[1046] | 1 | #ifndef _NTSECPKG_H
|
---|
| 2 | #define _NTSECPKG_H
|
---|
| 3 | #if __GNUC__ >=3
|
---|
| 4 | #pragma GCC system_header
|
---|
| 5 | #endif
|
---|
| 6 |
|
---|
| 7 | #include "windef.h"
|
---|
| 8 | #include "ntsecapi.h"
|
---|
| 9 | #include "security.h"
|
---|
| 10 |
|
---|
| 11 | #ifdef __cplusplus
|
---|
| 12 | extern "C" {
|
---|
| 13 | #endif
|
---|
| 14 |
|
---|
| 15 | #define ISC_REQ_DELEGATE 1
|
---|
| 16 | #define ISC_REQ_MUTUAL_AUTH 2
|
---|
| 17 | #define ISC_REQ_REPLAY_DETECT 4
|
---|
| 18 | #define ISC_REQ_SEQUENCE_DETECT 8
|
---|
| 19 | #define ISC_REQ_CONFIDENTIALITY 16
|
---|
| 20 | #define ISC_REQ_USE_SESSION_KEY 32
|
---|
| 21 | #define ISC_REQ_PROMPT_FOR_CREDS 64
|
---|
| 22 | #define ISC_REQ_USE_SUPPLIED_CREDS 128
|
---|
| 23 | #define ISC_REQ_ALLOCATE_MEMORY 256
|
---|
| 24 | #define ISC_REQ_USE_DCE_STYLE 512
|
---|
| 25 | #define ISC_REQ_DATAGRAM 1024
|
---|
| 26 | #define ISC_REQ_CONNECTION 2048
|
---|
| 27 | #define ISC_REQ_EXTENDED_ERROR 16384
|
---|
| 28 | #define ISC_REQ_STREAM 32768
|
---|
| 29 | #define ISC_REQ_INTEGRITY 65536
|
---|
| 30 | #define ISC_REQ_MANUAL_CRED_VALIDATION 524288
|
---|
| 31 | #define ISC_REQ_HTTP 268435456
|
---|
| 32 |
|
---|
| 33 | #define ISC_RET_EXTENDED_ERROR 16384
|
---|
| 34 |
|
---|
| 35 | #define ASC_REQ_DELEGATE 1
|
---|
| 36 | #define ASC_REQ_MUTUAL_AUTH 2
|
---|
| 37 | #define ASC_REQ_REPLAY_DETECT 4
|
---|
| 38 | #define ASC_REQ_SEQUENCE_DETECT 8
|
---|
| 39 | #define ASC_REQ_CONFIDENTIALITY 16
|
---|
| 40 | #define ASC_REQ_USE_SESSION_KEY 32
|
---|
| 41 | #define ASC_REQ_ALLOCATE_MEMORY 256
|
---|
| 42 | #define ASC_REQ_USE_DCE_STYLE 512
|
---|
| 43 | #define ASC_REQ_DATAGRAM 1024
|
---|
| 44 | #define ASC_REQ_CONNECTION 2048
|
---|
| 45 | #define ASC_REQ_EXTENDED_ERROR 32768
|
---|
| 46 | #define ASC_REQ_STREAM 65536
|
---|
| 47 | #define ASC_REQ_INTEGRITY 131072
|
---|
| 48 |
|
---|
| 49 | #define SECURITY_NATIVE_DREP 16
|
---|
| 50 | #define SECURITY_NETWORK_DREP 0
|
---|
| 51 |
|
---|
| 52 | #define SECPKG_STATE_ENCRYPTION_PERMITTED 0x01
|
---|
| 53 | #define SECPKG_STATE_STRONG_ENCRYPTION_PERMITTED 0x02
|
---|
| 54 | #define SECPKG_STATE_DOMAIN_CONTROLLER 0x04
|
---|
| 55 | #define SECPKG_STATE_WORKSTATION 0x08
