?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
autobuild: Run the samba-minimal-smbd build jobs with -j 2
[samba4-gss.git] / librpc / idl / netlogon.idl
blobf9672b1bf547650bdb02d6e2bbe362f17214f186
1 /*
2 netlogon interface
3 much of this was derived from the ethereal sources - thanks to everyone
4 who contributed!
5 */
6
7 import "misc.idl", "lsa.idl", "samr.idl", "security.idl", "nbt.idl";
8
9 #include "idl_types.h"
10
11 cpp_quote("#define netr_DeltaEnum8Bit netr_DeltaEnum")
12 cpp_quote("#define netr_SamDatabaseID8Bit netr_SamDatabaseID")
13
14 cpp_quote("#define ENC_CRC32 KERB_ENCTYPE_DES_CBC_CRC")
15 cpp_quote("#define ENC_RSA_MD5 KERB_ENCTYPE_DES_CBC_MD5")
16 cpp_quote("#define ENC_RC4_HMAC_MD5 KERB_ENCTYPE_RC4_HMAC_MD5")
17 cpp_quote("#define ENC_HMAC_SHA1_96_AES128 KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96")
18 cpp_quote("#define ENC_HMAC_SHA1_96_AES256 KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96")
19 cpp_quote("#define ENC_HMAC_SHA1_96_AES256_SK KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96_SK")
20 cpp_quote("#define ENC_FAST_SUPPORTED KERB_ENCTYPE_FAST_SUPPORTED")
21 cpp_quote("#define ENC_COMPOUND_IDENTITY_SUPPORTED KERB_ENCTYPE_COMPOUND_IDENTITY_SUPPORTED")
22 cpp_quote("#define ENC_CLAIMS_SUPPORTED KERB_ENCTYPE_CLAIMS_SUPPORTED")
23 cpp_quote("#define ENC_RESOURCE_SID_COMPRESSION_DISABLED KERB_ENCTYPE_RESOURCE_SID_COMPRESSION_DISABLED")
24 cpp_quote("#define NETLOGON_SERVER_PIPE_STATE_MAGIC 0x4f555358")
25
26 cpp_quote("#define DS_SERVER_PDC NBT_SERVER_PDC")
27 cpp_quote("#define DS_SERVER_GC NBT_SERVER_GC")
28 cpp_quote("#define DS_SERVER_LDAP NBT_SERVER_LDAP")
29 cpp_quote("#define DS_SERVER_DS NBT_SERVER_DS")
30 cpp_quote("#define DS_SERVER_KDC NBT_SERVER_KDC")
31 cpp_quote("#define DS_SERVER_TIMESERV NBT_SERVER_TIMESERV")
32 cpp_quote("#define DS_SERVER_CLOSEST NBT_SERVER_CLOSEST")
33 cpp_quote("#define DS_SERVER_WRITABLE NBT_SERVER_WRITABLE")
34 cpp_quote("#define DS_SERVER_GOOD_TIMESERV NBT_SERVER_GOOD_TIMESERV")
35 cpp_quote("#define DS_SERVER_NDNC NBT_SERVER_NDNC")
36 cpp_quote("#define DS_SERVER_SELECT_SECRET_DOMAIN_6 NBT_SERVER_SELECT_SECRET_DOMAIN_6 /* 2008 / RODC */")
37 cpp_quote("#define DS_SERVER_FULL_SECRET_DOMAIN_6 NBT_SERVER_FULL_SECRET_DOMAIN_6 /* 2008 */")
38 cpp_quote("#define DS_SERVER_WEBSERV NBT_SERVER_ADS_WEB_SERVICE")
39 cpp_quote("#define DS_SERVER_DS_8 NBT_SERVER_DS_8 /* 2012 */")
40 cpp_quote("#define DS_SERVER_DS_9 NBT_SERVER_DS_9 /* 2012R2 */")
41 cpp_quote("#define DS_SERVER_DS_10 NBT_SERVER_DS_10 /* 2016 */")
42 cpp_quote("#define DS_DNS_CONTROLLER NBT_SERVER_HAS_DNS_NAME")
43 cpp_quote("#define DS_DNS_DOMAIN NBT_SERVER_IS_DEFAULT_NC")
44 cpp_quote("#define DS_DNS_FOREST_ROOT NBT_SERVER_FOREST_ROOT")
45
46 [
47 uuid("12345678-1234-abcd-ef00-01234567cffb"),
48 version(1.0),
49 endpoint("ncacn_np:[\\pipe\\netlogon]","ncacn_ip_tcp:","ncalrpc:"),
50 helper("../librpc/ndr/ndr_netlogon.h"),
51 ms_union,
52 pointer_default(unique)
53 ]
54
55 interface netlogon
56 {
57 typedef bitmap samr_AcctFlags samr_AcctFlags;
58 typedef bitmap security_GroupAttrs security_GroupAttrs;
59 typedef enum netr_DeltaEnum8Bit netr_DeltaEnum8Bit;
60 typedef enum netr_SamDatabaseID8Bit netr_SamDatabaseID8Bit;
61
62 /*****************/
63 /* Function 0x00 */
64
65 typedef struct {
66 [string,charset(UTF16)] uint16 *account_name;
67 uint32 priv;
68 uint32 auth_flags;
69 uint32 logon_count;
70 uint32 bad_pw_count;
71 time_t last_logon;
72 time_t last_logoff;
73 time_t logoff_time;
74 time_t kickoff_time;
75 uint32 password_age;
76 time_t pw_can_change;
77 time_t pw_must_change;
78 [string,charset(UTF16)] uint16 *computer;
79 [string,charset(UTF16)] uint16 *domain;
80 [string,charset(UTF16)] uint16 *script_path;
81 uint32 unknown;
82 } netr_UasInfo;
83
84 WERROR netr_LogonUasLogon(
85 [in,unique] [string,charset(UTF16)] uint16 *server_name,
86 [in] [string,charset(UTF16)] uint16 *account_name,
87 [in] [string,charset(UTF16)] uint16 *workstation,
88 [out,ref] netr_UasInfo **info
89 );
90
91
92 /*****************/
93 /* Function 0x01 */
94
95 typedef struct {
96 uint32 duration;
97 uint16 logon_count;
98 } netr_UasLogoffInfo;
99
100 WERROR netr_LogonUasLogoff(
101 [in,unique] [string,charset(UTF16)] uint16 *server_name,
102 [in] [string,charset(UTF16)] uint16 *account_name,
103 [in] [string,charset(UTF16)] uint16 *workstation,
104 [out,ref] netr_UasLogoffInfo *info
105 );
106
107
108 /*****************/
109 /* Function 0x02 */
110
111 /* in netr_AcctLockStr size seems to be be 24, and rrenard thinks
112 that the structure of the bindata looks like this:
113
114 dlong lockout_duration;
115 udlong reset_count;
116 uint32 bad_attempt_lockout;
117 uint32 dummy;
118
119 but it doesn't look as though this structure is reflected at the
120 NDR level. Maybe it is left to the application to decode the bindata array.
121 */
122 typedef [public] struct {
123 dlong lockout_duration;
124 udlong reset_count;
125 uint32 bad_attempt_lockout;
126 uint32 dummy;
127 } netr_AcctLockStr;
128
129 /* - MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
130 * sets the NETLOGON_SERVER_TRUST_ACCOUNT user_flag
131 * - MSV1_0_UPDATE_LOGON_STATISTICS
132 * sets the logon time on network logon
133 * - MSV1_0_RETURN_USER_PARAMETERS
134 * sets the user parameters in the driveletter
135 * - MSV1_0_RETURN_PROFILE_PATH
136 * returns the profilepath in the driveletter and
137 * sets LOGON_PROFILE_PATH_RETURNED user_flag
138 */
139
140 typedef [public,bitmap32bit] bitmap {
141 MSV1_0_CLEARTEXT_PASSWORD_ALLOWED = 0x00000002,
142 MSV1_0_UPDATE_LOGON_STATISTICS = 0x00000004,
143 MSV1_0_RETURN_USER_PARAMETERS = 0x00000008,
144 MSV1_0_DONT_TRY_GUEST_ACCOUNT = 0x00000010,
145 MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT = 0x00000020,
146 MSV1_0_RETURN_PASSWORD_EXPIRY = 0x00000040,
147 MSV1_0_USE_CLIENT_CHALLENGE = 0x00000080,
148 MSV1_0_TRY_GUEST_ACCOUNT_ONLY = 0x00000100,
149 MSV1_0_RETURN_PROFILE_PATH = 0x00000200,
150 MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY = 0x00000400,
151 MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT = 0x00000800,
152 MSV1_0_DISABLE_PERSONAL_FALLBACK = 0x00001000,
153 MSV1_0_ALLOW_FORCE_GUEST = 0x00002000,
154 MSV1_0_CLEARTEXT_PASSWORD_SUPPLIED = 0x00004000,
155 MSV1_0_USE_DOMAIN_FOR_ROUTING_ONLY = 0x00008000,
156 MSV1_0_ALLOW_MSVCHAPV2 = 0x00010000,
157 MSV1_0_S4U2SELF = 0x00020000,
158 MSV1_0_CHECK_LOGONHOURS_FOR_S4U = 0x00040000,
159 MSV1_0_SUBAUTHENTICATION_DLL_EX = 0x00100000
160 } netr_LogonParameterControl;
161
162 /* Summary of the of the Query and Response from Microsoft on
163 * the usage of logon_id in netr_IdendityInfo
164 *
165 * [REG:119013019612095] [MS-NRPC]: NETLOGON_LOGON_IDENTITY_INFO: Does
166 * the Reserved field have LogonId meaning?
167 *
168 * Questions:
169 * In NetrLogonSamLogonEx does the Reserved field
170 * (of NETLOGON_LOGON_IDENTITY_INFO) have LogonId meaning?
171 *
172 * What is a valid LogonID, and does have any audit usage?
173 *
174 * Samba is sending a constant "deadbeef" in hex and would like to
175 * understand any usage of this field.
176 *
177 * Response:
178 * The NRPC spec is accurate in defining the field as Reserved, and
179 * without protocol significance. In the header file in our source
180 * code, it is defined as LogonId and commented as such, but it’s
181 * effectively not used. This is probably why the API structure has
182 * that field name. It may have been intended as such but it’s not
183 * used.
184 *
185 * Samba now sends a random value in this field.
