 MsV1_0DeriveCredential
,
223 } MSV1_0_PROTOCOL_MESSAGE_TYPE
, *PMSV1_0_PROTOCOL_MESSAGE_TYPE
;
224 typedef enum _POLICY_LSA_SERVER_ROLE
{
225 PolicyServerRoleBackup
= 2,
226 PolicyServerRolePrimary
227 } POLICY_LSA_SERVER_ROLE
, *PPOLICY_LSA_SERVER_ROLE
;
228 typedef enum _POLICY_SERVER_ENABLE_STATE
{
229 PolicyServerEnabled
= 2,
231 } POLICY_SERVER_ENABLE_STATE
, *PPOLICY_SERVER_ENABLE_STATE
;
232 typedef enum _POLICY_INFORMATION_CLASS
{
233 PolicyAuditLogInformation
= 1,
234 PolicyAuditEventsInformation
,
235 PolicyPrimaryDomainInformation
,
236 PolicyPdAccountInformation
,
237 PolicyAccountDomainInformation
,
238 PolicyLsaServerRoleInformation
,
239 PolicyReplicaSourceInformation
,
240 PolicyDefaultQuotaInformation
,
241 PolicyModificationInformation
,
242 PolicyAuditFullSetInformation
,
243 PolicyAuditFullQueryInformation
,
244 PolicyDnsDomainInformation
,
246 } POLICY_INFORMATION_CLASS
, *PPOLICY_INFORMATION_CLASS
;
247 typedef enum _POLICY_AUDIT_EVENT_TYPE
{
250 AuditCategoryObjectAccess
,
251 AuditCategoryPrivilegeUse
,
252 AuditCategoryDetailedTracking
,
253 AuditCategoryPolicyChange
,
254 AuditCategoryAccountManagement
,
255 AuditCategoryDirectoryServiceAccess
,
256 AuditCategoryAccountLogon
257 } POLICY_AUDIT_EVENT_TYPE
, *PPOLICY_AUDIT_EVENT_TYPE
;
258 typedef enum _POLICY_LOCAL_INFORMATION_CLASS
{
259 PolicyLocalAuditEventsInformation
= 1,
260 PolicyLocalPdAccountInformation
,
261 PolicyLocalAccountDomainInformation
,
262 PolicyLocalLsaServerRoleInformation
,
263 PolicyLocalReplicaSourceInformation
,
264 PolicyLocalModificationInformation
,
265 PolicyLocalAuditFullSetInformation
,
266 PolicyLocalAuditFullQueryInformation
,
267 PolicyLocalDnsDomainInformation
,
268 PolicyLocalIPSecReferenceInformation
,
269 PolicyLocalMachinePasswordInformation
,
270 PolicyLocalQualityOfServiceInformation
,
271 PolicyLocalPolicyLocationInformation
272 } POLICY_LOCAL_INFORMATION_CLASS
, *PPOLICY_LOCAL_INFORMATION_CLASS
;
273 typedef enum _POLICY_DOMAIN_INFORMATION_CLASS
{
274 PolicyDomainIPSecReferenceInformation
= 1,
275 PolicyDomainQualityOfServiceInformation
,
276 PolicyDomainEfsInformation
,
277 PolicyDomainPublicKeyInformation
,
278 PolicyDomainPasswordPolicyInformation
,
279 PolicyDomainLockoutInformation
,
280 PolicyDomainKerberosTicketInformation
281 } POLICY_DOMAIN_INFORMATION_CLASS
, *PPOLICY_DOMAIN_INFORMATION_CLASS
;
282 typedef enum _POLICY_NOTIFICATION_INFORMATION_CLASS
{
283 PolicyNotifyAuditEventsInformation
= 1,
284 PolicyNotifyAccountDomainInformation
,
285 PolicyNotifyServerRoleInformation
,
286 PolicyNotifyDnsDomainInformation
,
287 PolicyNotifyDomainEfsInformation
,
288 PolicyNotifyDomainKerberosTicketInformation
,