|
---|
| 56 | #define SECPKG_STATE_STANDALONE 0x10
|
---|
| 57 |
|
---|
| 58 | /* enum definitions for Secure Service Provider/Authentication Packages */
|
---|
| 59 | typedef enum _LSA_TOKEN_INFORMATION_TYPE {
|
---|
| 60 | LsaTokenInformationNull,
|
---|
| 61 | LsaTokenInformationV1
|
---|
| 62 | } LSA_TOKEN_INFORMATION_TYPE, *PLSA_TOKEN_INFORMATION_TYPE;
|
---|
| 63 | typedef enum _SECPKG_EXTENDED_INFORMATION_CLASS
|
---|
| 64 | {
|
---|
| 65 | SecpkgGssInfo = 1,
|
---|
| 66 | SecpkgContextThunks,
|
---|
| 67 | SecpkgMutualAuthLevel,
|
---|
| 68 | SecpkgMaxInfo
|
---|
| 69 | } SECPKG_EXTENDED_INFORMATION_CLASS;
|
---|
| 70 | typedef enum _SECPKG_NAME_TYPE {
|
---|
| 71 | SecNameSamCompatible,
|
---|
| 72 | SecNameAlternateId,
|
---|
| 73 | SecNameFlat,
|
---|
| 74 | SecNameDN
|
---|
| 75 | } SECPKG_NAME_TYPE;
|
---|
| 76 |
|
---|
| 77 | /* struct definitions for SSP/AP */
|
---|
| 78 | typedef struct _SECPKG_PRIMARY_CRED {
|
---|
| 79 | LUID LogonId;
|
---|
| 80 | UNICODE_STRING DownlevelName;
|
---|
| 81 | UNICODE_STRING DomainName;
|
---|
| 82 | UNICODE_STRING Password;
|
---|
| 83 | UNICODE_STRING OldPassword;
|
---|
| 84 | PSID UserSid;
|
---|
| 85 | ULONG Flags;
|
---|
| 86 | UNICODE_STRING DnsDomainName;
|
---|
| 87 | UNICODE_STRING Upn;
|
---|
| 88 | UNICODE_STRING LogonServer;
|
---|
| 89 | UNICODE_STRING Spare1;
|
---|
| 90 | UNICODE_STRING Spare2;
|
---|
| 91 | UNICODE_STRING Spare3;
|
---|
| 92 | UNICODE_STRING Spare4;
|
---|
| 93 | } SECPKG_PRIMARY_CRED, *PSECPKG_PRIMARY_CRED;
|
---|
| 94 | typedef struct _SECPKG_SUPPLEMENTAL_CRED {
|
---|
| 95 | UNICODE_STRING PackageName;
|
---|
| 96 | ULONG CredentialSize;
|
---|
| 97 | PUCHAR Credentials;
|
---|
| 98 | } SECPKG_SUPPLEMENTAL_CRED, *PSECPKG_SUPPLEMENTAL_CRED;
|
---|
| 99 | typedef struct _SECPKG_SUPPLEMENTAL_CRED_ARRAY {
|
---|
| 100 | ULONG CredentialCount;
|
---|
| 101 | SECPKG_SUPPLEMENTAL_CRED Credentials[1];
|
---|
| 102 | } SECPKG_SUPPLEMENTAL_CRED_ARRAY, *PSECPKG_SUPPLEMENTAL_CRED_ARRAY;
|
---|
| 103 | typedef struct _SECPKG_PARAMETERS {
|
---|
| 104 | ULONG Version;
|
---|
| 105 | ULONG MachineState;
|
---|
| 106 | ULONG SetupMode;
|
---|
| 107 | PSID DomainSid;
|
---|
| 108 | UNICODE_STRING DomainName;
|
---|