186 */
187 typedef struct {
188 lsa_String domain_name;
189 netr_LogonParameterControl parameter_control; /* see MSV1_0_* */
190 udlong logon_id;
191 lsa_String account_name;
192 lsa_String workstation;
193 } netr_IdentityInfo;
194
195 typedef struct {
196 netr_IdentityInfo identity_info;
197 samr_Password lmpassword;
198 samr_Password ntpassword;
199 } netr_PasswordInfo;
200
201 typedef [flag(NDR_PAHEX)] struct {
202 uint16 length;
203 [value(length)] uint16 size;
204 [size_is(length),length_is(length)] uint8 *data;
205 } netr_ChallengeResponse;
206
207 typedef [flag(NDR_PAHEX)] struct {
208 netr_IdentityInfo identity_info;
209 uint8 challenge[8];
210 netr_ChallengeResponse nt;
211 netr_ChallengeResponse lm;
212 } netr_NetworkInfo;
213
214 typedef [flag(NDR_PAHEX)] struct {
215 netr_IdentityInfo identity_info;
216 lsa_String package_name;
217 uint32 length;
218 [size_is(length)] uint8 *data;
219 } netr_GenericInfo;
220
221 typedef [public] enum {
222 NetlogonInteractiveInformation = 1,
223 NetlogonNetworkInformation = 2,
224 NetlogonServiceInformation = 3,
225 NetlogonGenericInformation = 4,
226 NetlogonInteractiveTransitiveInformation = 5,
227 NetlogonNetworkTransitiveInformation = 6,
228 NetlogonServiceTransitiveInformation = 7
229 } netr_LogonInfoClass;
230
231 typedef [public,switch_type(netr_LogonInfoClass)] union {
232 [case(NetlogonInteractiveInformation)] netr_PasswordInfo *password;
233 [case(NetlogonNetworkInformation)] netr_NetworkInfo *network;
234 [case(NetlogonServiceInformation)] netr_PasswordInfo *password;
235 [case(NetlogonGenericInformation)] netr_GenericInfo *generic;
236 [case(NetlogonInteractiveTransitiveInformation)] netr_PasswordInfo *password;
237 [case(NetlogonNetworkTransitiveInformation)] netr_NetworkInfo *network;
238 [case(NetlogonServiceTransitiveInformation)] netr_PasswordInfo *password;
239 [default];
240 } netr_LogonLevel;
241
242 typedef [public,flag(NDR_PAHEX)] struct {
243 uint8 key[16];
244 } netr_UserSessionKey;
245
246 typedef [public,flag(NDR_PAHEX)] struct {
247 uint8 key[8];
248 } netr_LMSessionKey;
249
250 /* Flags for user_flags below */
251 typedef [public,bitmap32bit] bitmap {
252 NETLOGON_GUEST = 0x00000001,
253 NETLOGON_NOENCRYPTION = 0x00000002,
254 NETLOGON_CACHED_ACCOUNT = 0x00000004,
255 NETLOGON_USED_LM_PASSWORD = 0x00000008,
256 NETLOGON_EXTRA_SIDS = 0x00000020,
257 NETLOGON_SUBAUTH_SESSION_KEY = 0x00000040,
258 NETLOGON_SERVER_TRUST_ACCOUNT = 0x00000080,
259 NETLOGON_NTLMV2_ENABLED = 0x00000100,
260 NETLOGON_RESOURCE_GROUPS = 0x00000200,
261 NETLOGON_PROFILE_PATH_RETURNED = 0x00000400,
262 NETLOGON_GRACE_LOGON = 0x01000000
263 } netr_UserFlags;
264
265 typedef struct {
266 NTTIME logon_time;
267 NTTIME logoff_time;
268 NTTIME kickoff_time;
269 NTTIME last_password_change;
270 NTTIME allow_password_change;
271 NTTIME force_password_change;
272 lsa_String account_name;
273 lsa_String full_name;
274 lsa_String logon_script;
275 lsa_String profile_path;
276 lsa_String home_directory;
277 lsa_String home_drive;
278 uint16 logon_count;
279 uint16 bad_password_count;
280 uint32 rid;
281 uint32 primary_gid;
282 samr_RidWithAttributeArray groups;
283 netr_UserFlags user_flags;
284 [flag(NDR_SECRET)] netr_UserSessionKey key;
285 lsa_StringLarge logon_server;
286 lsa_StringLarge logon_domain;
287 dom_sid2 *domain_sid;
288 [flag(NDR_SECRET)] netr_LMSessionKey LMSessKey;
289 samr_AcctFlags acct_flags;
290 uint32 sub_auth_status;
291 NTTIME last_successful_logon;
292 NTTIME last_failed_logon;
293 uint32 failed_logon_count;
294 uint32 reserved;
295 } netr_SamBaseInfo;
296
297 typedef struct {
298 netr_SamBaseInfo base;
299 } netr_SamInfo2;
300
301 typedef [public] struct {
302 dom_sid2 *sid;
303 security_GroupAttrs attributes;
304 } netr_SidAttr;
305
306 typedef [public] struct {
307 netr_SamBaseInfo base;
308 uint32 sidcount;
309 [size_is(sidcount)] netr_SidAttr *sids;
310 } netr_SamInfo3;
311
312 typedef struct {
313 netr_SamBaseInfo base;
314 uint32 sidcount;
315 [size_is(sidcount)] netr_SidAttr *sids;
316 /*
317 * On ndr_push:
318 * Should pointer values be allocated
319 * of sids[*].sid before the following ones?
320 *
321 * That's at least the case for
322 * PAC_LOGON_INFO.
323 */
324 lsa_String dns_domainname;
325 lsa_String principal_name;
326 uint32 unknown4[20];
327 } netr_SamInfo6;
328
329 typedef struct {
330 uint32 pac_size;
331 [size_is(pac_size)] uint8 *pac;
332 lsa_String logon_domain;
333 lsa_String logon_server;
334 lsa_String principal_name;
335 uint32 auth_size;
336 [size_is(auth_size)] uint8 *auth;
337 netr_UserSessionKey user_session_key;
338 uint32 expansionroom[10];
339 lsa_String unknown1;
340 lsa_String unknown2;
341 lsa_String unknown3;
342 lsa_String unknown4;
343 } netr_PacInfo;
344
345 typedef [flag(NDR_PAHEX)] struct {
346 uint32 length;
347 [size_is(length)] uint8 *data;
348 } netr_GenericInfo2;
349
350 typedef enum {
351 NetlogonValidationUasInfo = 1,
352 NetlogonValidationSamInfo = 2,
353 NetlogonValidationSamInfo2 = 3,
354 NetlogonValidationGenericInfo2 = 5,
355 NetlogonValidationSamInfo4 = 6
356 } netr_ValidationInfoClass;
357
358 typedef [public,switch_type(uint16)] union {
359 [case(NetlogonValidationSamInfo)] netr_SamInfo2 *sam2;
360 [case(NetlogonValidationSamInfo2)] netr_SamInfo3 *sam3;
361 [case(4)] netr_PacInfo *pac;
362 [case(NetlogonValidationGenericInfo2)] netr_GenericInfo2 *generic;
363 [case(NetlogonValidationSamInfo4)] netr_SamInfo6 *sam6;
364 [default];
365 } netr_Validation;
366
367 typedef [public, flag(NDR_PAHEX)] struct {
368 uint8 data[8];
369 } netr_Credential;
370
371 typedef [public] struct {
372 netr_Credential client_challenge;
373 netr_Credential server_challenge;
374 } netlogon_server_pipe_state;
375
376 typedef [public] struct {
377 netr_Credential cred;
378 time_t timestamp;
379 } netr_Authenticator;
380
381 [public] NTSTATUS netr_LogonSamLogon(
382 [in,unique] [string,charset(UTF16)] uint16 *server_name,
383 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
384 [in,unique] netr_Authenticator *credential,
385 [in,out,unique] netr_Authenticator *return_authenticator,
386 [in] netr_LogonInfoClass logon_level,
387 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
388 [in] uint16 validation_level,
389 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
390 [out,ref] uint8 *authoritative
391 );
392
393
394 /*****************/
395 /* Function 0x03 */
396
397 NTSTATUS netr_LogonSamLogoff(
398 [in,unique] [string,charset(UTF16)] uint16 *server_name,
399 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
400 [in,unique] netr_Authenticator *credential,
401 [in,out,unique] netr_Authenticator *return_authenticator,
402 [in] netr_LogonInfoClass logon_level,
403 [in] [switch_is(logon_level)] netr_LogonLevel logon
404 );
405
406
407
408 /*****************/
409 /* Function 0x04 */
410
411 [public] NTSTATUS netr_ServerReqChallenge(
412 [in,unique,string,charset(UTF16)] uint16 *server_name,
413 [in,string,charset(UTF16)] uint16 *computer_name,
414 [in,ref] netr_Credential *credentials,
415 [out,ref] netr_Credential *return_credentials
416 );
417
418
419 /*****************/
420 /* Function 0x05 */
421
422 typedef enum netr_SchannelType netr_SchannelType;
423
424 NTSTATUS netr_ServerAuthenticate(
425 [in,unique,string,charset(UTF16)] uint16 *server_name,
426 [in,string,charset(UTF16)] uint16 *account_name,
427 [in] netr_SchannelType secure_channel_type,
428 [in,string,charset(UTF16)] uint16 *computer_name,
429 [in,ref] netr_Credential *credentials,
430 [out,ref] netr_Credential *return_credentials
431 );
432
433
434 /*****************/
435 /* Function 0x06 */
436
437 NTSTATUS netr_ServerPasswordSet(
438 [in,unique] [string,charset(UTF16)] uint16 *server_name,
