778 lines
19 KiB
C
778 lines
19 KiB
C
|
/*++
|
|||
|
|
|
|||
|
|
Copyright (c) 1992 Microsoft Corporation
|
|||
|
|
|
|||
|
|
Module Name:
|
|||
|
|
|
|||
|
|
samisrv.h
|
|||
|
|
|
|||
|
|
Abstract:
|
|||
|
|
|
|||
|
|
This file contain private routines for use by Trusted SAM clients
|
|||
|
|
which live in the same process as the SAM server.
|
|||
|
|
|
|||
|
|
Included in these routines are services for freeing buffers returned
|
|||
|
|
by RPC server stub routines (SamrXxx() routines).
|
|||
|
|
|
|||
|
|
Author:
|
|||
|
|
|
|||
|
|
Cliff Van Dyke (CliffV) 26-Feb-1992
|
|||
|
|
|
|||
|
|
Environment:
|
|||
|
|
|
|||
|
|
User Mode - Win32
|
|||
|
|
|
|||
|
|
Revision History:
|
|||
|
|
|
|||
|
|
|
|||
|
|
--*/
|
|||
|
|
|
|||
|
|
#ifndef _SAMISRV_
|
|||
|
|
#define _SAMISRV_
|
|||
|
|
|
|||
|
|
/////////////////////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// Data types used by SAM and Netlogon for database replication //
|
|||
|
|
// //
|
|||
|
|
/////////////////////////////////////////////////////////////////////////////
|
|||
|
|
|
|||
|
|
typedef enum _SECURITY_DB_TYPE {
|
|||
|
|
SecurityDbSam = 1,
|
|||
|
|
SecurityDbLsa
|
|||
|
|
} SECURITY_DB_TYPE, *PSECURITY_DB_TYPE;
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// These structures are used to get and set private data. Note that
|
|||
|
|
// DataType must be the first field of every such structure.
|
|||
|
|
//
|
|||
|
|
|
|||
|
|
typedef enum _SAMI_PRIVATE_DATA_TYPE {
|
|||
|
|
SamPrivateDataNextRid = 1,
|
|||
|
|
SamPrivateDataPassword
|
|||
|
|
} SAMI_PRIVATE_DATA_TYPE, *PSAMI_PRIVATE_DATA_TYPE;
|
|||
|
|
|
|||
|
|
|
|||
|
|
typedef struct _SAMI_PRIVATE_DATA_NEXTRID_TYPE {
|
|||
|
|
SAMI_PRIVATE_DATA_TYPE DataType;
|
|||
|
|
ULONG NextRid;
|
|||
|
|
} SAMI_PRIVATE_DATA_NEXTRID_TYPE, *PSAMI_PRIVATE_DATA_NEXTRID_TYPE;
|
|||
|
|
|
|||
|
|
typedef struct _SAMI_PRIVATE_DATA_PASSWORD_TYPE {
|
|||
|
|
SAMI_PRIVATE_DATA_TYPE DataType;
|
|||
|
|
UNICODE_STRING CaseInsensitiveDbcs;
|
|||
|
|
ENCRYPTED_LM_OWF_PASSWORD CaseInsensitiveDbcsBuffer;
|
|||
|
|
UNICODE_STRING CaseSensitiveUnicode;
|
|||
|
|
ENCRYPTED_NT_OWF_PASSWORD CaseSensitiveUnicodeBuffer;
|
|||
|
|
UNICODE_STRING LmPasswordHistory;
|
|||
|
|
UNICODE_STRING NtPasswordHistory;
|
|||
|
|
} SAMI_PRIVATE_DATA_PASSWORD_TYPE, *PSAMI_PRIVATE_DATA_PASSWORD_TYPE;
|
|||
|
|
|
|||
|
|
|
|||
|
|
typedef struct _SAMP_UNICODE_STRING_RELATIVE {
|
|||
|
|
USHORT Length;
|
|||
|
|
USHORT MaximumLength;
|
|||
|
|
ULONG Buffer; // note buffer is really an offset
|
|||
|
|
} SAMP_UNICODE_STRING_RELATIVE , *PSAMP_UNICODE_STRING_RELATIVE;
|
|||
|
|
|
|||
|
|
typedef struct _SAMI_PRIVATE_DATA_PASSWORD_TYPE_RELATIVE {
|
|||
|
|
SAMI_PRIVATE_DATA_TYPE DataType;
|
|||
|
|
SAMP_UNICODE_STRING_RELATIVE CaseInsensitiveDbcs;
|
|||
|
|
ENCRYPTED_LM_OWF_PASSWORD CaseInsensitiveDbcsBuffer;
|
|||
|
|
SAMP_UNICODE_STRING_RELATIVE CaseSensitiveUnicode;
|
|||
|
|
ENCRYPTED_NT_OWF_PASSWORD CaseSensitiveUnicodeBuffer;
|
|||
|
|
SAMP_UNICODE_STRING_RELATIVE LmPasswordHistory;
|
|||
|
|
SAMP_UNICODE_STRING_RELATIVE NtPasswordHistory;
|
|||
|
|
} SAMI_PRIVATE_DATA_PASSWORD_RELATIVE_TYPE, *PSAMI_PRIVATE_DATA_PASSWORD_RELATIVE_TYPE;
|
|||
|
|
|
|||
|
|
#define SAM_CLEARTEXT_CREDENTIAL_NAME L"CLEARTEXT"
|
|||
|
|
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISetPasswordInfoOnPdc(
|
|||
|
|
IN SAMPR_HANDLE SamDomainHandle,
|
|||
|
|
IN PUCHAR OpaqueBuffer,
|
|||
|
|
IN ULONG BufferLength
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIResetBadPwdCountOnPdc(
|
|||
|
|
IN SAMPR_HANDLE SamUserHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
//////////////////////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// //
|
|||
|
|
// Flag Definitions for SamIGetUserLogonInformation //
|
|||
|
|
// //
|
|||
|
|
// //
|
|||
|
|
//////////////////////////////////////////////////////////////////////////////
|
|||
|
|
|
|||
|
|
#define SAM_GET_MEMBERSHIPS_NO_GC ((ULONG)0x00000001)
|
|||
|
|
#define SAM_GET_MEMBERSHIPS_TWO_PHASE ((ULONG)0x00000002)
|
|||
|
|
#define SAM_GET_MEMBERSHIPS_MIXED_DOMAIN ((ULONG)0x00000004)
|
|||
|
|
#define SAM_NO_MEMBERSHIPS ((ULONG)0x00000008)
|
|||
|
|
#define SAM_OPEN_BY_ALTERNATE_ID ((ULONG)0x00000010)
|
|||
|
|
#define SAM_OPEN_BY_UPN ((ULONG)0x00000020)
|
|||
|
|
#define SAM_OPEN_BY_SPN ((ULONG)0x00000040)
|
|||
|
|
#define SAM_OPEN_BY_SID ((ULONG)0x00000080)
|
|||
|
|
#define SAM_OPEN_BY_GUID ((ULONG)0x00000100)
|
|||
|
|
#define SAM_OPEN_BY_UPN_OR_ACCOUNTNAME ((ULONG)0x00000200)
|
|||
|
|
|
|||
|
|
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// Data types used by SamIUpdateLogonStatistics //
|
|||
|
|
// //
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
typedef enum _SAM_CLIENT_INFO_ENUM
|
|||
|
|
{
|
|||
|
|
SamClientNoInformation = 0,
|
|||
|
|
SamClientIpAddr = 1
|
|||
|
|
|
|||
|
|
} SAM_CLIENT_INFO_TYPE, *PSAM_CLIENT_INFO_TYPE;
|
|||
|
|
|
|||
|
|
typedef struct _SAM_CLIENT_INFO
|
|||
|
|
{
|
|||
|
|
SAM_CLIENT_INFO_TYPE Type;
|
|||
|
|
union {
|
|||
|
|
ULONG IpAddr; // corresponds to type SamClientIpAddr
|
|||
|
|
} Data;
|
|||
|
|
} SAM_CLIENT_INFO, *PSAM_CLIENT_INFO;
|
|||
|
|
|
|||
|
|
typedef struct _SAM_LOGON_STATISTICS
|
|||
|
|
{
|
|||
|
|
ULONG StatisticsToApply;
|
|||
|
|
USHORT BadPasswordCount;
|
|||
|
|
USHORT LogonCount;
|
|||
|
|
LARGE_INTEGER LastLogon;
|
|||
|
|
LARGE_INTEGER LastLogoff;
|
|||
|
|
UNICODE_STRING Workstation;
|
|||
|
|
SAM_CLIENT_INFO ClientInfo;
|
|||
|
|
|
|||
|
|
} SAM_LOGON_STATISTICS, *PSAM_LOGON_STATISTICS;
|
|||
|
|
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// Data types used by Reverse Membership Query Routines //
|
|||
|
|
// //
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
|
|||
|
|
typedef struct _SID_AND_ATTRIBUTES_LIST {
|
|||
|
|
ULONG Count;
|
|||
|
|
PSID_AND_ATTRIBUTES SidAndAttributes;
|
|||
|
|
} SID_AND_ATTRIBUTES_LIST , *PSID_AND_ATTRIBUTES_LIST;
|
|||
|
|
|
|||
|
|
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// Data types used by Promotion/Demotion operations //
|
|||
|
|
// //
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// These flags indicate what type of install
|
|||
|
|
//
|
|||
|
|
#define SAMP_PROMOTE_ENTERPRISE ((ULONG)0x00000001)
|
|||
|
|
#define SAMP_PROMOTE_DOMAIN ((ULONG)0x00000002)
|
|||
|
|
#define SAMP_PROMOTE_REPLICA ((ULONG)0x00000004)
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// When a new domain, these flags indicate how to seed the
|
|||
|
|
// initial security pricipals in the domain
|
|||
|
|
//
|
|||
|
|
#define SAMP_PROMOTE_UPGRADE ((ULONG)0x00000008)
|
|||
|
|
#define SAMP_PROMOTE_MIGRATE ((ULONG)0x00000010)
|
|||
|
|
#define SAMP_PROMOTE_CREATE ((ULONG)0x00000020)
