192 lines
3.9 KiB
Plaintext
192 lines
3.9 KiB
Plaintext
|
//*********************************************
|
||
|
|
// *** Active Directory Service Provider: KDC
|
||
|
|
//*********************************************
|
||
|
|
#pragma classflags("forceupdate")
|
||
|
|
#pragma namespace ("\\\\.\\Root\\WMI")
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Active Directory: Kerberos") : amended,
|
||
|
|
Guid("{24db8964-e6bc-11d1-916a-0000f8045b04}"),
|
||
|
|
locale("MS\\0x409")]
|
||
|
|
class MSKdcTrace:EventTrace
|
||
|
|
{
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Kdc GetASTicket") : amended,
|
||
|
|
Guid("{50af5304-e6bc-11d1-916a-0000f8045b04}"),
|
||
|
|
DisplayName("GetASTicket"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class GetASTicket:MSKdcTrace
|
||
|
|
{
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Kdc GetASTicket") : amended,
|
||
|
|
EventType(1),
|
||
|
|
EventTypeName("Start"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class GetASTicket_Start:GetASTicket
|
||
|
|
{
|
||
|
|
[WmiDataId(1),
|
||
|
|
Description("KdcOption") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 KdcOption;
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Kdc GetASTicket") : amended,
|
||
|
|
EventType(2),
|
||
|
|
EventTypeName("End"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class GetASTicket_End:GetASTicket
|
||
|
|
{
|
||
|
|
[WmiDataId(1),
|
||
|
|
Description("Error Code") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 KerbErr;
|
||
|
|
[WmiDataId(2),
|
||
|
|
Description("Client Name") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string Client;
|
||
|
|
[WmiDataId(3),
|
||
|
|
Description("Server Name") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string Server;
|
||
|
|
[WmiDataId(4),
|
||
|
|
Description("Client Source Realm") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string RequestRealm;
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Kdc TGSRequest") : amended,
|
||
|
|
Guid("{c11cf384-e6bd-11d1-916a-0000f8045b04}"),
|
||
|
|
DisplayName("TGSRequest"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class TGSRequest:MSKdcTrace
|
||
|
|
{
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Kdc TGSRequest") : amended,
|
||
|
|
EventType(1),
|
||
|
|
EventTypeName("Start"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class TGSRequest_Start:TGSRequest
|
||
|
|
{
|
||
|
|
[WmiDataId(1),
|
||
|
|
Description("KdcOption") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 KdcOption;
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("Kdc TGSRequest") : amended,
|
||
|
|
EventType(2),
|
||
|
|
EventTypeName("End"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class TGSRequest_End:TGSRequest
|
||
|
|
{
|
||
|
|
[WmiDataId(1),
|
||
|
|
Description("Error Code") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 KerbErr;
|
||
|
|
[WmiDataId(2),
|
||
|
|
Description("Client Name") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string Client;
|
||
|
|
[WmiDataId(3),
|
||
|
|
Description("Server Name") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string ServerAcct;
|
||
|
|
[WmiDataId(4),
|
||
|
|
Description("Client Source Realm") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string ClientRealm;
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("KDC Password Change") : amended,
|
||
|
|
Guid("{a34d7f52-1dd0-434e-88a1-423e2a199946}"),
|
||
|
|
DisplayName("KdcChangePass"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class KdcChangePass:MSKdcTrace
|
||
|
|
{
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("KDC Password Change") : amended,
|
||
|
|
EventType(1),
|
||
|
|
EventTypeName("Start"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class KdcChangePass_Start:KdcChangePass
|
||
|
|
{
|
||
|
|
};
|
||
|
|
|
||
|
|
[Dynamic,
|
||
|
|
Description("KDC Password Change") : amended,
|
||
|
|
EventType(2),
|
||
|
|
EventTypeName("End"),
|
||
|
|
locale("MS\\0x409")
|
||
|
|
]
|
||
|
|
class KdcChangePass_End:KdcChangePass
|
||
|
|
{
|
||
|
|
[WmiDataId(1),
|
||
|
|
Description("KerbError code") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 KerbErr;
|
||
|
|
[WmiDataId(2),
|
||
|
|
Description("Extended Error Status") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 ExtErr;
|
||
|
|
[WmiDataId(3),
|
||
|
|
Description("Extended Error klininfo") : amended,
|
||
|
|
format("x"),
|
||
|
|
read]
|
||
|
|
uint32 Klininfo;
|
||
|
|
[WmiDataId(4),
|
||
|
|
Description("Client Realm") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string ClientRealm;
|
||
|
|
[WmiDataId(5),
|
||
|
|
Description("Account Name") : amended,
|
||
|
|
StringTermination("Counted"),
|
||
|
|
format("w"),
|
||
|
|
read]
|
||
|
|
string AccountName;
|
||
|
|
};
|
||
|
|
|