439 [in] [string,charset(UTF16)] uint16 *account_name,
440 [in] netr_SchannelType secure_channel_type,
441 [in] [string,charset(UTF16)] uint16 *computer_name,
442 [in,ref] netr_Authenticator *credential,
443 [out,ref] netr_Authenticator *return_authenticator,
444 [in,ref] samr_Password *new_password
445 );
446
447
448 /*****************/
449 /* Function 0x07 */
450
451 typedef enum netr_SamDatabaseID netr_SamDatabaseID;
452
453 typedef struct {
454 [string,charset(UTF16)] uint16 *account_name;
455 lsa_String unknown1;
456 lsa_String unknown2;
457 lsa_String unknown3;
458 lsa_String unknown4;
459 uint32 unknown5;
460 uint32 unknown6;
461 uint32 unknown7;
462 uint32 unknown8;
463 } netr_DELTA_DELETE_USER;
464
465 typedef struct {
466 uint16 length;
467 [value(length)] uint16 size;
468 uint32 flags;
469 samr_Password pwd;
470 } netr_USER_KEY16;
471
472 typedef struct {
473 uint16 nt_length;
474 [value(nt_length)] uint16 nt_size;
475 uint32 nt_flags;
476 uint16 lm_length;
477 [value(lm_length)] uint16 lm_size;
478 uint32 lm_flags;
479 uint8 nt_history[nt_length];
480 uint8 lm_history[lm_length];
481 } netr_PasswordHistory;
482
483 typedef struct {
484 netr_USER_KEY16 lmpassword;
485 netr_USER_KEY16 ntpassword;
486 netr_PasswordHistory history;
487 } netr_USER_KEYS2;
488
489 typedef struct { /* TODO: make this a union! */
490 netr_USER_KEYS2 keys2;
491 } netr_USER_KEY_UNION;
492
493 typedef [public] struct {
494 uint32 version;
495 netr_USER_KEY_UNION keys;
496 } netr_USER_KEYS;
497
498 typedef struct {
499 boolean8 SensitiveDataFlag;
500 uint32 DataLength;
501
502 /* netr_USER_KEYS encrypted with the session key */
503 [size_is(DataLength)][flag(NDR_PAHEX)] uint8 *SensitiveData;
504 } netr_USER_PRIVATE_INFO;
505
506 typedef struct {
507 lsa_String account_name;
508 lsa_String full_name;
509 uint32 rid;
510 uint32 primary_gid;
511 lsa_String home_directory;
512 lsa_String home_drive;
513 lsa_String logon_script;
514 lsa_String description;
515 lsa_String workstations;
516 NTTIME last_logon;
517 NTTIME last_logoff;
518 samr_LogonHours logon_hours;
519 uint16 bad_password_count;
520 uint16 logon_count;
521 NTTIME last_password_change;
522 NTTIME acct_expiry;
523 samr_AcctFlags acct_flags;
524 samr_Password lmpassword;
525 samr_Password ntpassword;
526 boolean8 nt_password_present;
527 boolean8 lm_password_present;
528 boolean8 password_expired;
529 lsa_String comment;
530 lsa_BinaryString parameters;
531 uint16 country_code;
532 uint16 code_page;
533 netr_USER_PRIVATE_INFO user_private_info;
534 uint32 SecurityInformation;
535 sec_desc_buf sdbuf;
536 lsa_String profile_path;
537 lsa_String unknown2;
538 lsa_String unknown3;
539 lsa_String unknown4;
540 uint32 unknown5;
541 uint32 unknown6;
542 uint32 unknown7;
543 uint32 unknown8;
544 } netr_DELTA_USER;
545
546 typedef struct {
547 lsa_String domain_name;
548 lsa_String oem_information; /* comment */
549 dlong force_logoff_time;
550 uint16 min_password_length;
551 uint16 password_history_length;
552 /* yes, these are signed. They are in negative 100ns */
553 dlong max_password_age;
554 dlong min_password_age;
555 udlong sequence_num;
556 NTTIME domain_create_time;
557 uint32 SecurityInformation;
558 sec_desc_buf sdbuf;
559 lsa_BinaryString account_lockout;
560 lsa_String unknown2;
561 lsa_String unknown3;
562 lsa_String unknown4;
563 uint32 logon_to_chgpass;
564 uint32 unknown6;
565 uint32 unknown7;
566 uint32 unknown8;
567 } netr_DELTA_DOMAIN;
568
569 typedef struct {
570 lsa_String group_name;
571 uint32 rid;
572 uint32 attributes;
573 lsa_String description;
574 uint32 SecurityInformation;
575 sec_desc_buf sdbuf;
576 lsa_String unknown1;
577 lsa_String unknown2;
578 lsa_String unknown3;
579 lsa_String unknown4;
580 uint32 unknown5;
581 uint32 unknown6;
582 uint32 unknown7;
583 uint32 unknown8;
584 } netr_DELTA_GROUP;
585
586 typedef struct {
587 lsa_String OldName;
588 lsa_String NewName;
589 lsa_String unknown1;
590 lsa_String unknown2;
591 lsa_String unknown3;
592 lsa_String unknown4;
593 uint32 unknown5;
594 uint32 unknown6;
595 uint32 unknown7;
596 uint32 unknown8;
597 } netr_DELTA_RENAME;
598
599 typedef struct {
600 [size_is(num_rids)] uint32 *rids;
601 [size_is(num_rids)] uint32 *attribs;
602 uint32 num_rids;
603 uint32 unknown1;
604 uint32 unknown2;
605 uint32 unknown3;
606 uint32 unknown4;
607 } netr_DELTA_GROUP_MEMBER;
608
609 typedef struct {
610 lsa_String alias_name;
611 uint32 rid;
612 uint32 SecurityInformation;
613 sec_desc_buf sdbuf;
614 lsa_String description;
615 lsa_String unknown2;
616 lsa_String unknown3;
617 lsa_String unknown4;
618 uint32 unknown5;
619 uint32 unknown6;
620 uint32 unknown7;
621 uint32 unknown8;
622 } netr_DELTA_ALIAS;
623
624 typedef struct {
625 lsa_SidArray sids;
626 uint32 unknown1;
627 uint32 unknown2;
628 uint32 unknown3;
629 uint32 unknown4;
630 } netr_DELTA_ALIAS_MEMBER;
631
632 typedef struct {
633 uint32 pagedpoollimit;
634 uint32 nonpagedpoollimit;
635 uint32 minimumworkingsetsize;
636 uint32 maximumworkingsetsize;
637 uint32 pagefilelimit;
638 NTTIME timelimit;
639 } netr_QUOTA_LIMITS;
640
641 typedef struct {
642 uint32 maxlogsize;
643 NTTIME auditretentionperiod;
644 boolean8 auditingmode;
645 uint32 maxauditeventcount;
646 [size_is(maxauditeventcount+1)] uint32 *eventauditoptions;
647 lsa_String primary_domain_name;
648 dom_sid2 *sid;
649 netr_QUOTA_LIMITS quota_limits;
650 udlong sequence_num;
651 NTTIME db_create_time;
652 uint32 SecurityInformation;
653 sec_desc_buf sdbuf;
654 lsa_String unknown1;
655 lsa_String unknown2;
656 lsa_String unknown3;
657 lsa_String unknown4;
658 uint32 unknown5;
659 uint32 unknown6;
660 uint32 unknown7;
661 uint32 unknown8;
662 } netr_DELTA_POLICY;
663
664 typedef struct {
665 lsa_String domain_name;
666 uint32 num_controllers;
667 [size_is(num_controllers)] lsa_String *controller_names;
668 uint32 SecurityInformation;
669 sec_desc_buf sdbuf;
670 lsa_String unknown1;
671 lsa_String unknown2;
672 lsa_String unknown3;
673 lsa_String unknown4;
674 uint32 posix_offset;
675 uint32 unknown6;
676 uint32 unknown7;
677 uint32 unknown8;
678 } netr_DELTA_TRUSTED_DOMAIN;
679
680 typedef struct {
681 uint32 privilege_entries;
682 uint32 privilege_control;
683 [size_is(privilege_entries)] uint32 *privilege_attrib;
684 [size_is(privilege_entries)] lsa_String *privilege_name;
685 netr_QUOTA_LIMITS quotalimits;
686 uint32 system_flags;
687 uint32 SecurityInformation;
688 sec_desc_buf sdbuf;
689 lsa_String unknown1;
690 lsa_String unknown2;
691 lsa_String unknown3;
692 lsa_String unknown4;
693 uint32 unknown5;
694 uint32 unknown6;
695 uint32 unknown7;
696 uint32 unknown8;
697 } netr_DELTA_ACCOUNT;
698
699 typedef struct {
700 uint32 len;
701 uint32 maxlen;
702 [size_is(maxlen)][length_is(len)] uint8 *cipher_data;
703 } netr_CIPHER_VALUE;
704
705 typedef struct {
706 netr_CIPHER_VALUE current_cipher;
707 NTTIME current_cipher_set_time;
708 netr_CIPHER_VALUE old_cipher;
709 NTTIME old_cipher_set_time;
710 uint32 SecurityInformation;
711 sec_desc_buf sdbuf;
712 lsa_String unknown1;
713 lsa_String unknown2;
714 lsa_String unknown3;
715 lsa_String unknown4;
716 uint32 unknown5;
717 uint32 unknown6;
718 uint32 unknown7;
719 uint32 unknown8;
720 } netr_DELTA_SECRET;
721
722 typedef enum {
723 NETR_DELTA_DOMAIN = 1,
724 NETR_DELTA_GROUP = 2,
725 NETR_DELTA_DELETE_GROUP = 3,
726 NETR_DELTA_RENAME_GROUP = 4,
727 NETR_DELTA_USER = 5,
728 NETR_DELTA_DELETE_USER = 6,
729 NETR_DELTA_RENAME_USER = 7,
730 NETR_DELTA_GROUP_MEMBER = 8,
731 NETR_DELTA_ALIAS = 9,
732 NETR_DELTA_DELETE_ALIAS = 10,
733 NETR_DELTA_RENAME_ALIAS = 11,
734 NETR_DELTA_ALIAS_MEMBER = 12,
735 NETR_DELTA_POLICY = 13,
736 NETR_DELTA_TRUSTED_DOMAIN = 14,
737 NETR_DELTA_DELETE_TRUST = 15,
738 NETR_DELTA_ACCOUNT = 16,