|
|||
|
|
#define SAMP_PROMOTE_ALLOW_ANON ((ULONG)0x00000040)
|
|||
|
|
#define SAMP_PROMOTE_DFLT_REPAIR_PWD ((ULONG)0x00000080)
|
|||
|
|
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Flags for demote
|
|||
|
|
//
|
|||
|
|
#define SAMP_DEMOTE_STANDALONE ((ULONG)0x00000040)
|
|||
|
|
#define SAMP_DEMOTE_MEMBER ((ULONG)0x00000080)
|
|||
|
|
|
|||
|
|
// unused
|
|||
|
|
#define SAMP_DEMOTE_LAST_DOMAIN ((ULONG)0x00000100)
|
|||
|
|
|
|||
|
|
#define SAMP_TEMP_UPGRADE ((ULONG)0x00000200)
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// This flag is not passed into SamIPromote; rather it is used
|
|||
|
|
// to trigger new NT5 account creations on gui mode setup
|
|||
|
|
// of NT5 to NT5 upgrades
|
|||
|
|
//
|
|||
|
|
#define SAMP_PROMOTE_INTERNAL_UPGRADE ((ULONG)0x00000400)
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// The following prototypes are usable throughout the process that SAM //
|
|||
|
|
// resides in. This may include calls by LAN Manager code that is not //
|
|||
|
|
// part of SAM but is in the same process as SAM. //
|
|||
|
|
// //
|
|||
|
|
///////////////////////////////////////////////////////////////////////////////
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIConnect(
|
|||
|
|
IN PSAMPR_SERVER_NAME ServerName,
|
|||
|
|
OUT SAMPR_HANDLE *ServerHandle,
|
|||
|
|
IN ACCESS_MASK DesiredAccess,
|
|||
|
|
IN BOOLEAN TrustedClient
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIAccountRestrictions(
|
|||
|
|
IN SAM_HANDLE UserHandle,
|
|||
|
|
IN PUNICODE_STRING LogonWorkstation,
|
|||
|
|
IN PUNICODE_STRING Workstations,
|
|||
|
|
IN PLOGON_HOURS LogonHours,
|
|||
|
|
OUT PLARGE_INTEGER LogoffTime,
|
|||
|
|
OUT PLARGE_INTEGER KickoffTime
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIUpdateLogonStatistics(
|
|||
|
|
IN SAM_HANDLE UserHandle,
|
|||
|
|
IN PSAM_LOGON_STATISTICS LogonStats
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamICreateAccountByRid(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN SAM_ACCOUNT_TYPE AccountType,
|
|||
|
|
IN ULONG RelativeId,
|
|||
|
|
IN PRPC_UNICODE_STRING AccountName,
|
|||
|
|
IN ACCESS_MASK DesiredAccess,
|
|||
|
|
OUT SAMPR_HANDLE *AccountHandle,
|
|||
|
|
OUT ULONG *ConflictingAccountRid
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetSerialNumberDomain(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
OUT PLARGE_INTEGER ModifiedCount,
|
|||
|
|
OUT PLARGE_INTEGER CreationTime
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISetSerialNumberDomain(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN PLARGE_INTEGER ModifiedCount,
|
|||
|
|
IN PLARGE_INTEGER CreationTime,
|
|||
|
|
IN BOOLEAN StartOfFullSync
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetPrivateData(
|
|||
|
|
IN SAMPR_HANDLE SamHandle,
|
|||
|
|
IN PSAMI_PRIVATE_DATA_TYPE PrivateDataType,
|
|||
|
|
OUT PBOOLEAN SensitiveData,
|
|||
|
|
OUT PULONG DataLength,
|
|||
|
|
OUT PVOID *Data
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISetPrivateData(
|
|||
|
|
IN SAMPR_HANDLE SamHandle,
|
|||
|
|
IN ULONG DataLength,
|
|||
|
|
IN PVOID Data
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISetAuditingInformation(
|
|||
|
|
IN PPOLICY_AUDIT_EVENTS_INFO PolicyAuditEventsInfo
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamINotifyDelta (
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN SECURITY_DB_DELTA_TYPE DeltaType,
|
|||
|
|
IN SECURITY_DB_OBJECT_TYPE ObjectType,
|
|||
|
|
IN ULONG ObjectRid,
|
|||
|
|
IN PUNICODE_STRING ObjectName,
|
|||
|
|
IN ULONG ReplicateImmediately,
|
|||
|
|
IN PSAM_DELTA_DATA DeltaData OPTIONAL
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIEnumerateAccountRids(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN ULONG AccountTypesMask,
|
|||
|
|
IN ULONG StartingRid,
|
|||
|
|
IN ULONG PreferedMaximumLength,
|
|||
|
|
OUT PULONG ReturnCount,
|
|||
|
|
OUT PULONG *AccountRids
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetUserLogonInformation(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN ULONG Flags,
|
|||
|
|
IN PUNICODE_STRING AccountName,
|
|||
|
|
OUT PSAMPR_USER_INFO_BUFFER * Buffer,
|
|||
|
|
OUT PSID_AND_ATTRIBUTES_LIST ReverseMembership,
|
|||
|
|
OUT OPTIONAL SAMPR_HANDLE * UserHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetUserLogonInformationEx(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN ULONG Flags,
|
|||
|
|
IN PUNICODE_STRING AccountName,
|
|||
|
|
IN ULONG WhichFields,
|
|||
|
|
OUT PSAMPR_USER_INFO_BUFFER * Buffer,
|
|||
|
|
OUT PSID_AND_ATTRIBUTES_LIST ReverseMembership,
|
|||
|
|
OUT OPTIONAL SAMPR_HANDLE * UserHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetUserLogonInformation2(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN ULONG Flags,
|
|||
|
|
IN PUNICODE_STRING AccountName,
|
|||
|
|
IN ULONG WhichFields,
|
|||
|
|
IN ULONG ExtendedFields,
|
|||
|
|
OUT PUSER_INTERNAL6_INFORMATION * Buffer,
|
|||
|
|
OUT PSID_AND_ATTRIBUTES_LIST ReverseMembership,
|
|||
|
|
OUT OPTIONAL SAMPR_HANDLE * UserHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetResourceGroupMembershipsTransitive(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN PSAMPR_PSID_ARRAY SidArray,
|
|||
|
|
IN ULONG Flags,
|
|||
|
|
OUT PSAMPR_PSID_ARRAY * Membership
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetAliasMembership(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN PSAMPR_PSID_ARRAY SidArray,
|
|||
|
|
OUT PSAMPR_ULONG_ARRAY Membership
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIOpenUserByAlternateId(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN ACCESS_MASK DesiredAccess,
|
|||
|
|
IN PUNICODE_STRING AlternateId,
|
|||
|
|
OUT SAMPR_HANDLE *UserHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIOpenAccount(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN ULONG AccountRid,
|
|||
|
|
IN SECURITY_DB_OBJECT_TYPE ObjectType,
|
|||
|
|
OUT SAMPR_HANDLE *AccountHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIChangePasswordForeignUser(
|
|||
|
|
IN PUNICODE_STRING UserName,
|
|||
|
|
IN PUNICODE_STRING NewPassword,
|
|||
|
|
IN OPTIONAL HANDLE ClientToken,
|
|||
|
|
IN ACCESS_MASK DesiredAccess
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIChangePasswordForeignUser2(
|
|||
|
|
IN PSAM_CLIENT_INFO ClientInfo, OPTIONAL
|
|||
|
|
IN PUNICODE_STRING UserName,
|
|||
|
|
IN PUNICODE_STRING NewPassword,
|
|||
|
|
IN OPTIONAL HANDLE ClientToken,
|
|||
|
|
IN ACCESS_MASK DesiredAccess
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISetPasswordForeignUser(
|
|||
|
|
IN PUNICODE_STRING UserName,
|
|||
|
|
IN PUNICODE_STRING NewPassword,
|
|||
|
|
IN HANDLE ClientToken