| 109 | UNICODE_STRING DnsDomainName;
|
---|
| 110 | GUID DomainGuid;
|
---|
| 111 | } SECPKG_PARAMETERS, *PSECPKG_PARAMETERS,
|
---|
| 112 | SECPKG_EVENT_DOMAIN_CHANGE, *PSECPKG_EVENT_DOMAIN_CHANGE;
|
---|
| 113 | typedef struct _SECPKG_CLIENT_INFO {
|
---|
| 114 | LUID LogonId;
|
---|
| 115 | ULONG ProcessID;
|
---|
| 116 | ULONG ThreadID;
|
---|
| 117 | BOOLEAN HasTcbPrivilege;
|
---|
| 118 | BOOLEAN Impersonating;
|
---|
| 119 | BOOLEAN Restricted;
|
---|
| 120 | } SECPKG_CLIENT_INFO,
|
---|
| 121 | *PSECPKG_CLIENT_INFO;
|
---|
| 122 | typedef struct _SECURITY_USER_DATA {
|
---|
| 123 | SECURITY_STRING UserName;
|
---|
| 124 | SECURITY_STRING LogonDomainName;
|
---|
| 125 | SECURITY_STRING LogonServer;
|
---|
| 126 | PSID pSid;
|
---|
| 127 | } SECURITY_USER_DATA, *PSECURITY_USER_DATA,
|
---|
| 128 | SecurityUserData, *PSecurityUserData;
|
---|
| 129 | typedef struct _SECPKG_GSS_INFO {
|
---|
| 130 | ULONG EncodedIdLength;
|
---|
| 131 | UCHAR EncodedId[4];
|
---|
| 132 | } SECPKG_GSS_INFO, *PSECPKG_GSS_INFO;
|
---|
| 133 | typedef struct _SECPKG_CONTEXT_THUNKS {
|
---|
| 134 | ULONG InfoLevelCount;
|
---|
| 135 | ULONG Levels[1];
|
---|
| 136 | } SECPKG_CONTEXT_THUNKS, *PSECPKG_CONTEXT_THUNKS;
|
---|
| 137 | typedef struct _SECPKG_MUTUAL_AUTH_LEVEL {
|
---|
| 138 | ULONG MutualAuthLevel;
|
---|
| 139 | } SECPKG_MUTUAL_AUTH_LEVEL, *PSECPKG_MUTUAL_AUTH_LEVEL;
|
---|
| 140 | typedef struct _SECPKG_CALL_INFO {
|
---|
| 141 | ULONG ProcessId;
|
---|
| 142 | ULONG ThreadId;
|
---|
| 143 | ULONG Attributes;
|
---|
| 144 | ULONG CallCount;
|
---|
| 145 | } SECPKG_CALL_INFO, *PSECPKG_CALL_INFO;
|
---|
| 146 | typedef struct _SECPKG_EXTENDED_INFORMATION {
|
---|
| 147 | SECPKG_EXTENDED_INFORMATION_CLASS Class;
|
---|
| 148 | union {
|
---|
| 149 | SECPKG_GSS_INFO GssInfo;
|
---|
| 150 | SECPKG_CONTEXT_THUNKS ContextThunks;
|
---|
| 151 | SECPKG_MUTUAL_AUTH_LEVEL MutualAuthLevel;
|
---|
| 152 | } Info;
|
---|
| 153 | } SECPKG_EXTENDED_INFORMATION, *PSECPKG_EXTENDED_INFORMATION;
|
---|
| 154 |
|
---|
| 155 | /* callbacks implemented by SSP/AP dlls and called by the LSA */
|
---|
| 156 | typedef VOID (NTAPI *PLSA_CALLBACK_FUNCTION)(ULONG_PTR, ULONG_PTR, PSecBuffer,
|
---|
| 157 | PSecBuffer);
|
---|
| 158 |
|
---|