739 NETR_DELTA_DELETE_ACCOUNT = 17,
740 NETR_DELTA_SECRET = 18,
741 NETR_DELTA_DELETE_SECRET = 19,
742 NETR_DELTA_DELETE_GROUP2 = 20,
743 NETR_DELTA_DELETE_USER2 = 21,
744 NETR_DELTA_MODIFY_COUNT = 22
745 } netr_DeltaEnum;
746
747 typedef [switch_type(netr_DeltaEnum)] union {
748 [case(NETR_DELTA_DOMAIN)] netr_DELTA_DOMAIN *domain;
749 [case(NETR_DELTA_GROUP)] netr_DELTA_GROUP *group;
750 [case(NETR_DELTA_DELETE_GROUP)] ; /* rid only */
751 [case(NETR_DELTA_RENAME_GROUP)] netr_DELTA_RENAME *rename_group;
752 [case(NETR_DELTA_USER)] netr_DELTA_USER *user;
753 [case(NETR_DELTA_DELETE_USER)] ; /* rid only */
754 [case(NETR_DELTA_RENAME_USER)] netr_DELTA_RENAME *rename_user;
755 [case(NETR_DELTA_GROUP_MEMBER)] netr_DELTA_GROUP_MEMBER *group_member;
756 [case(NETR_DELTA_ALIAS)] netr_DELTA_ALIAS *alias;
757 [case(NETR_DELTA_DELETE_ALIAS)] ; /* rid only */
758 [case(NETR_DELTA_RENAME_ALIAS)] netr_DELTA_RENAME *rename_alias;
759 [case(NETR_DELTA_ALIAS_MEMBER)] netr_DELTA_ALIAS_MEMBER *alias_member;
760 [case(NETR_DELTA_POLICY)] netr_DELTA_POLICY *policy;
761 [case(NETR_DELTA_TRUSTED_DOMAIN)] netr_DELTA_TRUSTED_DOMAIN *trusted_domain;
762 [case(NETR_DELTA_DELETE_TRUST)] ; /* sid only */
763 [case(NETR_DELTA_ACCOUNT)] netr_DELTA_ACCOUNT *account;
764 [case(NETR_DELTA_DELETE_ACCOUNT)] ; /* sid only */
765 [case(NETR_DELTA_SECRET)] netr_DELTA_SECRET *secret;
766 [case(NETR_DELTA_DELETE_SECRET)] ; /* name only */
767 [case(NETR_DELTA_DELETE_GROUP2)] netr_DELTA_DELETE_USER *delete_group;
768 [case(NETR_DELTA_DELETE_USER2)] netr_DELTA_DELETE_USER *delete_user;
769 [case(NETR_DELTA_MODIFY_COUNT)] udlong *modified_count;
770 [default];
771 } netr_DELTA_UNION;
772
773 typedef [switch_type(netr_DeltaEnum)] union {
774 [case(NETR_DELTA_DOMAIN)] uint32 rid;
775 [case(NETR_DELTA_GROUP)] uint32 rid;
776 [case(NETR_DELTA_DELETE_GROUP)] uint32 rid;
777 [case(NETR_DELTA_RENAME_GROUP)] uint32 rid;
778 [case(NETR_DELTA_USER)] uint32 rid;
779 [case(NETR_DELTA_DELETE_USER)] uint32 rid;
780 [case(NETR_DELTA_RENAME_USER)] uint32 rid;
781 [case(NETR_DELTA_GROUP_MEMBER)] uint32 rid;
782 [case(NETR_DELTA_ALIAS)] uint32 rid;
783 [case(NETR_DELTA_DELETE_ALIAS)] uint32 rid;
784 [case(NETR_DELTA_RENAME_ALIAS)] uint32 rid;
785 [case(NETR_DELTA_ALIAS_MEMBER)] uint32 rid;
786 [case(NETR_DELTA_POLICY)] dom_sid2 *sid;
787 [case(NETR_DELTA_TRUSTED_DOMAIN)] dom_sid2 *sid;
788 [case(NETR_DELTA_DELETE_TRUST)] dom_sid2 *sid;
789 [case(NETR_DELTA_ACCOUNT)] dom_sid2 *sid;
790 [case(NETR_DELTA_DELETE_ACCOUNT)] dom_sid2 *sid;
791 [case(NETR_DELTA_SECRET)] [string,charset(UTF16)] uint16 *name;
792 [case(NETR_DELTA_DELETE_SECRET)] [string,charset(UTF16)] uint16 *name;
793 [case(NETR_DELTA_DELETE_GROUP2)] uint32 rid;
794 [case(NETR_DELTA_DELETE_USER2)] uint32 rid;
795 [case(NETR_DELTA_MODIFY_COUNT)] ;
796 [default];
797 } netr_DELTA_ID_UNION;
798
799 typedef struct {
800 netr_DeltaEnum delta_type;
801 [switch_is(delta_type)] netr_DELTA_ID_UNION delta_id_union;
802 [switch_is(delta_type)] netr_DELTA_UNION delta_union;
803 } netr_DELTA_ENUM;
804
805 typedef struct {
806 uint32 num_deltas;
807 [size_is(num_deltas)] netr_DELTA_ENUM *delta_enum;
808 } netr_DELTA_ENUM_ARRAY;
809
810 NTSTATUS netr_DatabaseDeltas(
811 [in] [string,charset(UTF16)] uint16 *logon_server,
812 [in] [string,charset(UTF16)] uint16 *computername,
813 [in,ref] netr_Authenticator *credential,
814 [in,out,ref] netr_Authenticator *return_authenticator,
815 [in] netr_SamDatabaseID database_id,
816 [in,out,ref] udlong *sequence_num,
817 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array,
818 [in] uint32 preferredmaximumlength
819 );
820
821
822 /*****************/
823 /* Function 0x08 */
824
825 NTSTATUS netr_DatabaseSync(
826 [in] [string,charset(UTF16)] uint16 *logon_server,
827 [in] [string,charset(UTF16)] uint16 *computername,
828 [in,ref] netr_Authenticator *credential,
829 [in,out,ref] netr_Authenticator *return_authenticator,
830 [in] netr_SamDatabaseID database_id,
831 [in,out,ref] uint32 *sync_context,
832 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array,
833 [in] uint32 preferredmaximumlength
834 );
835
836
837 /*****************/
838 /* Function 0x09 */
839
840 /* w2k3 returns NT_STATUS_NOT_IMPLEMENTED for this call */
841
842 typedef [flag(NDR_PAHEX)] struct {
843 uint8 computer_name[16];
844 uint32 timecreated;
845 uint32 serial_number;
846 } netr_UAS_INFO_0;
847
848 typedef struct {
849 [flag(NDR_REMAINING)] DATA_BLOB blob;
850 } netr_AccountBuffer;
851
852 NTSTATUS netr_AccountDeltas(
853 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
854 [in] [string,charset(UTF16)] uint16 *computername,
855 [in] netr_Authenticator credential,
856 [in,out,ref] netr_Authenticator *return_authenticator,
857 [in] netr_UAS_INFO_0 uas,
858 [in] uint32 count,
859 [in] uint32 level,
860 [in] uint32 buffersize,
861 [out,ref,subcontext(4)] netr_AccountBuffer *buffer,
862 [out,ref] uint32 *count_returned,
863 [out,ref] uint32 *total_entries,
864 [out,ref] netr_UAS_INFO_0 *recordid
865 );
866
867
868 /*****************/
869 /* Function 0x0A */
870
871 NTSTATUS netr_AccountSync(
872 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
873 [in] [string,charset(UTF16)] uint16 *computername,
874 [in] netr_Authenticator credential,
875 [in,out,ref] netr_Authenticator *return_authenticator,
876 [in] uint32 reference,
877 [in] uint32 level,
878 [in] uint32 buffersize,
879 [out,ref,subcontext(4)] netr_AccountBuffer *buffer,
880 [out,ref] uint32 *count_returned,
881 [out,ref] uint32 *total_entries,
882 [out,ref] uint32 *next_reference,
883 [in,out,ref] netr_UAS_INFO_0 *recordid
884 );
885
886
887 /*****************/
888 /* Function 0x0B */
889
890 WERROR netr_GetDcName(
891 [in] [string,charset(UTF16)] uint16 *logon_server,
892 [in,unique] [string,charset(UTF16)] uint16 *domainname,
893 [out,ref] [string,charset(UTF16)] uint16 **dcname
894 );
895
896 /*****************/
897 /* Function 0x0C */
898
899 typedef [bitmap32bit] bitmap {
900 NETLOGON_REPLICATION_NEEDED = 0x00000001,
901 NETLOGON_REPLICATION_IN_PROGRESS = 0x00000002,
902 NETLOGON_FULL_SYNC_REPLICATION = 0x00000004,
903 NETLOGON_REDO_NEEDED = 0x00000008,
904 NETLOGON_HAS_IP = 0x00000010,
905 NETLOGON_HAS_TIMESERV = 0x00000020,
906 NETLOGON_DNS_UPDATE_FAILURE = 0x00000040,
907 NETLOGON_VERIFY_STATUS_RETURNED = 0x00000080
908 } netr_InfoFlags;
909
910 typedef struct {
911 netr_InfoFlags flags;
912 WERROR pdc_connection_status;
913 } netr_NETLOGON_INFO_1;
914
915 typedef struct {
916 netr_InfoFlags flags;
917 WERROR pdc_connection_status;
918 [string,charset(UTF16)] uint16 *trusted_dc_name;
919 WERROR tc_connection_status;
920 } netr_NETLOGON_INFO_2;
921
922 typedef struct {
923 netr_InfoFlags flags;
924 uint32 logon_attempts;
925 uint32 unknown1;
926 uint32 unknown2;
927 uint32 unknown3;
928 uint32 unknown4;
929 uint32 unknown5;
930 } netr_NETLOGON_INFO_3;
931
932 typedef struct {
933 [string,charset(UTF16)] uint16 *trusted_dc_name;
934 [string,charset(UTF16)] uint16 *trusted_domain_name;
935 } netr_NETLOGON_INFO_4;
936
937 typedef [public] union {
938 [case(1)] netr_NETLOGON_INFO_1 *info1;
939 [case(2)] netr_NETLOGON_INFO_2 *info2;
940 [case(3)] netr_NETLOGON_INFO_3 *info3;
941 [case(4)] netr_NETLOGON_INFO_4 *info4;
942 [default] ;
943 } netr_CONTROL_QUERY_INFORMATION;
944
945 /* function_code values */
946 typedef [v1_enum,public] enum {
947 NETLOGON_CONTROL_QUERY = 0x00000001,
948 NETLOGON_CONTROL_REPLICATE = 0x00000002,
949 NETLOGON_CONTROL_SYNCHRONIZE = 0x00000003,
950 NETLOGON_CONTROL_PDC_REPLICATE = 0x00000004,
951 NETLOGON_CONTROL_REDISCOVER = 0x00000005,
952 NETLOGON_CONTROL_TC_QUERY = 0x00000006,
953 NETLOGON_CONTROL_TRANSPORT_NOTIFY = 0x00000007,
954 NETLOGON_CONTROL_FIND_USER = 0x00000008,