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISetPasswordForeignUser2(
|
|||
|
|
IN PSAM_CLIENT_INFO ClientInfo, OPTIONAL
|
|||
|
|
IN PUNICODE_STRING UserName,
|
|||
|
|
IN PUNICODE_STRING NewPassword,
|
|||
|
|
IN HANDLE ClientToken
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIPromote(
|
|||
|
|
IN ULONG PromoteFlags,
|
|||
|
|
IN PPOLICY_PRIMARY_DOMAIN_INFO NewPrimaryDomainInfo OPTIONAL,
|
|||
|
|
IN PUNICODE_STRING AdminPassword OPTIONAL,
|
|||
|
|
IN PUNICODE_STRING SafeModeAdminPassword OPTIONAL
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIPromoteUndo(
|
|||
|
|
VOID
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIDemote(
|
|||
|
|
IN ULONG DemoteFlags,
|
|||
|
|
IN PPOLICY_ACCOUNT_DOMAIN_INFO NewAccountDomainInfo,
|
|||
|
|
IN LPWSTR AdminPassword OPTIONAL
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIDemoteUndo(
|
|||
|
|
VOID
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIReplaceDownlevelDatabase(
|
|||
|
|
IN PPOLICY_ACCOUNT_DOMAIN_INFO NewAccountDomainInfo,
|
|||
|
|
IN LPWSTR NewAdminPassword,
|
|||
|
|
OUT ULONG *ExtendedWinError OPTIONAL
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamILoadDownlevelDatabase(
|
|||
|
|
OUT ULONG *ExtendedWinError OPTIONAL
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIUnLoadDownlevelDatabase(
|
|||
|
|
OUT ULONG *ExtendedWinError OPTIONAL
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
BOOLEAN
|
|||
|
|
SamIMixedDomain(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIMixedDomain2(
|
|||
|
|
IN PSID DomainSid,
|
|||
|
|
OUT BOOLEAN * MixedDomain
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIDoFSMORoleChange(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamINotifyRoleChange(
|
|||
|
|
IN PSID DomainSid,
|
|||
|
|
IN DOMAIN_SERVER_ROLE NewRole
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIQueryServerRole(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
OUT DOMAIN_SERVER_ROLE *ServerRole
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIQueryServerRole2(
|
|||
|
|
IN PSID DomainSid,
|
|||
|
|
OUT DOMAIN_SERVER_ROLE *ServerRole
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamISameSite(
|
|||
|
|
OUT BOOLEAN * result
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Routines called by the NTDSA
|
|||
|
|
//
|
|||
|
|
typedef enum
|
|||
|
|
{
|
|||
|
|
SampNotifySiteChanged = 0
|
|||
|
|
|
|||
|
|
} SAMP_NOTIFY_SERVER_CHANGE;
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamINotifyServerDelta(
|
|||
|
|
IN SAMP_NOTIFY_SERVER_CHANGE Change
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
///////////////////////////////////////////////////////////////
|
|||
|
|
// //
|
|||
|
|
// The following functions are used to support in process //
|
|||
|
|
// client operations for upgrades from NT4. //
|
|||
|
|
// //
|
|||
|
|
///////////////////////////////////////////////////////////////
|
|||
|
|
|
|||
|
|
BOOLEAN
|
|||
|
|
SamINT4UpgradeInProgress(
|
|||
|
|
VOID
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIEnumerateInterdomainTrustAccountsForUpgrade(
|
|||
|
|
IN OUT PULONG EnumerationContext,
|
|||
|
|
OUT PSAMPR_ENUMERATION_BUFFER *Buffer,
|
|||
|
|
IN ULONG PreferredMaximumLength,
|
|||
|
|
OUT PULONG CountReturned
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetInterdomainTrustAccountPasswordsForUpgrade(