289 PolicyNotifyMachineAccountPasswordInformation
290 } POLICY_NOTIFICATION_INFORMATION_CLASS
, *PPOLICY_NOTIFICATION_INFORMATION_CLASS
;
291 typedef enum _SECURITY_LOGON_TYPE
{
298 } SECURITY_LOGON_TYPE
, *PSECURITY_LOGON_TYPE
;
299 typedef struct _SECURITY_LOGON_SESSION_DATA
{
302 LSA_UNICODE_STRING UserName
;
303 LSA_UNICODE_STRING LogonDomain
;
304 LSA_UNICODE_STRING AuthenticationPackage
;
308 LARGE_INTEGER LogonTime
;
309 LSA_UNICODE_STRING LogonServer
;
310 LSA_UNICODE_STRING DnsDomainName
;
311 LSA_UNICODE_STRING Upn
;
312 } SECURITY_LOGON_SESSION_DATA
, *PSECURITY_LOGON_SESSION_DATA
;
313 typedef enum _TRUSTED_INFORMATION_CLASS
{
314 TrustedDomainNameInformation
= 1,
315 TrustedControllersInformation
,
316 TrustedPosixOffsetInformation
,
317 TrustedPasswordInformation
,
318 TrustedDomainInformationBasic
,
319 TrustedDomainInformationEx
,
320 TrustedDomainAuthInformation
,
321 TrustedDomainFullInformation
,
322 TrustedDomainAuthInformationInternal
,
323 TrustedDomainFullInformationInternal
324 } TRUSTED_INFORMATION_CLASS
, *PTRUSTED_INFORMATION_CLASS
;
325 typedef enum _LSA_FOREST_TRUST_RECORD_TYPE
{
326 ForestTrustTopLevelName
,
327 ForestTrustTopLevelNameEx
,
328 ForestTrustDomainInfo
,
329 ForestTrustRecordTypeLast
= ForestTrustDomainInfo
330 } LSA_FOREST_TRUST_RECORD_TYPE
;
331 typedef enum _LSA_FOREST_TRUST_COLLISION_RECORD_TYPE
{
335 } LSA_FOREST_TRUST_COLLISION_RECORD_TYPE
;
336 typedef struct _DOMAIN_PASSWORD_INFORMATION
{
337 USHORT MinPasswordLength
;
338 USHORT PasswordHistoryLength
;
339 ULONG PasswordProperties
;
340 LARGE_INTEGER MaxPasswordAge
;
341 LARGE_INTEGER MinPasswordAge
;
342 } DOMAIN_PASSWORD_INFORMATION
, *PDOMAIN_PASSWORD_INFORMATION
;
343 typedef ULONG LSA_ENUMERATION_HANDLE
, *PLSA_ENUMERATION_HANDLE
;
344 typedef struct _LSA_ENUMERATION_INFORMATION
{
346 } LSA_ENUMERATION_INFORMATION
, *PLSA_ENUMERATION_INFORMATION
;
347 typedef ULONG LSA_OPERATIONAL_MODE
, *PLSA_OPERATIONAL_MODE
;
349 typedef struct _LSA_FOREST_TRUST_DOMAIN_INFO
{
351 LSA_UNICODE_STRING DnsName
;
352 LSA_UNICODE_STRING NetbiosName
;
353 } LSA_FOREST_TRUST_DOMAIN_INFO
, *PLSA_FOREST_TRUST_DOMAIN_INFO
;
354 typedef struct _LSA_FOREST_TRUST_BINARY_DATA
{
357 } LSA_FOREST_TRUST_BINARY_DATA
, *PLSA_FOREST_TRUST_BINARY_DATA
;
358 typedef struct _LSA_FOREST_TRUST_RECORD
{
360 LSA_FOREST_TRUST_RECORD_TYPE ForestTrustType
;
363 LSA_UNICODE_STRING TopLevelName
;
364 LSA_FOREST_TRUST_DOMAIN_INFO DomainInfo
;
365 LSA_FOREST_TRUST_BINARY_DATA Data
;
367 } LSA_FOREST_TRUST_RECORD
, *PLSA_FOREST_TRUST_RECORD
;
368 typedef struct _LSA_FOREST_TRUST_INFORMATION
{
370 PLSA_FOREST_TRUST_RECORD
*Entries
;
371 } LSA_FOREST_TRUST_INFORMATION
, *PLSA_FOREST_TRUST_INFORMATION
;