955 NETLOGON_CONTROL_CHANGE_PASSWORD = 0x00000009,
956 NETLOGON_CONTROL_TC_VERIFY = 0x0000000A,
957 NETLOGON_CONTROL_FORCE_DNS_REG = 0x0000000B,
958 NETLOGON_CONTROL_QUERY_DNS_REG = 0x0000000C,
959 NETLOGON_CONTROL_BACKUP_CHANGE_LOG = 0x0000FFFC,
960 NETLOGON_CONTROL_TRUNCATE_LOG = 0x0000FFFD,
961 NETLOGON_CONTROL_SET_DBFLAG = 0x0000FFFE,
962 NETLOGON_CONTROL_BREAKPOINT = 0x0000FFFF
963 } netr_LogonControlCode;
964
965 WERROR netr_LogonControl(
966 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
967 [in] netr_LogonControlCode function_code,
968 [in] uint32 level,
969 [out,ref,switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
970 );
971
972
973 /*****************/
974 /* Function 0x0D */
975
976 WERROR netr_GetAnyDCName(
977 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
978 [in,unique] [string,charset(UTF16)] uint16 *domainname,
979 [out,ref] [string,charset(UTF16)] uint16 **dcname
980 );
981
982
983 /*****************/
984 /* Function 0x0E */
985
986 typedef [public,switch_type(netr_LogonControlCode)] union {
987 [case(NETLOGON_CONTROL_REDISCOVER)] [string,charset(UTF16)] uint16 *domain;
988 [case(NETLOGON_CONTROL_TC_QUERY)] [string,charset(UTF16)] uint16 *domain;
989 [case(NETLOGON_CONTROL_TRANSPORT_NOTIFY)] [string,charset(UTF16)] uint16 *domain;
990 [case(NETLOGON_CONTROL_CHANGE_PASSWORD)] [string,charset(UTF16)] uint16 *domain;
991 [case(NETLOGON_CONTROL_TC_VERIFY)] [string,charset(UTF16)] uint16 *domain;
992 [case(NETLOGON_CONTROL_FIND_USER)] [string,charset(UTF16)] uint16 *user;
993 [case(NETLOGON_CONTROL_SET_DBFLAG)] uint32 debug_level;
994 [default] ;
995 } netr_CONTROL_DATA_INFORMATION;
996
997 WERROR netr_LogonControl2(
998 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
999 [in] netr_LogonControlCode function_code,
1000 [in] uint32 level,
1001 [in,ref][switch_is(function_code)] netr_CONTROL_DATA_INFORMATION *data,
1002 [out,ref][switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
1003 );
1004
1005
1006 /* If NETLOGON_NEG_ARCFOUR flag is not set, then the passwords and LM
1007 * session keys are encrypted with DES calls. (And the user session key
1008 * is unencrypted) */
1009
1010 /*****************/
1011 /* Function 0x0F */
1012
1013 typedef [public,bitmap32bit] bitmap {
1014 NETLOGON_NEG_ACCOUNT_LOCKOUT = 0x00000001,
1015 NETLOGON_NEG_PERSISTENT_SAMREPL = 0x00000002,
1016 NETLOGON_NEG_ARCFOUR = 0x00000004,
1017 NETLOGON_NEG_PROMOTION_COUNT = 0x00000008,
1018 NETLOGON_NEG_CHANGELOG_BDC = 0x00000010,
1019 NETLOGON_NEG_FULL_SYNC_REPL = 0x00000020,
1020 NETLOGON_NEG_MULTIPLE_SIDS = 0x00000040,
1021 NETLOGON_NEG_REDO = 0x00000080,
1022 NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL = 0x00000100,
1023 NETLOGON_NEG_SEND_PASSWORD_INFO_PDC = 0x00000200,
1024 NETLOGON_NEG_GENERIC_PASSTHROUGH = 0x00000400,
1025 NETLOGON_NEG_CONCURRENT_RPC = 0x00000800,
1026 NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL = 0x00001000,
1027 NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL = 0x00002000,
1028 NETLOGON_NEG_STRONG_KEYS = 0x00004000,
1029 NETLOGON_NEG_TRANSITIVE_TRUSTS = 0x00008000,
1030 NETLOGON_NEG_DNS_DOMAIN_TRUSTS = 0x00010000,
1031 NETLOGON_NEG_PASSWORD_SET2 = 0x00020000,
1032 NETLOGON_NEG_GETDOMAININFO = 0x00040000,
1033 NETLOGON_NEG_CROSS_FOREST_TRUSTS = 0x00080000,
1034 NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION = 0x00100000,
1035 NETLOGON_NEG_RODC_PASSTHROUGH = 0x00200000,
1036 NETLOGON_NEG_SUPPORTS_AES_SHA2 = 0x00400000,
1037 NETLOGON_NEG_SUPPORTS_AES = 0x01000000,
1038 NETLOGON_NEG_AUTHENTICATED_RPC_LSASS = 0x20000000,
1039 NETLOGON_NEG_AUTHENTICATED_RPC = 0x40000000,
1040 NETLOGON_NEG_SUPPORTS_KERBEROS_AUTH = 0x80000000
1041 } netr_NegotiateFlags;
1042
1043 const uint32 NETLOGON_NEG_128BIT = NETLOGON_NEG_STRONG_KEYS;
1044 const uint32 NETLOGON_NEG_SCHANNEL = NETLOGON_NEG_AUTHENTICATED_RPC;
1045
1046 NTSTATUS netr_ServerAuthenticate2(
1047 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1048 [in] [string,charset(UTF16)] uint16 *account_name,
1049 [in] netr_SchannelType secure_channel_type,
1050 [in] [string,charset(UTF16)] uint16 *computer_name,
1051 [in,ref] netr_Credential *credentials,
1052 [out,ref] netr_Credential *return_credentials,
1053 [in,out,ref] netr_NegotiateFlags *negotiate_flags
1054 );
1055
1056
1057 /*****************/
1058 /* Function 0x10 */
1059
1060 typedef enum {
1061 SYNCSTATE_NORMAL_STATE = 0,
1062 SYNCSTATE_DOMAIN_STATE = 1,
1063 SYNCSTATE_GROUP_STATE = 2,
1064 SYNCSTATE_UAS_BUILT_IN_GROUP_STATE = 3,
1065 SYNCSTATE_USER_STATE = 4,
1066 SYNCSTATE_GROUP_MEMBER_STATE = 5,
1067 SYNCSTATE_ALIAS_STATE = 6,
1068 SYNCSTATE_ALIAS_MEMBER_STATE = 7,
1069 SYNCSTATE_SAM_DONE_STATE = 8
1070 } SyncStateEnum;
1071
1072 NTSTATUS netr_DatabaseSync2(
1073 [in] [string,charset(UTF16)] uint16 *logon_server,
1074 [in] [string,charset(UTF16)] uint16 *computername,
1075 [in,ref] netr_Authenticator *credential,
1076 [in,out,ref] netr_Authenticator *return_authenticator,
1077 [in] netr_SamDatabaseID database_id,
1078 [in] SyncStateEnum restart_state,
1079 [in,out,ref] uint32 *sync_context,
1080 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array,
1081 [in] uint32 preferredmaximumlength
1082 );
1083
1084
1085 /*****************/
1086 /* Function 0x11 */
1087
1088 /* i'm not at all sure how this call works */
1089
1090 typedef [bitmap16bit] bitmap {
1091 NETR_CHANGELOG_IMMEDIATE_REPL_REQUIRED = 0x0001,
1092 NETR_CHANGELOG_CHANGED_PASSWORD = 0x0002,
1093 NETR_CHANGELOG_SID_INCLUDED = 0x0004,
1094 NETR_CHANGELOG_NAME_INCLUDED = 0x0008,
1095 NETR_CHANGELOG_FIRST_PROMOTION_OBJ = 0x0010
1096 } netr_ChangeLogFlags;
1097
1098 typedef [nodiscriminant] union {
1099 [case(NETR_CHANGELOG_SID_INCLUDED)] dom_sid object_sid;
1100 [case(NETR_CHANGELOG_NAME_INCLUDED)] nstring object_name;
1101 [default];
1102 } netr_ChangeLogObject;
1103
1104 typedef [public,gensize] struct {
1105 uint32 serial_number1;
1106 uint32 serial_number2;
1107 uint32 object_rid;
1108 netr_ChangeLogFlags flags;
1109 netr_SamDatabaseID8Bit db_index;
1110 netr_DeltaEnum8Bit delta_type;
1111 [switch_is(flags & (NETR_CHANGELOG_SID_INCLUDED|NETR_CHANGELOG_NAME_INCLUDED))] netr_ChangeLogObject object;
1112 } netr_ChangeLogEntry;
1113
1114 NTSTATUS netr_DatabaseRedo(
1115 [in] [string,charset(UTF16)] uint16 *logon_server,
1116 [in] [string,charset(UTF16)] uint16 *computername,
1117 [in] netr_Authenticator *credential,
1118 [in,out,ref] netr_Authenticator *return_authenticator,
1119 /*
1120 * we cannot use subcontext_size() here, as
1121 * change_log_entry_size is encoded after the subcontext
1122 */
1123 [in] [subcontext(4)/*,subcontext_size(change_log_entry_size)*/]
1124 netr_ChangeLogEntry change_log_entry,
1125 [in] [value(ndr_size_netr_ChangeLogEntry(&change_log_entry,
1126 ndr->flags))]
1127 uint32 change_log_entry_size,
1128 [out,ref] netr_DELTA_ENUM_ARRAY **delta_enum_array
1129 );
1130
1131
1132 /*****************/
1133 /* Function 0x12 */
1134
1135 WERROR netr_LogonControl2Ex(
1136 [in,unique] [string,charset(UTF16)] uint16 *logon_server,
1137 [in] netr_LogonControlCode function_code,
1138 [in] uint32 level,
1139 [in,ref][switch_is(function_code)] netr_CONTROL_DATA_INFORMATION *data,
1140 [out,ref][switch_is(level)] netr_CONTROL_QUERY_INFORMATION *query
1141 );
1142
1143 /*****************/
1144 /* Function 0x13 */
1145 typedef struct {
1146 uint32 length;
1147 [size_is(length)] uint8 *data;
1148 } netr_Blob;
1149
1150 NTSTATUS netr_NetrEnumerateTrustedDomains(
1151 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1152 [out,ref] netr_Blob *trusted_domains_blob
1153 );
1154
1155 /*****************/
1156 /* Function 0x14 */
1157
1158 /* one unknown bit still: DS_IP_VERSION_AGNOSTIC - gd*/
1159
1160 const int DSGETDC_VALID_FLAGS = (DS_FORCE_REDISCOVERY |