| 159 | /* misc typedefs used in the below prototypes */
|
---|
| 160 | typedef PVOID *PLSA_CLIENT_REQUEST;
|
---|
| 161 | typedef ULONG LSA_SEC_HANDLE, *PLSA_SEC_HANDLE;
|
---|
| 162 | typedef LPTHREAD_START_ROUTINE SEC_THREAD_START;
|
---|
| 163 | typedef PSECURITY_ATTRIBUTES SEC_ATTRS;
|
---|
| 164 |
|
---|
| 165 | /* functions used by SSP/AP obtainable by dispatch tables */
|
---|
| 166 | typedef NTSTATUS (NTAPI *PLSA_REGISTER_CALLBACK)(ULONG, PLSA_CALLBACK_FUNCTION);
|
---|
| 167 | typedef NTSTATUS (NTAPI *PLSA_CREATE_LOGON_SESSION)(PLUID);
|
---|
| 168 | typedef NTSTATUS (NTAPI *PLSA_DELETE_LOGON_SESSION)(PLUID);
|
---|
| 169 | typedef NTSTATUS (NTAPI *PLSA_ADD_CREDENTIAL)(PLUID, ULONG, PLSA_STRING,
|
---|
| 170 | PLSA_STRING);
|
---|
| 171 | typedef NTSTATUS (NTAPI *PLSA_GET_CREDENTIALS)(PLUID, ULONG, PULONG, BOOLEAN,
|
---|
| 172 | PLSA_STRING, PULONG, PLSA_STRING);
|
---|
| 173 | typedef NTSTATUS (NTAPI *PLSA_DELETE_CREDENTIAL)(PLUID, ULONG, PLSA_STRING);
|
---|
| 174 | typedef PVOID (NTAPI *PLSA_ALLOCATE_LSA_HEAP)(ULONG);
|
---|
| 175 | typedef VOID (NTAPI *PLSA_FREE_LSA_HEAP)(PVOID);
|
---|
| 176 | typedef NTSTATUS (NTAPI *PLSA_ALLOCATE_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST,
|
---|
| 177 | ULONG, PVOID*);
|
---|
| 178 | typedef NTSTATUS (NTAPI *PLSA_FREE_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST, PVOID);
|
---|
| 179 | typedef NTSTATUS (NTAPI *PLSA_COPY_TO_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST, ULONG,
|
---|
| 180 | PVOID, PVOID);
|
---|
| 181 | typedef NTSTATUS (NTAPI *PLSA_COPY_FROM_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST,
|
---|
| 182 | ULONG, PVOID, PVOID);
|
---|
| 183 | typedef NTSTATUS (NTAPI *PLSA_IMPERSONATE_CLIENT)(void);
|
---|
| 184 | typedef NTSTATUS (NTAPI *PLSA_UNLOAD_PACKAGE)(void);
|
---|
| 185 | typedef NTSTATUS (NTAPI *PLSA_DUPLICATE_HANDLE)(HANDLE, PHANDLE);
|
---|
| 186 | typedef NTSTATUS (NTAPI *PLSA_SAVE_SUPPLEMENTAL_CREDENTIALS)(PLUID, ULONG,
|
---|
| 187 | PVOID, BOOLEAN);
|
---|
| 188 | typedef HANDLE (NTAPI *PLSA_CREATE_THREAD)(SEC_ATTRS, ULONG, SEC_THREAD_START,
|
---|
| 189 | PVOID, ULONG, PULONG);
|
---|
| 190 | typedef NTSTATUS (NTAPI *PLSA_GET_CLIENT_INFO)(PSECPKG_CLIENT_INFO);
|
---|
