1 | #ifndef _LMAUDIT_H
|
---|
2 | #define _LMAUDIT_H
|
---|
3 | #if __GNUC__ >=3
|
---|
4 | #pragma GCC system_header
|
---|
5 | #endif
|
---|
6 |
|
---|
7 | #ifdef __cplusplus
|
---|
8 | extern "C" {
|
---|
9 | #endif
|
---|
10 | #define REVISED_AUDIT_ENTRY_STRUCT
|
---|
11 | #define LOGFLAGS_FORWARD 0
|
---|
12 | #define LOGFLAGS_BACKWARD 1
|
---|
13 | #define LOGFLAGS_SEEK 2
|
---|
14 | #define ACTION_LOCKOUT 0
|
---|
15 | #define ACTION_ADMINUNLOCK 1
|
---|
16 | #define AE_GUEST 0
|
---|
17 | #define AE_USER 1
|
---|
18 | #define AE_ADMIN 2
|
---|
19 | #define AE_NORMAL 0
|
---|
20 | #define AE_USERLIMIT 0
|
---|
21 | #define AE_GENERAL 0
|
---|
22 | #define AE_ERROR 1
|
---|
23 | #define AE_SESSDIS 1
|
---|
24 | #define AE_BADPW 1
|
---|
25 | #define AE_AUTODIS 2
|
---|
26 | #define AE_UNSHARE 2
|
---|
27 | #define AE_ADMINPRIVREQD 2
|
---|
28 | #define AE_ADMINDIS 3
|
---|
29 | #define AE_NOACCESSPERM 3
|
---|
30 | #define AE_ACCRESTRICT 4
|
---|
31 | #define AE_NORMAL_CLOSE 0
|
---|
32 | #define AE_SES_CLOSE 1
|
---|
33 | #define AE_ADMIN_CLOSE 2
|
---|
34 | #define AE_LIM_UNKNOWN 0
|
---|
35 | #define AE_LIM_LOGONHOURS 1
|
---|
36 | #define AE_LIM_EXPIRED 2
|
---|
37 | #define AE_LIM_INVAL_WKSTA 3
|
---|
38 | #define AE_LIM_DISABLED 4
|
---|
39 | #define AE_LIM_DELETED 5
|
---|
40 | #define AE_MOD 0
|
---|
41 | #define AE_DELETE 1
|
---|
42 | #define AE_ADD 2
|
---|
43 | #define AE_UAS_USER 0
|
---|
44 | #define AE_UAS_GROUP 1
|
---|
45 | #define AE_UAS_MODALS 2
|
---|
46 | #define SVAUD_SERVICE 1
|
---|
47 | #define SVAUD_GOODSESSLOGON 6
|
---|
48 | #define SVAUD_BADSESSLOGON 24
|
---|
49 | #define SVAUD_SESSLOGON (SVAUD_GOODSESSLOGON|SVAUD_BADSESSLOGON)
|
---|
50 | #define SVAUD_GOODNETLOGON 96
|
---|
51 | #define SVAUD_BADNETLOGON 384
|
---|
52 | #define SVAUD_NETLOGON (SVAUD_GOODNETLOGON|SVAUD_BADNETLOGON)
|
---|
53 | #define SVAUD_LOGON (SVAUD_NETLOGON|SVAUD_SESSLOGON)
|
---|
54 | #define SVAUD_GOODUSE 0x600
|
---|
55 | #define SVAUD_BADUSE 0x1800
|
---|
56 | #define SVAUD_USE (SVAUD_GOODUSE|SVAUD_BADUSE)
|
---|
57 | #define SVAUD_USERLIST 8192
|
---|
58 | #define SVAUD_PERMISSIONS 16384
|
---|
59 | #define SVAUD_RESOURCE 32768
|
---|
60 | #define SVAUD_LOGONLIM 65536
|
---|
61 | #define AA_AUDIT_ALL 1
|
---|
62 | #define AA_A_OWNER 4
|
---|
63 | #define AA_CLOSE 8
|
---|
64 | #define AA_S_OPEN 16
|
---|
65 | #define AA_S_WRITE 32
|
---|