1161 DS_DIRECTORY_SERVICE_REQUIRED |
1162 DS_DIRECTORY_SERVICE_PREFERRED |
1163 DS_GC_SERVER_REQUIRED |
1164 DS_PDC_REQUIRED |
1165 DS_BACKGROUND_ONLY |
1166 DS_IP_REQUIRED |
1167 DS_KDC_REQUIRED |
1168 DS_TIMESERV_REQUIRED |
1169 DS_WRITABLE_REQUIRED |
1170 DS_GOOD_TIMESERV_PREFERRED |
1171 DS_AVOID_SELF |
1172 DS_ONLY_LDAP_NEEDED |
1173 DS_IS_FLAT_NAME |
1174 DS_IS_DNS_NAME |
1175 DS_TRY_NEXTCLOSEST_SITE |
1176 DS_DIRECTORY_SERVICE_6_REQUIRED |
1177 DS_WEB_SERVICE_REQUIRED |
1178 DS_DIRECTORY_SERVICE_8_REQUIRED |
1179 DS_DIRECTORY_SERVICE_9_REQUIRED |
1180 DS_DIRECTORY_SERVICE_10_REQUIRED |
1181 DS_RETURN_FLAT_NAME |
1182 DS_RETURN_DNS_NAME);
1183
1184 typedef [bitmap32bit] bitmap {
1185 DS_FORCE_REDISCOVERY = 0x00000001,
1186 DS_DIRECTORY_SERVICE_REQUIRED = 0x00000010,
1187 DS_DIRECTORY_SERVICE_PREFERRED = 0x00000020,
1188 DS_GC_SERVER_REQUIRED = 0x00000040,
1189 DS_PDC_REQUIRED = 0x00000080,
1190 DS_BACKGROUND_ONLY = 0x00000100,
1191 DS_IP_REQUIRED = 0x00000200,
1192 DS_KDC_REQUIRED = 0x00000400,
1193 DS_TIMESERV_REQUIRED = 0x00000800,
1194 DS_WRITABLE_REQUIRED = 0x00001000,
1195 DS_GOOD_TIMESERV_PREFERRED = 0x00002000,
1196 DS_AVOID_SELF = 0x00004000,
1197 DS_ONLY_LDAP_NEEDED = 0x00008000,
1198 DS_IS_FLAT_NAME = 0x00010000,
1199 DS_IS_DNS_NAME = 0x00020000,
1200 DS_TRY_NEXTCLOSEST_SITE = 0x00040000,
1201 DS_DIRECTORY_SERVICE_6_REQUIRED = 0x00080000, /* 2008 */
1202 DS_WEB_SERVICE_REQUIRED = 0x00100000,
1203 DS_DIRECTORY_SERVICE_8_REQUIRED = 0x00200000, /* 2012 */
1204 DS_DIRECTORY_SERVICE_9_REQUIRED = 0x00400000, /* 2012R2 */
1205 DS_DIRECTORY_SERVICE_10_REQUIRED= 0x00800000, /* 2016 */
1206 DS_RETURN_DNS_NAME = 0x40000000,
1207 DS_RETURN_FLAT_NAME = 0x80000000
1208 } netr_DsRGetDCName_flags;
1209
1210 typedef [v1_enum] enum {
1211 DS_ADDRESS_TYPE_INET = 1,
1212 DS_ADDRESS_TYPE_NETBIOS = 2
1213 } netr_DsRGetDCNameInfo_AddressType;
1214
1215 typedef [public] struct {
1216 [string,charset(UTF16)] uint16 *dc_unc;
1217 [string,charset(UTF16)] uint16 *dc_address;
1218 netr_DsRGetDCNameInfo_AddressType dc_address_type;
1219 GUID domain_guid;
1220 [string,charset(UTF16)] uint16 *domain_name;
1221 [string,charset(UTF16)] uint16 *forest_name;
1222 nbt_server_type dc_flags;
1223 [string,charset(UTF16)] uint16 *dc_site_name;
1224 [string,charset(UTF16)] uint16 *client_site_name;
1225 } netr_DsRGetDCNameInfo;
1226
1227 WERROR netr_DsRGetDCName(
1228 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1229 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1230 [in,unique] GUID *domain_guid,
1231 [in,unique] GUID *site_guid,
1232 [in] netr_DsRGetDCName_flags flags,
1233 [out,ref] netr_DsRGetDCNameInfo **info
1234 );
1235
1236 /*****************/
1237 /* Function 0x15 */
1238 typedef [switch_type(uint32)] union {
1239 [case(1)] netr_NegotiateFlags server_capabilities;
1240 [case(2)] netr_NegotiateFlags requested_flags;
1241 } netr_Capabilities;
1242
1243 NTSTATUS netr_LogonGetCapabilities(
1244 [in] [string,charset(UTF16)] uint16 *server_name,
1245 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1246 [in,ref] netr_Authenticator *credential,
1247 [in,out,ref] netr_Authenticator *return_authenticator,
1248 [in] uint32 query_level,
1249 [out,ref,switch_is(query_level)] netr_Capabilities *capabilities
1250 );
1251
1252 /****************/
1253 /* Function 0x16 */
1254 [todo] WERROR netr_NETRLOGONSETSERVICEBITS();
1255
1256 /****************/
1257 /* Function 0x17 */
1258 WERROR netr_LogonGetTrustRid(
1259 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1260 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1261 [out,ref] uint32 *rid
1262 );
1263
1264 /****************/
1265 /* Function 0x18 */
1266 [todo] WERROR netr_NETRLOGONCOMPUTESERVERDIGEST();
1267
1268 /****************/
1269 /* Function 0x19 */
1270 [todo] WERROR netr_NETRLOGONCOMPUTECLIENTDIGEST();
1271
1272 /****************/
1273 /* Function 0x1a */
1274 [public] NTSTATUS netr_ServerAuthenticate3(
1275 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1276 [in] [string,charset(UTF16)] uint16 *account_name,
1277 [in] netr_SchannelType secure_channel_type,
1278 [in] [string,charset(UTF16)] uint16 *computer_name,
1279 [in,ref] netr_Credential *credentials,
1280 [out,ref] netr_Credential *return_credentials,
1281 [in,out,ref] netr_NegotiateFlags *negotiate_flags,
1282 [out,ref] uint32 *rid
1283 );
1284
1285 /****************/
1286 /* Function 0x1b */
1287
1288 WERROR netr_DsRGetDCNameEx(
1289 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1290 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1291 [in,unique] GUID *domain_guid,
1292 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1293 [in] netr_DsRGetDCName_flags flags,
1294 [out,ref] netr_DsRGetDCNameInfo **info
1295 );
1296
1297
1298 /****************/
1299 /* Function 0x1c */
1300 WERROR netr_DsRGetSiteName(
1301 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1302 [out,ref] [string,charset(UTF16)] uint16 **site
1303 );
1304
1305 /****************/
1306 /* Function 0x1d */
1307 typedef [public,bitmap32bit] bitmap {
1308 NETR_TRUST_FLAG_IN_FOREST = 0x00000001,
1309 NETR_TRUST_FLAG_OUTBOUND = 0x00000002,
1310 NETR_TRUST_FLAG_TREEROOT = 0x00000004,
1311 NETR_TRUST_FLAG_PRIMARY = 0x00000008,
1312 NETR_TRUST_FLAG_NATIVE = 0x00000010,
1313 NETR_TRUST_FLAG_INBOUND = 0x00000020,
1314 NETR_TRUST_FLAG_MIT_KRB5 = 0x00000080,
1315 NETR_TRUST_FLAG_AES = 0x00000100
1316 } netr_TrustFlags;
1317
1318 typedef [bitmap32bit] bitmap {
1319 NETR_WS_FLAG_HANDLES_INBOUND_TRUSTS = 0x00000001,
1320 NETR_WS_FLAG_HANDLES_SPN_UPDATE = 0x00000002
1321 } netr_WorkstationFlags;
1322
1323 typedef [bitmap16bit] bitmap {
1324 NETR_VER_SUITE_BACKOFFICE = 0x0004,
1325 NETR_VER_SUITE_BLADE = 0x0400,
1326 NETR_VER_SUITE_COMPUTE_SERVER = 0x4000,
1327 NETR_VER_SUITE_DATACENTER = 0x0080,
1328 NETR_VER_SUITE_ENTERPRISE = 0x0002,
1329 NETR_VER_SUITE_EMBEDDEDNT = 0x0040,
1330 NETR_VER_SUITE_PERSONAL = 0x0200,
1331 NETR_VER_SUITE_SINGLEUSERTS = 0x0100,
1332 NETR_VER_SUITE_SMALLBUSINESS = 0x0001,
1333 NETR_VER_SUITE_SMALLBUSINESS_RESTRICTED = 0x0020,
1334 NETR_VER_SUITE_STORAGE_SERVER = 0x2000,
1335 NETR_VER_SUITE_TERMINAL = 0x0010,
1336 NETR_VER_SUITE_WH_SERVER = 0x8000
1337 } netr_SuiteMask;
1338
1339 typedef [bitmap8bit] bitmap {
1340 NETR_VER_NT_DOMAIN_CONTROLLER = 0x02,
1341 NETR_VER_NT_SERVER = 0x03,
1342 NETR_VER_NT_WORKSTATION = 0x01
1343 } netr_ProductType;
1344
1345 typedef struct {
1346 uint32 policy_size;
1347 [size_is(policy_size)] uint8 *policy;
1348 } netr_LsaPolicyInformation;
1349
1350 typedef struct {
1351 [value(284)] uint32 OSVersionInfoSize;
1352 /*
1353 * [MS-NRPC] 2.2.1.3.15 NL_OSVERSIONINFO_V1
1354 *
1355 * 4 The operating system is Windows NT 4.0.
1356 * 5 The operating system is
1357 * Windows 2000,
1358 * Windows XP,
1359 * Windows Server 2003, or
1360 * Windows Server 2003 R2 operating system.
1361 * 6 The operating system is
1362 * Windows Vista, Windows Server 2008,
1363 * Windows 7, Windows Server 2008 R2,
1364 * Windows 8, Windows Server 2012,
1365 * Windows 8.1, or Windows Server 2012 R2.
1366 * 10 The operating system is
1367 * Windows 10 and later.
1368 */
1369 uint32 MajorVersion;
1370 /*
1371 * [MS-NRPC] 2.2.1.3.15 NL_OSVERSIONINFO_V1
1372 *
1373 * 0 The operating system is
1374 * Windows NT 4.0, Windows 2000,
1375 * Windows Vista, Windows Server 2008,
1376 * Windows 10, Windows Server 2016, and later.
1377 * 1 The operating system is
1378 * Windows XP, Windows 7, or Windows Server 2008 R2.
1379 * 2 The operating system is
1380 * Windows XP Professional x64 Edition operating system,
1381 * Windows Server 2003, Windows Server 2003 R2,
1382 * Windows 8, or Windows Server 2012.
1383 * 3 The operating system is
1384 * Windows 8.1 or Windows Server 2012 R2.