|
|||
|
|
IN ULONG AccountRid,
|
|||
|
|
OUT PUCHAR NtOwfPassword,
|
|||
|
|
OUT BOOLEAN *NtPasswordPresent,
|
|||
|
|
OUT PUCHAR LmOwfPassword,
|
|||
|
|
OUT BOOLEAN *LmPasswordPresent
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Values to pass in as Options SamIGCLookup*
|
|||
|
|
//
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Indicates to lookup by sid history as well
|
|||
|
|
//
|
|||
|
|
#define SAMP_LOOKUP_BY_SID_HISTORY 0x00000001
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Indicates to lookp by UPN as well
|
|||
|
|
//
|
|||
|
|
#define SAMP_LOOKUP_BY_UPN 0x00000002
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Values to be returned in Flags
|
|||
|
|
//
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Indicates the Sid was resolved by Sid History
|
|||
|
|
//
|
|||
|
|
#define SAMP_FOUND_BY_SID_HISTORY 0x00000001
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Indicates the name passed in was the sam account name (UPN)
|
|||
|
|
//
|
|||
|
|
#define SAMP_FOUND_BY_SAM_ACCOUNT_NAME 0x00000002
|
|||
|
|
|
|||
|
|
//
|
|||
|
|
// Indicates that entry was not resolved but does belong to an externally
|
|||
|
|
// trusted forest
|
|||
|
|
//
|
|||
|
|
#define SAMP_FOUND_XFOREST_REF 0x00000004
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGCLookupSids(
|
|||
|
|
IN ULONG cSids,
|
|||
|
|
IN PSID *SidArray,
|
|||
|
|
IN ULONG Options,
|
|||
|
|
OUT ULONG *Flags,
|
|||
|
|
OUT SID_NAME_USE *SidNameUse,
|
|||
|
|
OUT PSAMPR_RETURNED_USTRING_ARRAY Names
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGCLookupNames(
|
|||
|
|
IN ULONG cNames,
|
|||
|
|
IN PUNICODE_STRING Names,
|
|||
|
|
IN ULONG Options,
|
|||
|
|
OUT ULONG *Flags,
|
|||
|
|
OUT SID_NAME_USE *SidNameUse,
|
|||
|
|
OUT PSAMPR_PSID_ARRAY *SidArray
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
#ifdef __SECPKG_H__
|
|||
|
|
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIStorePrimaryCredentials(
|
|||
|
|
IN SAMPR_HANDLE UserHandle,
|
|||
|
|
IN PSECPKG_SUPPLEMENTAL_CRED Credentials
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIRetrievePrimaryCredentials(
|
|||
|
|
IN SAMPR_HANDLE UserHandle,
|
|||
|
|
IN PUNICODE_STRING PackageName,
|
|||
|
|
OUT PVOID * Credentials,
|
|||
|
|
OUT PULONG CredentialSize
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIStoreSupplementalCredentials(
|
|||
|
|
IN SAMPR_HANDLE UserHandle,
|
|||
|
|
IN PSECPKG_SUPPLEMENTAL_CRED Credentials
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIRetriveSupplementalCredentials(
|
|||
|
|
IN SAMPR_HANDLE UserHandle,
|
|||
|
|
IN PUNICODE_STRING PackageName,
|
|||
|
|
OUT PVOID * Credentials,
|
|||
|
|
OUT PULONG CredentialSize
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIRetriveAllSupplementalCredentials(
|
|||
|
|
IN SAMPR_HANDLE UserHandle,
|
|||
|
|
OUT PSECPKG_SUPPLEMENTAL_CRED * Credentials,
|
|||
|
|
OUT PULONG CredentialCount
|
|||
|
|
);
|
|||
|
|
#endif
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_SR_SECURITY_DESCRIPTOR (
|
|||
|
|
PSAMPR_SR_SECURITY_DESCRIPTOR Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_DOMAIN_INFO_BUFFER (
|
|||
|
|
PSAMPR_DOMAIN_INFO_BUFFER Source,
|
|||
|
|
DOMAIN_INFORMATION_CLASS Branch
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_ENUMERATION_BUFFER (
|
|||
|
|
