312 lines
8.2 KiB
C
312 lines
8.2 KiB
C
|
|
#ifndef _LSAWMI_H
|
|
#define _LSAWMI_H
|
|
|
|
/*++
|
|
|
|
copyright (c) 1998 Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
LSAWMI.H
|
|
|
|
Abstract:
|
|
|
|
Implement LSA server event trace by using WMI trace infrastructure.
|
|
|
|
Author:
|
|
|
|
16-March-1999 kumarp
|
|
|
|
Revision History:
|
|
|
|
|
|
--*/
|
|
|
|
|
|
#include <wmistr.h>
|
|
#include <evntrace.h>
|
|
|
|
|
|
|
|
extern ULONG LsapEventTraceFlag;
|
|
extern TRACEHANDLE LsapTraceRegistrationHandle;
|
|
extern TRACEHANDLE LsapTraceLoggerHandle;
|
|
|
|
|
|
//
|
|
// The following "typedef enum" actually is the index of
|
|
// TRACE_GUID_REGISTRATION struct entry in the array LsapTraceGuids[].
|
|
// Each enum defines an event that is to be traced using WMI tracing.
|
|
//
|
|
// To add WMI tracing to a function Foo do the following steps:
|
|
// - add an entry (LsaTraceEvent_Foo) to LSA_TRACE_EVENT_TYPE below
|
|
// - generate a new guid using uuidgen.exe -s
|
|
// - add a DEFINE_GUID entry at the end of this file using this guid
|
|
// - add a corresponding entry (LsaTraceEventGuid_Foo) to LsapTraceGuids[]
|
|
// - add a corresponding entry to lsasrv.mof file
|
|
// - at the beginning of function Foo insert the following call:
|
|
// LsapTraceEvent(EVENT_TRACE_TYPE_START, LsaTraceEvent_Foo);
|
|
// - at the end of function Foo insert the following call:
|
|
// LsapTraceEvent(EVENT_TRACE_TYPE_END, LsaTraceEvent_Foo);
|
|
//
|
|
// Make sure that Foo returns only from one location, otherwise the
|
|
// LsapTraceEvent calls will not be balanced.
|
|
//
|
|
typedef enum _LSA_TRACE_EVENT_TYPE {
|
|
|
|
LsaTraceEvent_QuerySecret=0,
|
|
LsaTraceEvent_Close,
|
|
LsaTraceEvent_OpenPolicy,
|
|
LsaTraceEvent_QueryInformationPolicy,
|
|
LsaTraceEvent_SetInformationPolicy,
|
|
LsaTraceEvent_EnumerateTrustedDomains,
|
|
LsaTraceEvent_LookupNames,
|
|
LsaTraceEvent_LookupSids,
|
|
LsaTraceEvent_OpenTrustedDomain,
|
|
LsaTraceEvent_QueryInfoTrustedDomain,
|
|
LsaTraceEvent_SetInformationTrustedDomain,
|
|
// LsaTraceEvent_QueryInformationPolicy2,
|
|
// LsaTraceEvent_SetInformationPolicy2,
|
|
LsaTraceEvent_QueryTrustedDomainInfoByName,
|
|
LsaTraceEvent_SetTrustedDomainInfoByName,
|
|
LsaTraceEvent_EnumerateTrustedDomainsEx,
|
|
LsaTraceEvent_CreateTrustedDomainEx,
|
|
LsaTraceEvent_QueryDomainInformationPolicy,
|
|
LsaTraceEvent_SetDomainInformationPolicy,
|
|
LsaTraceEvent_OpenTrustedDomainByName,
|
|
LsaTraceEvent_QueryForestTrustInformation,
|
|
LsaTraceEvent_SetForestTrustInformation,
|
|
LsaTraceEvent_LookupIsolatedNameInTrustedDomains,
|
|
|
|
} LSA_TRACE_EVENT_TYPE;
|
|
|
|
NTSTATUS
|
|
LsapStartWmiTraceInitThread(void);
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif // __cplusplus
|
|
|
|
VOID
|
|
LsapTraceEvent(
|
|
IN ULONG WmiEventType,
|
|
IN LSA_TRACE_EVENT_TYPE LsaTraceEventType
|
|
);
|
|
|
|
VOID
|
|
LsapTraceEventWithData(
|
|
IN ULONG WmiEventType,
|
|
IN LSA_TRACE_EVENT_TYPE LsaTraceEventType,
|
|
IN ULONG ItemCount,
|
|
IN PUNICODE_STRING Items OPTIONAL
|
|
);
|
|
|
|
LPWSTR
|
|
LsapGetClientNetworkAddress(
|
|
VOID
|
|
);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif // __cplusplus
|
|
|
|
//
|
|
// Control GUID for the group of GUIDs that define LSA WMI tracing
|
|
//
|
|
DEFINE_GUID ( /* cc85922f-db41-11d2-9244-006008269001 */
|
|
LsapTraceControlGuid,
|
|
0xcc85922f,
|
|
0xdb41,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* cc85922e-db41-11d2-9244-006008269001 */
|
|
LsapTraceEventGuid_QuerySecret,
|
|
0xcc85922e,
|
|
0xdb41,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe3b-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_Close,