66 | #define AA_S_CREATE 32
|
---|
67 | #define AA_S_DELETE 64
|
---|
68 | #define AA_S_ACL 128
|
---|
69 | #define AA_S_ALL 253
|
---|
70 | #define AA_F_OPEN 256
|
---|
71 | #define AA_F_WRITE 512
|
---|
72 | #define AA_F_CREATE 512
|
---|
73 | #define AA_F_DELETE 1024
|
---|
74 | #define AA_F_ACL 2048
|
---|
75 | #define AA_F_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL)
|
---|
76 | #define AA_A_OPEN 2048
|
---|
77 | #define AA_A_WRITE 4096
|
---|
78 | #define AA_A_CREATE 8192
|
---|
79 | #define AA_A_DELETE 16384
|
---|
80 | #define AA_A_ACL 32768
|
---|
81 | #define AA_A_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL)
|
---|
82 | typedef struct _AUDIT_ENTRY {
|
---|
83 | DWORD ae_len;
|
---|
84 | DWORD ae_reserved;
|
---|
85 | DWORD ae_time;
|
---|
86 | DWORD ae_type;
|
---|
87 | DWORD ae_data_offset;
|
---|
88 | DWORD ae_data_size;
|
---|
89 | } AUDIT_ENTRY,*PAUDIT_ENTRY,*LPAUDIT_ENTRY;
|
---|
90 | typedef struct _HLOG {
|
---|
91 | DWORD time;
|
---|
92 | DWORD last_flags;
|
---|
93 | DWORD offset;
|
---|
94 | DWORD rec_offset;
|
---|
95 | } HLOG,*PHLOG,*LPHLOG;
|
---|
96 | typedef struct _AE_SRVSTATUS {
|
---|
97 | DWORD ae_sv_status;
|
---|
98 | } AE_SRVSTATUS,*PAE_SRVSTATUS,*LPAE_SRVSTATUS;
|
---|
99 | typedef struct _AE_SESSLOGON {
|
---|
100 | DWORD ae_so_compname;
|
---|
101 | DWORD ae_so_username;
|
---|
102 | DWORD ae_so_privilege;
|
---|
103 | } AE_SESSLOGON,*PAE_SESSLOGON,*LPAE_SESSLOGON;
|
---|
104 | typedef struct _AE_SESSLOGOFF {
|
---|
105 | DWORD ae_sf_compname;
|
---|
106 | DWORD ae_sf_username;
|
---|
107 | DWORD ae_sf_reason;
|
---|
108 | } AE_SESSLOGOFF,*PAE_SESSLOGOFF,*LPAE_SESSLOGOFF;
|
---|
109 | typedef struct _AE_SESSPWERR {
|
---|
110 | DWORD ae_sp_compname;
|
---|
111 | DWORD ae_sp_username;
|
---|
112 | } AE_SESSPWERR,*PAE_SESSPWERR,*LPAE_SESSPWERR;
|
---|
113 | typedef struct _AE_CONNSTART {
|
---|
114 | DWORD ae_ct_compname;
|
---|
115 | DWORD ae_ct_username;
|
---|
116 | DWORD ae_ct_netname;
|
---|
117 | DWORD ae_ct_connid;
|
---|
118 | } AE_CONNSTART,*PAE_CONNSTART,*LPAE_CONNSTART;
|
---|
119 | typedef struct _AE_CONNSTOP {
|
---|
120 | DWORD ae_cp_compname;
|
---|
121 | DWORD ae_cp_username;
|
---|
122 | DWORD ae_cp_netname;
|
---|
123 | DWORD ae_cp_connid;
|
---|
124 | DWORD ae_cp_reason;
|
---|
125 | } AE_CONNSTOP,*PAE_CONNSTOP,*LPAE_CONNSTOP;
|
---|
126 | typedef struct _AE_CONNREJ {
|
---|