372 typedef struct _LSA_FOREST_TRUST_COLLISION_RECORD
{
374 LSA_FOREST_TRUST_COLLISION_RECORD_TYPE Type
;
376 LSA_UNICODE_STRING Name
;
377 } LSA_FOREST_TRUST_COLLISION_RECORD
, *PLSA_FOREST_TRUST_COLLISION_RECORD
;
378 typedef struct _LSA_FOREST_TRUST_COLLISION_INFORMATION
{
380 PLSA_FOREST_TRUST_COLLISION_RECORD
*Entries
;
381 } LSA_FOREST_TRUST_COLLISION_INFORMATION
, *PLSA_FOREST_TRUST_COLLISION_INFORMATION
;
382 typedef struct _LSA_TRUST_INFORMATION
{
383 LSA_UNICODE_STRING Name
;
385 } LSA_TRUST_INFORMATION
, *PLSA_TRUST_INFORMATION
;
386 typedef struct _LSA_REFERENCED_DOMAIN_LIST
{
388 PLSA_TRUST_INFORMATION Domains
;
389 } LSA_REFERENCED_DOMAIN_LIST
, *PLSA_REFERENCED_DOMAIN_LIST
;
390 typedef struct _LSA_TRANSLATED_SID
{
394 } LSA_TRANSLATED_SID
, *PLSA_TRANSLATED_SID
;
395 typedef struct _LSA_TRANSLATED_SID2
{
400 } LSA_TRANSLATED_SID2
, *PLSA_TRANSLATED_SID2
;
401 typedef struct _LSA_TRANSLATED_NAME
{
403 LSA_UNICODE_STRING Name
;
405 } LSA_TRANSLATED_NAME
, *PLSA_TRANSLATED_NAME
;
407 typedef struct _KERB_INTERACTIVE_LOGON
{
408 KERB_LOGON_SUBMIT_TYPE MessageType
;
409 UNICODE_STRING LogonDomainName
;
410 UNICODE_STRING UserName
;
411 UNICODE_STRING Password
;
412 } KERB_INTERACTIVE_LOGON
, *PKERB_INTERACTIVE_LOGON
;
413 typedef struct _MSV1_0_INTERACTIVE_LOGON
{
414 MSV1_0_LOGON_SUBMIT_TYPE MessageType
;
415 UNICODE_STRING LogonDomainName
;
416 UNICODE_STRING UserName
;
417 UNICODE_STRING Password
;
418 } MSV1_0_INTERACTIVE_LOGON
, *PMSV1_0_INTERACTIVE_LOGON
;
419 typedef struct _MSV1_0_INTERACTIVE_PROFILE
{
420 MSV1_0_PROFILE_BUFFER_TYPE MessageType
;
422 USHORT BadPasswordCount
;
423 LARGE_INTEGER LogonTime
;
424 LARGE_INTEGER LogoffTime
;
425 LARGE_INTEGER KickOffTime
;
426 LARGE_INTEGER PasswordLastSet
;
427 LARGE_INTEGER PasswordCanChange
;
428 LARGE_INTEGER PasswordMustChange
;
429 UNICODE_STRING LogonScript
;
430 UNICODE_STRING HomeDirectory
;
431 UNICODE_STRING FullName
;
432 UNICODE_STRING ProfilePath
;
433 UNICODE_STRING HomeDirectoryDrive
;
434 UNICODE_STRING LogonServer
;
436 } MSV1_0_INTERACTIVE_PROFILE
, *PMSV1_0_INTERACTIVE_PROFILE
;
437 typedef struct _MSV1_0_LM20_LOGON
{
438 MSV1_0_LOGON_SUBMIT_TYPE MessageType
;
439 UNICODE_STRING LogonDomainName
;
440 UNICODE_STRING UserName
;
441 UNICODE_STRING Workstation
;
442 UCHAR ChallengeToClient
[MSV1_0_CHALLENGE_LENGTH
];
443 STRING CaseSensitiveChallengeResponse
;
444 STRING CaseInsensitiveChallengeResponse
;
445 ULONG ParameterControl
;
446 } MSV1_0_LM20_LOGON
, * PMSV1_0_LM20_LOGON
;
447 typedef struct _MSV1_0_SUBAUTH_LOGON
{ /* W2K only */
448 MSV1_0_LOGON_SUBMIT_TYPE MessageType
;
449 UNICODE_STRING LogonDomainName
;
450 UNICODE_STRING UserName
;
451 UNICODE_STRING Workstation
;