1385 *
1386 * I guess this results in:
1387 *
1388 * Windows Server 2022 => 10.0 (20348)
1389 * Windows Server 2019 => 10.0
1390 * Windows Server operating system => 10.0
1391 * Windows 10 and Windows Server 2016 => 10.0 (14393)
1392 * Windows 8.1 and Windows Server 2012 R2 => 6.3 (9600)
1393 * Windows 8 and Windows Server 2012 => 6.2
1394 * Windows 7 and Windows Server 2008 R2 => 6.1 (7600)
1395 * Windows Vista and Windows Server 2008 => 6.0
1396 * Windows XP operating system Service Pack 1 (SP1) => 5.2
1397 * Windows XP and Windows Server 2003 => 5.1
1398 * Windows 2000 => 5.0
1399 * Windows NT 4.0 => 4.0
1400 */
1401 uint32 MinorVersion;
1402 /*
1403 * From [MS-RPRN] 7 Appendix B: Product Behavior:
1404 *
1405 * Windows Server 2019 >= 17633
1406 * Windows Server operating system >= 16299
1407 * Windows 10 and Windows Server 2016 >= 10586
1408 * Windows 8.1 and Windows Server 2012 R2 >= 9431
1409 * Windows 8 and Windows Server 2012 >= 9200
1410 * Windows 7 and Windows Server 2008 R2 >= 7007
1411 * Windows Vista operating system with Service Pack 1 (SP1) and
1412 * Windows Server 2008 >= 6001
1413 * Windows Vista and Windows Server 2008 >= 6000
1414 * Windows XP operating system Service Pack 1 (SP1) >= 2196
1415 * Windows XP and Windows Server 2003 >= 2196
1416 * Windows 2000 >= 1382
1417 * Windows NT 4.0 >= 1381
1418 *
1419 * From testing:
1420 * Windows Server 2022 => 10.0 (20348)
1421 */
1422 uint32 BuildNumber;
1423 uint32 PlatformId;
1424 [subcontext(0),subcontext_size(256)] nstring CSDVersion;
1425 uint16 ServicePackMajor;
1426 uint16 ServicePackMinor;
1427 netr_SuiteMask SuiteMask;
1428 netr_ProductType ProductType;
1429 uint8 Reserved;
1430 } netr_OsVersionInfoEx;
1431
1432 typedef struct {
1433 /* these first 3 values come from the fact windows
1434 actually encodes this structure as a UNICODE_STRING
1435 - see MS-NRPC section 2.2.1.3.9 */
1436 /* 142 * 2 = 284 (length of structure "netr_OsVersionInfoEx") */
1437 [value(142)] uint3264 length;
1438 [value(0)] uint3264 dummy;
1439 [value(142)] uint3264 size;
1440 [subcontext(0),subcontext_size(size*2)]
1441 netr_OsVersionInfoEx os;
1442 } netr_OsVersion;
1443
1444 typedef struct {
1445 /* value is 284 when info != os, otherwise 0 (for length and
1446 size) */
1447 [value(os == NULL ? 0 : 284)] uint16 length;
1448 [value(os == NULL ? 0 : 284)] uint16 size;
1449 netr_OsVersion *os;
1450 } netr_OsVersionContainer;
1451
1452 typedef struct {
1453 netr_LsaPolicyInformation lsa_policy;
1454 [string,charset(UTF16)] uint16 *dns_hostname;
1455 [string,charset(UTF16)] uint16 *sitename;
1456 [string,charset(UTF16)] uint16 *dummy1;
1457 [string,charset(UTF16)] uint16 *dummy2;
1458 [string,charset(UTF16)] uint16 *dummy3;
1459 [string,charset(UTF16)] uint16 *dummy4;
1460 netr_OsVersionContainer os_version;
1461 lsa_String os_name;
1462 lsa_String dummy_string3;
1463 lsa_String dummy_string4;
1464 netr_WorkstationFlags workstation_flags;
1465 kerb_EncTypes supported_enc_types;
1466 uint32 dummy_long3;
1467 uint32 dummy_long4;
1468 } netr_WorkstationInformation;
1469
1470 typedef union {
1471 [case(1)] netr_WorkstationInformation *workstation_info;
1472 [case(2)] netr_WorkstationInformation *lsa_policy_info;
1473 } netr_WorkstationInfo;
1474
1475 typedef struct {
1476 netr_TrustFlags flags;
1477 uint32 parent_index;
1478 lsa_TrustType trust_type;
1479 lsa_TrustAttributes trust_attributes;
1480 } netr_trust_extension_info;
1481
1482 typedef struct {
1483 /* these first 3 values come from the fact windows
1484 actually encodes this structure as a UNICODE_STRING
1485 - see MS-NRPC section 2.2.1.3.9 */
1486 [value(8)] uint3264 length;
1487 [value(0)] uint3264 dummy;
1488 [value(8)] uint3264 size;
1489 [subcontext(0),subcontext_size(size*2)]
1490 netr_trust_extension_info info;
1491 } netr_trust_extension;
1492
1493 typedef struct {
1494 /* value is 16 when info != NULL, otherwise 0 */
1495 [value(info == NULL ? 0 : 16)] uint16 length;
1496 [value(info == NULL ? 0 : 16)] uint16 size;
1497 netr_trust_extension *info;
1498 } netr_trust_extension_container;
1499
1500 typedef struct {
1501 lsa_StringLarge domainname;
1502 lsa_StringLarge dns_domainname;
1503 lsa_StringLarge dns_forestname;
1504 GUID domain_guid;
1505 dom_sid2 *domain_sid;
1506 netr_trust_extension_container trust_extension;
1507 lsa_StringLarge dummy_string2;
1508 lsa_StringLarge dummy_string3;
1509 lsa_StringLarge dummy_string4;
1510 uint32 dummy_long1;
1511 uint32 dummy_long2;
1512 uint32 dummy_long3;
1513 uint32 dummy_long4;
1514 } netr_OneDomainInfo;
1515
1516 typedef struct {
1517 netr_OneDomainInfo primary_domain;
1518 uint32 trusted_domain_count;
1519 [size_is(trusted_domain_count)] netr_OneDomainInfo *trusted_domains;
1520 netr_LsaPolicyInformation lsa_policy;
1521 lsa_StringLarge dns_hostname;
1522 lsa_StringLarge dummy_string2;
1523 lsa_StringLarge dummy_string3;
1524 lsa_StringLarge dummy_string4;
1525 netr_WorkstationFlags workstation_flags;
1526 kerb_EncTypes supported_enc_types;
1527 uint32 dummy_long3;
1528 uint32 dummy_long4;
1529 } netr_DomainInformation;
1530
1531 typedef union {
1532 [case(1)] netr_DomainInformation *domain_info;
1533 [case(2)] netr_LsaPolicyInformation *lsa_policy_info;
1534 } netr_DomainInfo;
1535
1536 [public] NTSTATUS netr_LogonGetDomainInfo(
1537 [in] [string,charset(UTF16)] uint16 *server_name,
1538 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1539 [in,ref] netr_Authenticator *credential,
1540 [in,out,ref] netr_Authenticator *return_authenticator,
1541 [in] uint32 level,
1542 [in,ref,switch_is(level)] netr_WorkstationInfo *query,
1543 [out,ref,switch_is(level)] netr_DomainInfo *info
1544 );
1545
1546 /*****************/
1547 /* Function 0x1e */
1548
1549 /* [MS-NRPC] 2.2.1.3.8 NL_PASSWORD_VERSION */
1550
1551 /* someone's birthday ? */
1552 const int NETLOGON_PASSWORD_VERSION_NUMBER_PRESENT = 0x02231968;
1553
1554 typedef struct {
1555 uint32 ReservedField;
1556 uint32 PasswordVersionNumber;
1557 uint32 PasswordVersionPresent;
1558 } NL_PASSWORD_VERSION;
1559
1560 typedef [flag(NDR_PAHEX)] struct {
1561 uint8 data[512];
1562 uint32 length;
1563 } netr_CryptPassword;
1564
1565 NTSTATUS netr_ServerPasswordSet2(
1566 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1567 [in] [string,charset(UTF16)] uint16 *account_name,
1568 [in] netr_SchannelType secure_channel_type,
1569 [in] [string,charset(UTF16)] uint16 *computer_name,
1570 [in,ref] netr_Authenticator *credential,
1571 [out,ref] netr_Authenticator *return_authenticator,
1572 [in,ref] netr_CryptPassword *new_password
1573 );
1574
1575 /****************/
1576 /* Function 0x1f */
1577 NTSTATUS netr_ServerPasswordGet(
1578 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1579 [in] [string,charset(UTF16)] uint16 *account_name,
1580 [in] netr_SchannelType secure_channel_type,
1581 [in] [string,charset(UTF16)] uint16 *computer_name,
1582 [in,ref] netr_Authenticator *credential,
1583 [out,ref] netr_Authenticator *return_authenticator,
1584 [out,ref] samr_Password *password
1585 );
1586
1587 typedef [public] enum {
1588 SendToSamUpdatePassword = 0,
1589 SendToSamResetBadPasswordCount = 1,
1590 SendToSamUpdatePasswordForward = 2,
1591 SendToSamUpdateLastLogonTimestamp = 3,
1592 SendToSamResetSmartCardPassword = 4
1593 } netr_SendToSamType;
1594
1595 typedef struct {
1596 GUID guid;
1597 } netr_SendToSamResetBadPasswordCount;
1598
1599 typedef [nodiscriminant, public,switch_type(netr_SendToSamType)] union {
1600 /* TODO Implement other SendToSam message types
1601 * [case(SendToSamUpdatePassword)] netr_SendToSamUpdatePassword ...; */
1602 [case(SendToSamResetBadPasswordCount)] netr_SendToSamResetBadPasswordCount reset_bad_password;
1603 /*
1604 * [case(SendToSamUpdatePasswordForward)] netrSendToSamUpdatePasswordForward ...;
1605 * [case(SendToSamUpdateLastLogonTimestamp)] netrSendToSamUpdateLastLogonTimestamp ...;
1606 * [case(SendToSamResetSmartCardPassword)] netrSendToSamResetSmartCardPassword ...;
1607 */
1608 [default];
1609 } netr_SendToSamMessage;
1610
1611 typedef [public] struct {
1612 netr_SendToSamType message_type;
1613 uint32 message_size;
1614 [switch_is(message_type), subcontext(0), subcontext_size(message_size)] netr_SendToSamMessage message;
1615 } netr_SendToSamBase;
1616
1617 /****************/
1618 /* Function 0x20 */
1619 NTSTATUS netr_NetrLogonSendToSam(
1620 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1621 [in] [string,charset(UTF16)] uint16 *computer_name,
1622 [in,ref] netr_Authenticator *credential,
1623 [out,ref] netr_Authenticator *return_authenticator,
1624 [in,ref] [size_is(buffer_len)] uint8 *opaque_buffer,
1625 [in] uint32 buffer_len
1626 );
1627
1628 /****************/
1629 /* Function 0x21 */
1630 typedef struct {
1631 uint32 count;
1632 [size_is(count)] lsa_String *sitename;
1633 } netr_DsRAddressToSitenamesWCtr;
1634
1635 typedef struct {
1636 [size_is(size)] uint8 *buffer;
1637 uint32 size;
1638 } netr_DsRAddress;
1639
1640 WERROR netr_DsRAddressToSitenamesW(
1641 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1642 [in] [range(0,32000)] uint32 count,
1643 [in] [size_is(count)] [ref] netr_DsRAddress *addresses,
1644 [out] [ref] netr_DsRAddressToSitenamesWCtr **ctr
1645 );
1646
1647 /****************/