127 | DWORD ae_cr_compname;
|
---|
128 | DWORD ae_cr_username;
|
---|
129 | DWORD ae_cr_netname;
|
---|
130 | DWORD ae_cr_reason;
|
---|
131 | } AE_CONNREJ,*PAE_CONNREJ,*LPAE_CONNREJ;
|
---|
132 | typedef struct _AE_RESACCESS {
|
---|
133 | DWORD ae_ra_compname;
|
---|
134 | DWORD ae_ra_username;
|
---|
135 | DWORD ae_ra_resname;
|
---|
136 | DWORD ae_ra_operation;
|
---|
137 | DWORD ae_ra_returncode;
|
---|
138 | DWORD ae_ra_restype;
|
---|
139 | DWORD ae_ra_fileid;
|
---|
140 | } AE_RESACCESS,*PAE_RESACCESS,*LPAE_RESACCESS;
|
---|
141 | typedef struct _AE_RESACCESSREJ {
|
---|
142 | DWORD ae_rr_compname;
|
---|
143 | DWORD ae_rr_username;
|
---|
144 | DWORD ae_rr_resname;
|
---|
145 | DWORD ae_rr_operation;
|
---|
146 | } AE_RESACCESSREJ,*PAE_RESACCESSREJ,*LPAE_RESACCESSREJ;
|
---|
147 | typedef struct _AE_CLOSEFILE {
|
---|
148 | DWORD ae_cf_compname;
|
---|
149 | DWORD ae_cf_username;
|
---|
150 | DWORD ae_cf_resname;
|
---|
151 | DWORD ae_cf_fileid;
|
---|
152 | DWORD ae_cf_duration;
|
---|
153 | DWORD ae_cf_reason;
|
---|
154 | } AE_CLOSEFILE,*PAE_CLOSEFILE,*LPAE_CLOSEFILE;
|
---|
155 | typedef struct _AE_SERVICESTAT {
|
---|
156 | DWORD ae_ss_compname;
|
---|
157 | DWORD ae_ss_username;
|
---|
158 | DWORD ae_ss_svcname;
|
---|
159 | DWORD ae_ss_status;
|
---|
160 | DWORD ae_ss_code;
|
---|
161 | DWORD ae_ss_text;
|
---|
162 | DWORD ae_ss_returnval;
|
---|
163 | } AE_SERVICESTAT,*PAE_SERVICESTAT,*LPAE_SERVICESTAT;
|
---|
164 | typedef struct _AE_ACLMOD {
|
---|
165 | DWORD ae_am_compname;
|
---|
166 | DWORD ae_am_username;
|
---|
167 | DWORD ae_am_resname;
|
---|
168 | DWORD ae_am_action;
|
---|
169 | DWORD ae_am_datalen;
|
---|
170 | } AE_ACLMOD,*PAE_ACLMOD,*LPAE_ACLMOD;
|
---|
171 | typedef struct _AE_UASMOD {
|
---|
172 | DWORD ae_um_compname;
|
---|
173 | DWORD ae_um_username;
|
---|
174 | DWORD ae_um_resname;
|
---|
175 | DWORD ae_um_rectype;
|
---|
176 | DWORD ae_um_action;
|
---|
177 | DWORD ae_um_datalen;
|
---|
178 | } AE_UASMOD,*PAE_UASMOD,*LPAE_UASMOD;
|
---|
179 | typedef struct _AE_NETLOGON {
|
---|
180 | DWORD ae_no_compname;
|
---|
181 | DWORD ae_no_username;
|
---|
182 | DWORD ae_no_privilege;
|
---|
183 | DWORD ae_no_authflags;
|
---|
184 | } AE_NETLOGON,*PAE_NETLOGON,*LPAE_NETLOGON;
|
---|
185 | typedef struct _AE_NETLOGOFF {
|
---|
186 | DWORD ae_nf_compname;
|
---|
187 | DWORD ae_nf_username;
|
---|
188 | DWORD ae_nf_reserved1;
|
---|