452 UCHAR ChallengeToClient
[MSV1_0_CHALLENGE_LENGTH
];
453 STRING AuthenticationInfo1
;
454 STRING AuthenticationInfo2
;
455 ULONG ParameterControl
;
456 ULONG SubAuthPackageId
;
457 } MSV1_0_SUBAUTH_LOGON
, * PMSV1_0_SUBAUTH_LOGON
;
458 typedef struct _MSV1_0_LM20_LOGON_PROFILE
{
459 MSV1_0_PROFILE_BUFFER_TYPE MessageType
;
460 LARGE_INTEGER KickOffTime
;
461 LARGE_INTEGER LogoffTime
;
463 UCHAR UserSessionKey
[MSV1_0_USER_SESSION_KEY_LENGTH
];
464 UNICODE_STRING LogonDomainName
;
465 UCHAR LanmanSessionKey
[MSV1_0_LANMAN_SESSION_KEY_LENGTH
];
466 UNICODE_STRING LogonServer
;
467 UNICODE_STRING UserParameters
;
468 } MSV1_0_LM20_LOGON_PROFILE
, * PMSV1_0_LM20_LOGON_PROFILE
;
469 typedef struct _MSV1_0_SUPPLEMENTAL_CREDENTIAL
{
472 UCHAR LmPassword
[MSV1_0_OWF_PASSWORD_LENGTH
];
473 UCHAR NtPassword
[MSV1_0_OWF_PASSWORD_LENGTH
];
474 } MSV1_0_SUPPLEMENTAL_CREDENTIAL
, *PMSV1_0_SUPPLEMENTAL_CREDENTIAL
;
475 typedef struct _MSV1_0_NTLM3_RESPONSE
{
476 UCHAR Response
[MSV1_0_NTLM3_RESPONSE_LENGTH
];
482 UCHAR ChallengeFromClient
[MSV1_0_CHALLENGE_LENGTH
];
485 } MSV1_0_NTLM3_RESPONSE
, *PMSV1_0_NTLM3_RESPONSE
;
486 typedef struct _MSV1_0_AV_PAIR
{
489 } MSV1_0_AV_PAIR
, *PMSV1_0_AV_PAIR
;
490 typedef struct _MSV1_0_CHANGEPASSWORD_REQUEST
{
491 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType
;
492 UNICODE_STRING DomainName
;
493 UNICODE_STRING AccountName
;
494 UNICODE_STRING OldPassword
;
495 UNICODE_STRING NewPassword
;
496 BOOLEAN Impersonating
;
497 } MSV1_0_CHANGEPASSWORD_REQUEST
, *PMSV1_0_CHANGEPASSWORD_REQUEST
;
498 typedef struct _MSV1_0_CHANGEPASSWORD_RESPONSE
{
499 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType
;
500 BOOLEAN PasswordInfoValid
;
501 DOMAIN_PASSWORD_INFORMATION DomainPasswordInfo
;
502 } MSV1_0_CHANGEPASSWORD_RESPONSE
, *PMSV1_0_CHANGEPASSWORD_RESPONSE
;
503 typedef struct _MSV1_0_SUBAUTH_REQUEST
{
504 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType
;
505 ULONG SubAuthPackageId
;
506 ULONG SubAuthInfoLength
;
507 PUCHAR SubAuthSubmitBuffer
;
508 } MSV1_0_SUBAUTH_REQUEST
, *PMSV1_0_SUBAUTH_REQUEST
;
509 typedef struct _MSV1_0_SUBAUTH_RESPONSE
{
510 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType
;
511 ULONG SubAuthInfoLength
;
512 PUCHAR SubAuthReturnBuffer
;
513 } MSV1_0_SUBAUTH_RESPONSE
, *PMSV1_0_SUBAUTH_RESPONSE
;
514 #define MSV1_0_DERIVECRED_TYPE_SHA1 0
515 typedef struct _MSV1_0_DERIVECRED_REQUEST
{
516 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType
;
518 ULONG DeriveCredType
;
519 ULONG DeriveCredInfoLength
;
520 UCHAR DeriveCredSubmitBuffer
[1];
521 } MSV1_0_DERIVECRED_REQUEST
, *PMSV1_0_DERIVECRED_REQUEST
;
522 typedef struct _MSV1_0_DERIVECRED_RESPONSE
{
523 MSV1_0_PROTOCOL_MESSAGE_TYPE MessageType