1648 /* Function 0x22 */
1649 WERROR netr_DsRGetDCNameEx2(
1650 [in,unique] [string,charset(UTF16)] uint16 *server_unc,
1651 [in,unique] [string,charset(UTF16)] uint16 *client_account,
1652 [in] samr_AcctFlags mask,
1653 [in,unique] [string,charset(UTF16)] uint16 *domain_name,
1654 [in,unique] GUID *domain_guid,
1655 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1656 [in] netr_DsRGetDCName_flags flags,
1657 [out,ref] netr_DsRGetDCNameInfo **info
1658 );
1659
1660 /****************/
1661 /* Function 0x23 */
1662 [todo] WERROR netr_NETRLOGONGETTIMESERVICEPARENTDOMAIN();
1663
1664 /****************/
1665 /* Function 0x24 */
1666
1667 typedef [public] struct {
1668 [string,charset(UTF16)] uint16 *netbios_name;
1669 [string,charset(UTF16)] uint16 *dns_name;
1670 netr_TrustFlags trust_flags;
1671 uint32 parent_index;
1672 lsa_TrustType trust_type;
1673 lsa_TrustAttributes trust_attributes;
1674 dom_sid2 *sid;
1675 GUID guid;
1676 } netr_DomainTrust;
1677
1678 typedef [public] struct {
1679 uint32 count;
1680 [size_is(count)] netr_DomainTrust *array;
1681 } netr_DomainTrustList;
1682
1683 WERROR netr_NetrEnumerateTrustedDomainsEx(
1684 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1685 [out,ref] netr_DomainTrustList *dom_trust_list
1686 );
1687
1688 /****************/
1689 /* Function 0x25 */
1690 typedef struct {
1691 uint32 count;
1692 [size_is(count)] lsa_String *sitename;
1693 [size_is(count)] lsa_String *subnetname;
1694 } netr_DsRAddressToSitenamesExWCtr;
1695
1696 WERROR netr_DsRAddressToSitenamesExW(
1697 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1698 [in] [range(0,32000)] uint32 count,
1699 [in] [size_is(count)] [ref] netr_DsRAddress *addresses,
1700 [out] [ref] netr_DsRAddressToSitenamesExWCtr **ctr
1701 );
1702
1703 /****************/
1704 /* Function 0x26 */
1705
1706 typedef struct {
1707 uint32 num_sites;
1708 [size_is(num_sites)] [unique] lsa_String *sites;
1709 } DcSitesCtr;
1710
1711 WERROR netr_DsrGetDcSiteCoverageW(
1712 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1713 [out,ref] DcSitesCtr **ctr
1714 );
1715
1716 /****************/
1717 /* Function 0x27 */
1718 typedef [public,bitmap32bit] bitmap {
1719 /* Request MUST be passed to the domain controller at the root of the forest. */
1720 NETLOGON_SAMLOGON_FLAG_PASS_TO_FOREST_ROOT = 0x00000001,
1721 /* Request MUST be passed to the DC at the end of the first hop over a cross-forest trust. */
1722 NETLOGON_SAMLOGON_FLAG_PASS_CROSS_FOREST_HOP = 0x00000002,
1723 /* Request was passed by an RODC to a DC in a different domain. */
1724 NETLOGON_SAMLOGON_FLAG_RODC_TO_OTHER_DOMAIN = 0x00000004,
1725 /* Request is an NTLM authentication package request passed by an RODC. */
1726 NETLOGON_SAMLOGON_FLAG_RODC_NTLM_REQUEST = 0x00000008
1727 } netr_LogonSamLogon_flags;
1728
1729 NTSTATUS netr_LogonSamLogonEx(
1730 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1731 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1732 [in] netr_LogonInfoClass logon_level,
1733 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
1734 [in] uint16 validation_level,
1735 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
1736 [out,ref] uint8 *authoritative,
1737 [in,out,ref] netr_LogonSamLogon_flags *flags
1738 );
1739
1740 /****************/
1741 /* Function 0x28 */
1742
1743 WERROR netr_DsrEnumerateDomainTrusts(
1744 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1745 [in] netr_TrustFlags trust_flags,
1746 [out,ref] netr_DomainTrustList *trusts
1747 );
1748
1749
1750 /****************/
1751 /* Function 0x29 */
1752 WERROR netr_DsrDeregisterDNSHostRecords(
1753 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1754 [in,unique] [string,charset(UTF16)] uint16 *domain,
1755 [in,unique] GUID *domain_guid,
1756 [in,unique] GUID *dsa_guid,
1757 [in,ref] [string,charset(UTF16)] uint16 *dns_host
1758 );
1759
1760 /****************/
1761 /* Function 0x2a */
1762 NTSTATUS netr_ServerTrustPasswordsGet(
1763 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1764 [in] [string,charset(UTF16)] uint16 *account_name,
1765 [in] netr_SchannelType secure_channel_type,
1766 [in] [string,charset(UTF16)] uint16 *computer_name,
1767 [in,ref] netr_Authenticator *credential,
1768 [out,ref] netr_Authenticator *return_authenticator,
1769 [out,ref] samr_Password *new_owf_password,
1770 [out,ref] samr_Password *old_owf_password
1771 );
1772
1773 /****************/
1774 /* Function 0x2b */
1775
1776 const int DS_GFTI_UPDATE_TDO = 0x1;
1777
1778 WERROR netr_DsRGetForestTrustInformation(
1779 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1780 [in,unique] [string,charset(UTF16)] uint16 *trusted_domain_name,
1781 [in] uint32 flags,
1782 [out,ref] lsa_ForestTrustInformation **forest_trust_info
1783 );
1784
1785 /****************/
1786 /* Function 0x2c */
1787 NTSTATUS netr_GetForestTrustInformation(
1788 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1789 [in,ref] [string,charset(UTF16)] uint16 *computer_name,
1790 [in,ref] netr_Authenticator *credential,
1791 [out,ref] netr_Authenticator *return_authenticator,
1792 [in] uint32 flags,
1793 [out,ref] lsa_ForestTrustInformation **forest_trust_info
1794 );
1795
1796 /****************/
1797 /* Function 0x2d */
1798
1799 /* this is the ADS variant. I don't yet know what the "flags" are for */
1800 NTSTATUS netr_LogonSamLogonWithFlags(
1801 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1802 [in,unique] [string,charset(UTF16)] uint16 *computer_name,
1803 [in,unique] netr_Authenticator *credential,
1804 [in,out,unique] netr_Authenticator *return_authenticator,
1805 [in] netr_LogonInfoClass logon_level,
1806 [in,ref] [switch_is(logon_level)] netr_LogonLevel *logon,
1807 [in] uint16 validation_level,
1808 [out,ref] [switch_is(validation_level)] netr_Validation *validation,
1809 [out,ref] uint8 *authoritative,
1810 [in,out,ref] netr_LogonSamLogon_flags *flags
1811 );
1812
1813 /****************/
1814 /* Function 0x2e */
1815
1816 typedef struct {
1817 uint32 count;
1818 [size_is(count)] uint32 *data;
1819 uint32 entry_count;
1820 [size_is(count)] lsa_String *entries;
1821 } netr_TrustInfo;
1822
1823 NTSTATUS netr_ServerGetTrustInfo(
1824 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1825 [in,ref] [string,charset(UTF16)] uint16 *account_name,
1826 [in] netr_SchannelType secure_channel_type,
1827 [in,ref] [string,charset(UTF16)] uint16 *computer_name,
1828 [in,ref] netr_Authenticator *credential,
1829 [out,ref] netr_Authenticator *return_authenticator,
1830 [out,ref] samr_Password *new_owf_password,
1831 [out,ref] samr_Password *old_owf_password,
1832 [out,ref] netr_TrustInfo **trust_info
1833 );
1834
1835 /****************/
1836 /* Function 0x2f */
1837
1838 NTSTATUS netr_Unused47(void);
1839
1840
1841 /****************/
1842 /* Function 0x30 */
1843
1844 typedef enum {
1845 NlDnsLdapAtSite = 22,
1846 NlDnsGcAtSite = 25,
1847 NlDnsDsaCname = 28,
1848 NlDnsKdcAtSite = 30,
1849 NlDnsDcAtSite = 32,
1850 NlDnsRfc1510KdcAtSite = 34,
1851 NlDnsGenericGcAtSite = 36
1852 } netr_DnsType;
1853
1854 typedef enum {
1855 NlDnsInfoTypeNone = 0,
1856 NlDnsDomainName = 1,
1857 NlDnsDomainNameAlias = 2,
1858 NlDnsForestName = 3,
1859 NlDnsForestNameAlias = 4,
1860 NlDnsNdncDomainName = 5,
1861 NlDnsRecordName = 6
1862 } netr_DnsDomainInfoType;
1863
1864 typedef struct {
1865 netr_DnsType type;
1866 [string,charset(UTF16)] uint16 *dns_domain_info;
1867 netr_DnsDomainInfoType dns_domain_info_type;
1868 uint32 priority;
1869 uint32 weight;
1870 uint32 port;
1871 boolean32 dns_register;
1872 uint32 status;
1873 } NL_DNS_NAME_INFO;
1874
1875 typedef [public] struct {
1876 uint32 count;
1877 [size_is(count)] NL_DNS_NAME_INFO *names;
1878 } NL_DNS_NAME_INFO_ARRAY;
1879
1880 NTSTATUS netr_DsrUpdateReadOnlyServerDnsRecords(
1881 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1882 [in,ref] [string,charset(UTF16)] uint16 *computer_name,
1883 [in, ref] netr_Authenticator *credential,
1884 [out,ref] netr_Authenticator *return_authenticator,
1885 [in,unique] [string,charset(UTF16)] uint16 *site_name,
1886 [in] uint32 dns_ttl,
1887 [in,out,ref] NL_DNS_NAME_INFO_ARRAY *dns_names
1888 );
1889
1890 [todo] void netr_Opnum49NotUsedOnWire(void);
1891 [todo] void netr_Opnum50NotUsedOnWire(void);
1892 [todo] void netr_Opnum51NotUsedOnWire(void);
1893 [todo] void netr_Opnum52NotUsedOnWire(void);
1894 [todo] void netr_Opnum53NotUsedOnWire(void);
1895
1896 /**********************/
1897 /* Function 0x36 (54) */
1898 /* from wireshark: */
1899 /* This is documented as 49 (0x31) but it's 54) */
1900 [todo] NTSTATUS netr_ChainSetClientAttributes();
1901
1902 [todo] void netr_Opnum55NotUsedOnWire(void);
1903 [todo] void netr_Opnum56NotUsedOnWire(void);
1904 [todo] void netr_Opnum57NotUsedOnWire(void);
1905 [todo] void netr_Opnum58NotUsedOnWire(void);
1906
1907 /*****************/
1908 /* Function 0x3b (59) */
1909 [public] NTSTATUS netr_ServerAuthenticateKerberos(
1910 [in,unique] [string,charset(UTF16)] uint16 *server_name,
1911 [in] [string,charset(UTF16)] uint16 *account_name,
1912 [in] netr_SchannelType account_type,
1913 [in] [string,charset(UTF16)] uint16 *computer_name,
1914 [in,out,ref] netr_NegotiateFlags *negotiate_flags,
1915 [out,ref] uint32 *rid
1916 );
1917 }
GSS-enabled samba4