189 | DWORD ae_nf_reserved2;
|
---|
190 | } AE_NETLOGOFF,*PAE_NETLOGOFF,*LPAE_NETLOGOFF;
|
---|
191 | typedef struct _AE_ACCLIM {
|
---|
192 | DWORD ae_al_compname;
|
---|
193 | DWORD ae_al_username;
|
---|
194 | DWORD ae_al_resname;
|
---|
195 | DWORD ae_al_limit;
|
---|
196 | } AE_ACCLIM,*PAE_ACCLIM,*LPAE_ACCLIM;
|
---|
197 | typedef struct _AE_LOCKOUT {
|
---|
198 | DWORD ae_lk_compname;
|
---|
199 | DWORD ae_lk_username;
|
---|
200 | DWORD ae_lk_action;
|
---|
201 | DWORD ae_lk_bad_pw_count;
|
---|
202 | } AE_LOCKOUT,*PAE_LOCKOUT,*LPAE_LOCKOUT;
|
---|
203 | typedef struct _AE_GENERIC {
|
---|
204 | DWORD ae_ge_msgfile;
|
---|
205 | DWORD ae_ge_msgnum;
|
---|
206 | DWORD ae_ge_params;
|
---|
207 | DWORD ae_ge_param1;
|
---|
208 | DWORD ae_ge_param2;
|
---|
209 | DWORD ae_ge_param3;
|
---|
210 | DWORD ae_ge_param4;
|
---|
211 | DWORD ae_ge_param5;
|
---|
212 | DWORD ae_ge_param6;
|
---|
213 | DWORD ae_ge_param7;
|
---|
214 | DWORD ae_ge_param8;
|
---|
215 | DWORD ae_ge_param9;
|
---|
216 | } AE_GENERIC,*PAE_GENERIC,*LPAE_GENERIC;
|
---|
217 | NET_API_STATUS WINAPI NetAuditClear(LPCWSTR,LPCWSTR,LPCWSTR);
|
---|
218 | NET_API_STATUS WINAPI NetAuditRead(LPTSTR,LPTSTR,LPHLOG,DWORD,PDWORD,DWORD,DWORD,PBYTE*,DWORD,PDWORD,PDWORD);
|
---|
219 | NET_API_STATUS WINAPI NetAuditWrite(DWORD,PBYTE,DWORD,LPTSTR,PBYTE);
|
---|
220 |
|
---|
221 | /* These conflict with struct typedefs, why? */
|
---|
222 | #define AE_SRVSTATUS 0
|
---|
223 | #define AE_SESSLOGON 1
|
---|
224 | #define AE_SESSLOGOFF 2
|
---|
225 | #define AE_SESSPWERR 3
|
---|
226 | #define AE_CONNSTART 4
|
---|
227 | #define AE_CONNSTOP 5
|
---|
228 | #define AE_CONNREJ 6
|
---|
229 | #define AE_RESACCESS 7
|
---|
230 | #define AE_RESACCESSREJ 8
|
---|
231 | #define AE_CLOSEFILE 9
|
---|
232 | #define AE_SERVICESTAT 11
|
---|
233 | #define AE_ACLMOD 12
|
---|
234 | #define AE_UASMOD 13
|
---|
235 | #define AE_NETLOGON 14
|
---|
236 | #define AE_NETLOGOFF 15
|
---|
237 | #define AE_NETLOGDENIED 16
|
---|
238 | #define AE_ACCLIMITEXCD 17
|
---|
239 | #define AE_RESACCESS2 18
|
---|
240 | #define AE_ACLMODFAIL 19
|
---|
241 | #define AE_LOCKOUT 20
|
---|
242 | #define AE_GENERIC_TYPE 21
|
---|
243 | #define AE_SRVSTART 0
|
---|
244 | #define AE_SRVPAUSED 1
|
---|
245 | #define AE_SRVCONT 2
|
---|
246 | #define AE_SRVSTOP 3
|
---|
247 | #ifdef __cplusplus
|
---|
248 | }
|
---|
249 | #endif
|
---|
250 | #endif
|
---|