|
|
0x2306fe3b,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe3a-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_OpenPolicy,
|
|
0x2306fe3a,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe39-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_QueryInformationPolicy,
|
|
0x2306fe39,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe38-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_SetInformationPolicy,
|
|
0x2306fe38,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe37-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_EnumerateTrustedDomains,
|
|
0x2306fe37,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe36-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_LookupNames,
|
|
0x2306fe36,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe35-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_LookupSids,
|
|
0x2306fe35,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe34-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_OpenTrustedDomain,
|
|
0x2306fe34,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe33-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_QueryInfoTrustedDomain,
|
|
0x2306fe33,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe32-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_SetInformationTrustedDomain,
|
|
0x2306fe32,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
// DEFINE_GUID ( /* 2306fe31-dbf6-11d2-9244-006008269001 */
|
|
// LsaTraceEventGuid_QueryInformationPolicy2,
|
|
// 0x2306fe31,
|
|
// 0xdbf6,
|
|
// 0x11d2,
|
|
// 0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
// );
|
|
|
|
// DEFINE_GUID ( /* 2306fe30-dbf6-11d2-9244-006008269001 */
|
|
// LsaTraceEventGuid_SetInformationPolicy2,
|
|
// 0x2306fe30,
|
|
// 0xdbf6,
|
|
// 0x11d2,
|
|
// 0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
// );
|
|
|
|
DEFINE_GUID ( /* 2306fe2f-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_QueryTrustedDomainInfoByName,
|
|
0x2306fe2f,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe2e-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_SetTrustedDomainInfoByName,
|
|
0x2306fe2e,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe2d-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_EnumerateTrustedDomainsEx,
|
|
0x2306fe2d,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe2c-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_CreateTrustedDomainEx,
|
|
0x2306fe2c,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe2b-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_QueryDomainInformationPolicy,
|
|
0x2306fe2b,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe2a-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_SetDomainInformationPolicy,
|
|
0x2306fe2a,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2306fe29-dbf6-11d2-9244-006008269001 */
|
|
LsaTraceEventGuid_OpenTrustedDomainByName,
|
|
0x2306fe29,
|
|
0xdbf6,
|
|
0x11d2,
|
|
0x92, 0x44, 0x00, 0x60, 0x08, 0x26, 0x90, 0x01
|
|
);
|
|
|
|
DEFINE_GUID ( /* e28ee0eb-6181-49df-b859-2f3fd289a2d1 */
|
|
LsaTraceEventGuid_QueryForestTrustInformation,
|
|
0xe28ee0eb,
|
|
0x6181,
|
|
0x49df,
|
|
0xb8, 0x59, 0x2f, 0x3f, 0xd2, 0x89, 0xa2, 0xd1
|
|
);
|
|
|
|
DEFINE_GUID ( /* 3d2c9e3e-bb19-4617-8489-cabb9787de7d */
|
|
LsaTraceEventGuid_SetForestTrustInformation,
|
|
0x3d2c9e3e,
|
|
0xbb19,
|
|
0x4617,
|
|
0x84, 0x89, 0xca, 0xbb, 0x97, 0x87, 0xde, 0x7d
|
|
);
|
|
|
|
DEFINE_GUID ( /* 2484dc26-49d3-4085-a6e4-4972115cb3c0 */
|
|
LsaTraceEventGuid_LookupIsolatedNameInTrustedDomains,
|
|
0x2484dc26,
|
|
0x49d3,
|
|
0x4085,
|
|
0xa6, 0xe4, 0x49, 0x72, 0x11, 0x5c, 0xb3, 0xc0
|
|
);
|
|
|
|
#endif /* _LSAWMI_H */
|
|
|
|
|