;
524 ULONG DeriveCredInfoLength
;
525 UCHAR DeriveCredReturnBuffer
[1];
526 } MSV1_0_DERIVECRED_RESPONSE
, *PMSV1_0_DERIVECRED_RESPONSE
;
527 typedef ULONG POLICY_AUDIT_EVENT_OPTIONS
, *PPOLICY_AUDIT_EVENT_OPTIONS
;
528 typedef struct _POLICY_PRIVILEGE_DEFINITION
{
529 LSA_UNICODE_STRING Name
;
531 } POLICY_PRIVILEGE_DEFINITION
, *PPOLICY_PRIVILEGE_DEFINITION
;
532 typedef struct _POLICY_AUDIT_LOG_INFO
{
533 ULONG AuditLogPercentFull
;
534 ULONG MaximumLogSize
;
535 LARGE_INTEGER AuditRetentionPeriod
;
536 BOOLEAN AuditLogFullShutdownInProgress
;
537 LARGE_INTEGER TimeToShutdown
;
538 ULONG NextAuditRecordId
;
539 } POLICY_AUDIT_LOG_INFO
, *PPOLICY_AUDIT_LOG_INFO
;
540 typedef struct _POLICY_AUDIT_EVENTS_INFO
{
541 BOOLEAN AuditingMode
;
542 PPOLICY_AUDIT_EVENT_OPTIONS EventAuditingOptions
;
543 ULONG MaximumAuditEventCount
;
544 } POLICY_AUDIT_EVENTS_INFO
, *PPOLICY_AUDIT_EVENTS_INFO
;
545 typedef struct _POLICY_ACCOUNT_DOMAIN_INFO
{
546 LSA_UNICODE_STRING DomainName
;
548 } POLICY_ACCOUNT_DOMAIN_INFO
, *PPOLICY_ACCOUNT_DOMAIN_INFO
;
549 typedef struct _POLICY_PRIMARY_DOMAIN_INFO
{
550 LSA_UNICODE_STRING Name
;
552 } POLICY_PRIMARY_DOMAIN_INFO
, *PPOLICY_PRIMARY_DOMAIN_INFO
;
553 typedef struct _POLICY_DNS_DOMAIN_INFO
{
554 LSA_UNICODE_STRING Name
;
555 LSA_UNICODE_STRING DnsDomainName
;
556 LSA_UNICODE_STRING DnsForestName
;
559 } POLICY_DNS_DOMAIN_INFO
, *PPOLICY_DNS_DOMAIN_INFO
;
560 typedef struct _POLICY_PD_ACCOUNT_INFO
{
561 LSA_UNICODE_STRING Name
;
562 } POLICY_PD_ACCOUNT_INFO
, *PPOLICY_PD_ACCOUNT_INFO
;
563 typedef struct _POLICY_LSA_SERVER_ROLE_INFO
{
564 POLICY_LSA_SERVER_ROLE LsaServerRole
;
565 } POLICY_LSA_SERVER_ROLE_INFO
, *PPOLICY_LSA_SERVER_ROLE_INFO
;
566 typedef struct _POLICY_REPLICA_SOURCE_INFO
{
567 LSA_UNICODE_STRING ReplicaSource
;
568 LSA_UNICODE_STRING ReplicaAccountName
;
569 } POLICY_REPLICA_SOURCE_INFO
, *PPOLICY_REPLICA_SOURCE_INFO
;
570 typedef struct _POLICY_DEFAULT_QUOTA_INFO
{
571 QUOTA_LIMITS QuotaLimits
;
572 } POLICY_DEFAULT_QUOTA_INFO
, *PPOLICY_DEFAULT_QUOTA_INFO
;
573 typedef struct _POLICY_MODIFICATION_INFO
{
574 LARGE_INTEGER ModifiedId
;
575 LARGE_INTEGER DatabaseCreationTime
;
576 } POLICY_MODIFICATION_INFO
, *PPOLICY_MODIFICATION_INFO
;
577 typedef struct _POLICY_AUDIT_FULL_SET_INFO
{
578 BOOLEAN ShutDownOnFull
;
579 } POLICY_AUDIT_FULL_SET_INFO
, *PPOLICY_AUDIT_FULL_SET_INFO
;
580 typedef struct _POLICY_AUDIT_FULL_QUERY_INFO
{
581 BOOLEAN ShutDownOnFull
;
583 } POLICY_AUDIT_FULL_QUERY_INFO
, *PPOLICY_AUDIT_FULL_QUERY_INFO
;
584 typedef struct _POLICY_EFS_INFO
{
587 } POLICY_EFS_INFO
, *PPOLICY_EFS_INFO
;
588 typedef struct _POLICY_LOCAL_IPSEC_REFERENCE_INFO
{
589 LSA_UNICODE_STRING ObjectPath