| 191 | typedef HANDLE (NTAPI *PLSA_REGISTER_NOTIFICATION)(SEC_THREAD_START, PVOID,
|
---|
| 192 | ULONG, ULONG, ULONG, ULONG, HANDLE);
|
---|
| 193 | typedef NTSTATUS (NTAPI *PLSA_CANCEL_NOTIFICATION)(HANDLE);
|
---|
| 194 | typedef NTSTATUS (NTAPI *PLSA_MAP_BUFFER)(PSecBuffer, PSecBuffer);
|
---|
| 195 | typedef NTSTATUS (NTAPI *PLSA_CREATE_TOKEN)(PLUID, PTOKEN_SOURCE,
|
---|
| 196 | SECURITY_LOGON_TYPE, SECURITY_IMPERSONATION_LEVEL, LSA_TOKEN_INFORMATION_TYPE,
|
---|
| 197 | PVOID, PTOKEN_GROUPS, PUNICODE_STRING, PUNICODE_STRING, PUNICODE_STRING,
|
---|
| 198 | PUNICODE_STRING, PHANDLE, PNTSTATUS);
|
---|
| 199 | typedef VOID (NTAPI *PLSA_AUDIT_LOGON)(NTSTATUS, NTSTATUS, PUNICODE_STRING,
|
---|
| 200 | PUNICODE_STRING, PUNICODE_STRING, OPTIONAL PSID, SECURITY_LOGON_TYPE,
|
---|
| 201 | PTOKEN_SOURCE, PLUID);
|
---|
| 202 | typedef NTSTATUS (NTAPI *PLSA_CALL_PACKAGE)(PUNICODE_STRING, PVOID, ULONG,
|
---|
| 203 | PVOID*, PULONG, PNTSTATUS);
|
---|
| 204 | typedef VOID (NTAPI *PLSA_FREE_LSA_HEAP)(PVOID);
|
---|
| 205 | typedef BOOLEAN (NTAPI *PLSA_GET_CALL_INFO)(PSECPKG_CALL_INFO);
|
---|
| 206 | typedef NTSTATUS (NTAPI *PLSA_CALL_PACKAGEEX)(PUNICODE_STRING, PVOID, PVOID,
|
---|
| 207 | ULONG, PVOID*, PULONG, PNTSTATUS);
|
---|
| 208 | typedef PVOID (NTAPI *PLSA_CREATE_SHARED_MEMORY)(ULONG, ULONG);
|
---|
| 209 | typedef PVOID (NTAPI *PLSA_ALLOCATE_SHARED_MEMORY)(PVOID, ULONG);
|
---|
| 210 | typedef VOID (NTAPI *PLSA_FREE_SHARED_MEMORY)(PVOID, PVOID);
|
---|
| 211 | typedef BOOLEAN (NTAPI *PLSA_DELETE_SHARED_MEMORY)(PVOID);
|
---|
| 212 | typedef NTSTATUS (NTAPI *PLSA_OPEN_SAM_USER)(PSECURITY_STRING, SECPKG_NAME_TYPE,
|
---|
| 213 | PSECURITY_STRING, BOOLEAN, ULONG, PVOID*);
|
---|
| 214 | typedef NTSTATUS (NTAPI *PLSA_GET_USER_CREDENTIALS)(PVOID, PVOID *, PULONG,
|
---|
| 215 | PVOID *, PULONG);
|
---|
| 216 | typedef NTSTATUS (NTAPI *PLSA_GET_USER_AUTH_DATA)(PVOID, PUCHAR *, PULONG);
|
---|
| 217 | typedef NTSTATUS (NTAPI *PLSA_CLOSE_SAM_USER)(PVOID);
|
---|
| 218 | typedef NTSTATUS (NTAPI *PLSA_CONVERT_AUTH_DATA_TO_TOKEN)(PVOID, ULONG,
|
---|
| 219 | SECURITY_IMPERSONATION_LEVEL, PTOKEN_SOURCE, SECURITY_LOGON_TYPE,
|
---|
| 220 | PUNICODE_STRING, PHANDLE, PLUID, PUNICODE_STRING, PNTSTATUS);
|
---|