PSAMPR_ENUMERATION_BUFFER Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_PSID_ARRAY (
|
|||
|
|
PSAMPR_PSID_ARRAY Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_ULONG_ARRAY (
|
|||
|
|
PSAMPR_ULONG_ARRAY Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_RETURNED_USTRING_ARRAY (
|
|||
|
|
PSAMPR_RETURNED_USTRING_ARRAY Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_GROUP_INFO_BUFFER (
|
|||
|
|
PSAMPR_GROUP_INFO_BUFFER Source,
|
|||
|
|
GROUP_INFORMATION_CLASS Branch
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_ALIAS_INFO_BUFFER (
|
|||
|
|
PSAMPR_ALIAS_INFO_BUFFER Source,
|
|||
|
|
ALIAS_INFORMATION_CLASS Branch
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_GET_MEMBERS_BUFFER (
|
|||
|
|
PSAMPR_GET_MEMBERS_BUFFER Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_USER_INFO_BUFFER (
|
|||
|
|
PSAMPR_USER_INFO_BUFFER Source,
|
|||
|
|
USER_INFORMATION_CLASS Branch
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_GET_GROUPS_BUFFER (
|
|||
|
|
PSAMPR_GET_GROUPS_BUFFER Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_SAMPR_DISPLAY_INFO_BUFFER (
|
|||
|
|
PSAMPR_DISPLAY_INFO_BUFFER Source,
|
|||
|
|
DOMAIN_DISPLAY_INFORMATION Branch
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFree_UserInternal6Information (
|
|||
|
|
PUSER_INTERNAL6_INFORMATION Source
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFreeSidAndAttributesList(
|
|||
|
|
IN PSID_AND_ATTRIBUTES_LIST List
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFreeSidArray(
|
|||
|
|
IN PSAMPR_PSID_ARRAY List
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIFreeVoid(
|
|||
|
|
IN PVOID ptr
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
|
|||
|
|
BOOLEAN
|
|||
|
|
SampUsingDsData();
|
|||
|
|
|
|||
|
|
BOOLEAN
|
|||
|
|
SamIAmIGC();
|
|||
|
|
|
|||
|
|
typedef enum _SAM_PERF_COUNTER_TYPE {
|
|||
|
|
MsvLogonCounter,
|
|||
|
|
KerbServerContextCounter,
|
|||
|
|
KdcAsReqCounter,
|
|||
|
|
KdcTgsReqCounter
|
|||
|
|
} SAM_PERF_COUNTER_TYPE, *PSAM_PERF_COUNTER_TYPE;
|
|||
|
|
|
|||
|
|
VOID
|
|||
|
|
SamIIncrementPerformanceCounter(
|
|||
|
|
IN SAM_PERF_COUNTER_TYPE CounterType
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
BOOLEAN SamIIsSetupInProgress(
|
|||
|
|
OUT BOOLEAN * fUpgrade
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
BOOLEAN SamIIsDownlevelDcUpgrade();
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetBootKeyInformation(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
OUT PSAMPR_BOOT_TYPE BootOptions
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIGetDefaultAdministratorName(
|
|||
|
|
OUT LPWSTR Name, OPTIONAL
|
|||
|
|
IN OUT ULONG *NameLength
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
BOOLEAN
|
|||
|
|
SamIIsExtendedSidMode(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamINetLogonPing(
|
|||
|
|
IN SAMPR_HANDLE DomainHandle,
|
|||
|
|
IN PUNICODE_STRING AccountName,
|
|||
|
|
OUT BOOLEAN *AccountExists,
|
|||
|
|
OUT PULONG UserAccountControl
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
NTSTATUS
|
|||
|
|
SamIUPNFromUserHandle(
|
|||
|
|
IN SAMPR_HANDLE UserHandle,
|
|||
|
|
OUT BOOLEAN *UPNDefaulted,
|
|||
|
|
OUT PUNICODE_STRING UPN
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
BOOLEAN
|
|||
|
|
SamIIsRebootAfterPromotion(
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
#endif // _SAMISRV_
|