;
590 } POLICY_LOCAL_IPSEC_REFERENCE_INFO
, *PPOLICY_LOCAL_IPSEC_REFERENCE_INFO
;
591 typedef struct _POLICY_LOCAL_MACHINE_PASSWORD_INFO
{
592 LARGE_INTEGER PasswordChangeInterval
;
593 } POLICY_LOCAL_MACHINE_PASSWORD_INFO
, *PPOLICY_LOCAL_MACHINE_PASSWORD_INFO
;
594 typedef struct _POLICY_LOCAL_POLICY_LOCATION_INFO
{
595 ULONG PolicyLocation
;
596 } POLICY_LOCAL_POLICY_LOCATION_INFO
, *PPOLICY_LOCAL_POLICY_LOCATION_INFO
;
597 typedef struct _POLICY_LOCAL_QUALITY_OF_SERVICE_INFO
{
598 ULONG QualityOfService
;
599 } POLICY_LOCAL_QUALITY_OF_SERVICE_INFO
, *PPOLICY_LOCAL_QUALITY_OF_SERVICE_INFO
;
600 typedef struct _POLICY_LOCAL_QUALITY_OF_SERVICE_INFO POLICY_DOMAIN_QUALITY_OF_SERVICE_INFO
;
601 typedef struct _POLICY_LOCAL_QUALITY_OF_SERVICE_INFO
*PPOLICY_DOMAIN_QUALITY_OF_SERVICE_INFO
;
602 typedef struct _POLICY_DOMAIN_PUBLIC_KEY_INFO
{
604 PUCHAR PublicKeyInfo
;
605 } POLICY_DOMAIN_PUBLIC_KEY_INFO
, *PPOLICY_DOMAIN_PUBLIC_KEY_INFO
;
606 typedef struct _POLICY_DOMAIN_LOCKOUT_INFO
{
607 LARGE_INTEGER LockoutDuration
;
608 LARGE_INTEGER LockoutObservationWindow
;
609 USHORT LockoutThreshold
;
610 } POLICY_DOMAIN_LOCKOUT_INFO
, *PPOLICY_DOMAIN_LOCKOUT_INFO
;
611 typedef struct _POLICY_DOMAIN_PASSWORD_INFO
{
612 USHORT MinPasswordLength
;
613 USHORT PasswordHistoryLength
;
614 ULONG PasswordProperties
;
615 LARGE_INTEGER MaxPasswordAge
;
616 LARGE_INTEGER MinPasswordAge
;
617 } POLICY_DOMAIN_PASSWORD_INFO
, *PPOLICY_DOMAIN_PASSWORD_INFO
;
618 typedef struct _POLICY_DOMAIN_KERBEROS_TICKET_INFO
{
619 ULONG AuthenticationOptions
;
620 LARGE_INTEGER MinTicketAge
;
621 LARGE_INTEGER MaxTicketAge
;
622 LARGE_INTEGER MaxRenewAge
;
623 LARGE_INTEGER ProxyLifetime
;
624 LARGE_INTEGER ForceLogoff
;
625 } POLICY_DOMAIN_KERBEROS_TICKET_INFO
, *PPOLICY_DOMAIN_KERBEROS_TICKET_INFO
;
626 typedef PVOID LSA_HANDLE
, *PLSA_HANDLE
;
627 typedef struct _TRUSTED_DOMAIN_NAME_INFO
{
628 LSA_UNICODE_STRING Name
;
629 } TRUSTED_DOMAIN_NAME_INFO
, *PTRUSTED_DOMAIN_NAME_INFO
;
630 typedef struct _TRUSTED_CONTROLLERS_INFO
{
632 PLSA_UNICODE_STRING Names
;
633 } TRUSTED_CONTROLLERS_INFO
, *PTRUSTED_CONTROLLERS_INFO
;
634 typedef struct _TRUSTED_POSIX_OFFSET_INFO
{
636 } TRUSTED_POSIX_OFFSET_INFO
, *PTRUSTED_POSIX_OFFSET_INFO
;
637 typedef struct _TRUSTED_PASSWORD_INFO
{
638 LSA_UNICODE_STRING Password
;
639 LSA_UNICODE_STRING OldPassword
;
640 } TRUSTED_PASSWORD_INFO
, *PTRUSTED_PASSWORD_INFO
;
641 typedef LSA_TRUST_INFORMATION TRUSTED_DOMAIN_INFORMATION_BASIC
;
642 typedef PLSA_TRUST_INFORMATION
*PTRUSTED_DOMAIN_INFORMATION_BASIC
;
643 typedef struct _TRUSTED_DOMAIN_INFORMATION_EX
{
644 LSA_UNICODE_STRING Name
;
645 LSA_UNICODE_STRING FlatName
;
647 ULONG TrustDirection
;