| 221 | typedef NTSTATUS (NTAPI *PLSA_CLIENT_CALLBACK)(PCHAR, ULONG_PTR, ULONG_PTR,
|
---|
| 222 | PSecBuffer, PSecBuffer);
|
---|
| 223 | typedef NTSTATUS (NTAPI *PLSA_UPDATE_PRIMARY_CREDENTIALS)(PSECPKG_PRIMARY_CRED, PSECPKG_SUPPLEMENTAL_CRED_ARRAY);
|
---|
| 224 | typedef NTSTATUS (NTAPI *PLSA_GET_AUTH_DATA_FOR_USER)(PSECURITY_STRING,
|
---|
| 225 | SECPKG_NAME_TYPE, PSECURITY_STRING, PUCHAR *, PULONG, PUNICODE_STRING);
|
---|
| 226 | typedef NTSTATUS (NTAPI *PLSA_CRACK_SINGLE_NAME)(ULONG, BOOLEAN,
|
---|
| 227 | PUNICODE_STRING, PUNICODE_STRING, ULONG, PUNICODE_STRING, PUNICODE_STRING,
|
---|
| 228 | PULONG);
|
---|
| 229 | typedef NTSTATUS (NTAPI *PLSA_AUDIT_ACCOUNT_LOGON)(ULONG, BOOLEAN,
|
---|
| 230 | PUNICODE_STRING, PUNICODE_STRING, PUNICODE_STRING, NTSTATUS);
|
---|
| 231 | typedef NTSTATUS (NTAPI *PLSA_CALL_PACKAGE_PASSTHROUGH)(PUNICODE_STRING, PVOID,
|
---|
| 232 | PVOID, ULONG, PVOID*, PULONG, PNTSTATUS);
|
---|
| 233 |
|
---|
| 234 | /* Dispatch tables of functions used by SSP/AP */
|
---|
| 235 | typedef struct SECPKG_DLL_FUNCTIONS {
|
---|
| 236 | PLSA_ALLOCATE_LSA_HEAP AllocateHeap;
|
---|
| 237 | PLSA_FREE_LSA_HEAP FreeHeap;
|
---|
| 238 | PLSA_REGISTER_CALLBACK RegisterCallback;
|
---|
| 239 | } SECPKG_DLL_FUNCTIONS,
|
---|
| 240 | *PSECPKG_DLL_FUNCTIONS;
|
---|
| 241 | typedef struct LSA_DISPATCH_TABLE {
|
---|
| 242 | PLSA_CREATE_LOGON_SESSION CreateLogonSession;
|
---|
| 243 | PLSA_DELETE_LOGON_SESSION DeleteLogonSession;
|
---|
| 244 | PLSA_ADD_CREDENTIAL AddCredential;
|
---|
| 245 | PLSA_GET_CREDENTIALS GetCredentials;
|
---|
| 246 | PLSA_DELETE_CREDENTIAL DeleteCredential;
|
---|
| 247 | PLSA_ALLOCATE_LSA_HEAP AllocateLsaHeap;
|
---|
| 248 | PLSA_FREE_LSA_HEAP FreeLsaHeap;
|
---|
| 249 | PLSA_ALLOCATE_CLIENT_BUFFER AllocateClientBuffer;
|
---|
| 250 | PLSA_FREE_CLIENT_BUFFER FreeClientBuffer;
|
---|
| 251 | PLSA_COPY_TO_CLIENT_BUFFER CopyToClientBuffer;
|
---|
| 252 | PLSA_COPY_FROM_CLIENT_BUFFER CopyFromClientBuffer;
|
---|
| 253 | } LSA_DISPATCH_TABLE,
|
---|
| 254 | *PLSA_DISPATCH_TABLE;
|
---|
| 255 | typedef struct _LSA_SECPKG_FUNCTION_TABLE {
|
---|
| 256 | PLSA_CREATE_LOGON_SESSION CreateLogonSession;
|
---|
| 257 | PLSA_DELETE_LOGON_SESSION DeleteLogonSession;
|
---|