649 ULONG TrustAttributes
;
650 } TRUSTED_DOMAIN_INFORMATION_EX
, *PTRUSTED_DOMAIN_INFORMATION_EX
;
651 typedef struct _LSA_AUTH_INFORMATION
{
652 LARGE_INTEGER LastUpdateTime
;
654 ULONG AuthInfoLength
;
656 } LSA_AUTH_INFORMATION
, *PLSA_AUTH_INFORMATION
;
657 typedef struct _TRUSTED_DOMAIN_AUTH_INFORMATION
{
658 ULONG IncomingAuthInfos
;
659 PLSA_AUTH_INFORMATION IncomingAuthenticationInformation
;
660 PLSA_AUTH_INFORMATION IncomingPreviousAuthenticationInformation
;
661 ULONG OutgoingAuthInfos
;
662 PLSA_AUTH_INFORMATION OutgoingAuthenticationInformation
;
663 PLSA_AUTH_INFORMATION OutgoingPreviousAuthenticationInformation
;
664 } TRUSTED_DOMAIN_AUTH_INFORMATION
, *PTRUSTED_DOMAIN_AUTH_INFORMATION
;
665 typedef struct _TRUSTED_DOMAIN_FULL_INFORMATION
{
666 TRUSTED_DOMAIN_INFORMATION_EX Information
;
667 TRUSTED_POSIX_OFFSET_INFO PosixOffset
;
668 TRUSTED_DOMAIN_AUTH_INFORMATION AuthInformation
;
669 } TRUSTED_DOMAIN_FULL_INFORMATION
, *PTRUSTED_DOMAIN_FULL_INFORMATION
;
671 #define RtlGenRandom SystemFunction036
673 BOOLEAN WINAPI
RtlGenRandom(PVOID
,ULONG
);
675 NTSTATUS NTAPI
LsaAddAccountRights(LSA_HANDLE
,PSID
,PLSA_UNICODE_STRING
,ULONG
);
676 NTSTATUS NTAPI
LsaAddPrivilegesToAccount(LSA_HANDLE
, PPRIVILEGE_SET
);
677 NTSTATUS NTAPI
LsaCallAuthenticationPackage(HANDLE
,ULONG
,PVOID
,ULONG
,PVOID
*,
679 NTSTATUS NTAPI
LsaClose(LSA_HANDLE
);
680 NTSTATUS NTAPI
LsaConnectUntrusted(PHANDLE
);
681 NTSTATUS NTAPI
LsaCreateAccount(LSA_HANDLE
, PSID
, ULONG
, PLSA_HANDLE
);
682 NTSTATUS NTAPI
LsaCreateTrustedDomain(LSA_HANDLE
, PLSA_TRUST_INFORMATION
,
683 ACCESS_MASK
, PLSA_HANDLE
);
684 NTSTATUS NTAPI
LsaCreateTrustedDomainEx(LSA_HANDLE
, PTRUSTED_DOMAIN_INFORMATION_EX
,
685 PTRUSTED_DOMAIN_AUTH_INFORMATION
, ACCESS_MASK
, PLSA_HANDLE
);
686 NTSTATUS NTAPI
LsaDeleteTrustedDomain(LSA_HANDLE
,PSID
);
687 NTSTATUS NTAPI
LsaDeregisterLogonProcess(HANDLE
);
688 NTSTATUS NTAPI
LsaEnumerateAccountRights(LSA_HANDLE
,PSID
,PLSA_UNICODE_STRING
*,PULONG
);
689 NTSTATUS NTAPI
LsaEnumerateAccountsWithUserRight(LSA_HANDLE
,PLSA_UNICODE_STRING
,
691 NTSTATUS NTAPI
LsaEnumerateTrustedDomains(LSA_HANDLE
,PLSA_ENUMERATION_HANDLE
,
692 PVOID
*,ULONG
,PULONG
);
693 NTSTATUS NTAPI
LsaEnumerateTrustedDomainsEx(LSA_HANDLE
,PLSA_ENUMERATION_HANDLE
,
694 PVOID
*,ULONG
,PULONG
);
695 NTSTATUS NTAPI
LsaFreeMemory(PVOID
);
696 NTSTATUS NTAPI
LsaFreeReturnBuffer(PVOID
);
697 NTSTATUS NTAPI
LsaLogonUser(HANDLE
,PLSA_STRING
,SECURITY_LOGON_TYPE
,ULONG
,PVOID
,
698 ULONG
,PTOKEN_GROUPS
,PTOKEN_SOURCE
,PVOID
*,PULONG
,
699 PLUID
,PHANDLE
,PQUOTA_LIMITS
,PNTSTATUS
);
700 NTSTATUS NTAPI
LsaLookupAuthenticationPackage(HANDLE
,PLSA_STRING
,PULONG
);
701 NTSTATUS NTAPI
LsaLookupNames(LSA_HANDLE
,ULONG
,PLSA_UNICODE_STRING
,
702 PLSA_REFERENCED_DOMAIN_LIST
*,PLSA_TRANSLATED_SID
*);
703 NTSTATUS NTAPI
LsaLookupNames2(LSA_HANDLE
,ULONG
,ULONG
,PLSA_UNICODE_STRING
,
704 PLSA_REFERENCED_DOMAIN_LIST
*,PLSA_TRANSLATED_SID2
*);
705 NTSTATUS NTAPI
LsaLookupPrivilegeName(LSA_HANDLE
, PLUID
, PLSA_UNICODE_STRING
*);
706 NTSTATUS NTAPI
LsaLookupPrivilegeValue(LSA_HANDLE
, PLSA_UNICODE_STRING
, PLUID
);
707 NTSTATUS NTAPI
LsaLookupSids(LSA_HANDLE
,ULONG
,PSID
*,
708 PLSA_REFERENCED_DOMAIN_LIST
*,PLSA_TRANSLATED_NAME
*);
709 ULONG NTAPI
LsaNtStatusToWinError(NTSTATUS
);
710 NTSTATUS NTAPI
LsaOpenAccount(LSA_HANDLE
, PSID
, ULONG
, PLSA_HANDLE
);
711 NTSTATUS NTAPI
LsaOpenPolicy(PLSA_UNICODE_STRING
,PLSA_OBJECT_ATTRIBUTES
,
712 ACCESS_MASK
,PLSA_HANDLE
);
713 NTSTATUS NTAPI
LsaOpenTrustedDomainByName(LSA_HANDLE
, PLSA_UNICODE_STRING
,
714 ACCESS_MASK
, PLSA_HANDLE
);
715 NTSTATUS NTAPI
LsaQueryDomainInformationPolicy(LSA_HANDLE
,
716 POLICY_DOMAIN_INFORMATION_CLASS
,PVOID
*);
717 NTSTATUS NTAPI
LsaQueryInformationPolicy(LSA_HANDLE
,POLICY_INFORMATION_CLASS
,PVOID
*);
718 NTSTATUS NTAPI
LsaQueryLocalInformationPolicy(LSA_HANDLE
,
719 POLICY_LOCAL_INFORMATION_CLASS
,PVOID
*);
720 NTSTATUS NTAPI
LsaQueryTrustedDomainInfo(LSA_HANDLE
,PSID
,
721 TRUSTED_INFORMATION_CLASS
,PVOID
*);
722 NTSTATUS NTAPI
LsaQueryTrustedDomainInfoByName(LSA_HANDLE
,PLSA_UNICODE_STRING
,
723 TRUSTED_INFORMATION_CLASS
,PVOID
*);
724 NTSTATUS NTAPI
LsaRegisterLogonProcess(PLSA_STRING
,PHANDLE
,PLSA_OPERATIONAL_MODE
);
725 NTSTATUS NTAPI
LsaRemoveAccountRights(LSA_HANDLE
,PSID
,BOOLEAN
,
726 PLSA_UNICODE_STRING
,ULONG
);
727 NTSTATUS NTAPI
LsaRetrievePrivateData(LSA_HANDLE
,PLSA_UNICODE_STRING
,
728 PLSA_UNICODE_STRING
*);
729 NTSTATUS NTAPI
LsaSetDomainInformationPolicy(LSA_HANDLE
,
730 POLICY_DOMAIN_INFORMATION_CLASS
,PVOID
);
731 NTSTATUS NTAPI
LsaSetInformationPolicy(LSA_HANDLE
,POLICY_INFORMATION_CLASS
, PVOID
);
732 NTSTATUS NTAPI
LsaSetLocalInformationPolicy(LSA_HANDLE
,
733 POLICY_LOCAL_INFORMATION_CLASS
,PVOID
);
734 NTSTATUS NTAPI
LsaSetTrustedDomainInformation(LSA_HANDLE
,PSID
,
735 TRUSTED_INFORMATION_CLASS
,PVOID
);
736 NTSTATUS NTAPI
LsaSetTrustedDomainInfoByName(LSA_HANDLE
,PLSA_UNICODE_STRING
,
737 TRUSTED_INFORMATION_CLASS
,PVOID
);
738 NTSTATUS NTAPI
LsaStorePrivateData(LSA_HANDLE
,PLSA_UNICODE_STRING
,
739 PLSA_UNICODE_STRING
);
740 typedef NTSTATUS (NTAPI
*PSAM_PASSWORD_NOTIFICATION_ROUTINE
)(PUNICODE_STRING
,
741 ULONG
,PUNICODE_STRING
);
742 typedef BOOLEAN (NTAPI
*PSAM_INIT_NOTIFICATION_ROUTINE
)(void);
743 typedef BOOLEAN (NTAPI
*PSAM_PASSWORD_FILTER_ROUTINE
)(PUNICODE_STRING
,PUNICODE_STRING
,
744 PUNICODE_STRING
,BOOLEAN
);
748 #endif /* _NTSECAPI_H */