| 258 | PLSA_ADD_CREDENTIAL AddCredential;
|
---|
| 259 | PLSA_GET_CREDENTIALS GetCredentials;
|
---|
| 260 | PLSA_DELETE_CREDENTIAL DeleteCredential;
|
---|
| 261 | PLSA_ALLOCATE_LSA_HEAP AllocateLsaHeap;
|
---|
| 262 | PLSA_FREE_LSA_HEAP FreeLsaHeap;
|
---|
| 263 | PLSA_ALLOCATE_CLIENT_BUFFER AllocateClientBuffer;
|
---|
| 264 | PLSA_FREE_CLIENT_BUFFER FreeClientBuffer;
|
---|
| 265 | PLSA_COPY_TO_CLIENT_BUFFER CopyToClientBuffer;
|
---|
| 266 | PLSA_COPY_FROM_CLIENT_BUFFER CopyFromClientBuffer;
|
---|
| 267 | PLSA_IMPERSONATE_CLIENT ImpersonateClient;
|
---|
| 268 | PLSA_UNLOAD_PACKAGE UnloadPackage;
|
---|
| 269 | PLSA_DUPLICATE_HANDLE DuplicateHandle;
|
---|
| 270 | PLSA_SAVE_SUPPLEMENTAL_CREDENTIALS SaveSupplementalCredentials;
|
---|
| 271 | PLSA_CREATE_THREAD CreateThread;
|
---|
| 272 | PLSA_GET_CLIENT_INFO GetClientInfo;
|
---|
| 273 | PLSA_REGISTER_NOTIFICATION RegisterNotification;
|
---|
| 274 | PLSA_CANCEL_NOTIFICATION CancelNotification;
|
---|
| 275 | PLSA_MAP_BUFFER MapBuffer;
|
---|
| 276 | PLSA_CREATE_TOKEN CreateToken;
|
---|
| 277 | PLSA_AUDIT_LOGON AuditLogon;
|
---|
| 278 | PLSA_CALL_PACKAGE CallPackage;
|
---|
| 279 | PLSA_FREE_LSA_HEAP FreeReturnBuffer;
|
---|
| 280 | PLSA_GET_CALL_INFO GetCallInfo;
|
---|
| 281 | PLSA_CALL_PACKAGEEX CallPackageEx;
|
---|
| 282 | PLSA_CREATE_SHARED_MEMORY CreateSharedMemory;
|
---|
| 283 | PLSA_ALLOCATE_SHARED_MEMORY AllocateSharedMemory;
|
---|
| 284 | PLSA_FREE_SHARED_MEMORY FreeSharedMemory;
|
---|
| 285 | PLSA_DELETE_SHARED_MEMORY DeleteSharedMemory;
|
---|
| 286 | PLSA_OPEN_SAM_USER OpenSamUser;
|
---|
| 287 | PLSA_GET_USER_CREDENTIALS GetUserCredentials;
|
---|
| 288 | PLSA_GET_USER_AUTH_DATA GetUserAuthData;
|
---|
| 289 | PLSA_CLOSE_SAM_USER CloseSamUser;
|
---|
| 290 | PLSA_CONVERT_AUTH_DATA_TO_TOKEN ConvertAuthDataToToken;
|
---|
| 291 | PLSA_CLIENT_CALLBACK ClientCallback;
|
---|
| 292 | PLSA_UPDATE_PRIMARY_CREDENTIALS UpdateCredentials;
|
---|
| 293 | PLSA_GET_AUTH_DATA_FOR_USER GetAuthDataForUser;
|
---|
| 294 | PLSA_CRACK_SINGLE_NAME CrackSingleName;
|
---|
| 295 | PLSA_AUDIT_ACCOUNT_LOGON AuditAccountLogon;
|
---|
| 296 | PLSA_CALL_PACKAGE_PASSTHROUGH CallPackagePassthrough;
|
---|
| 297 | } LSA_SECPKG_FUNCTION_TABLE,
|
---|
| 298 | *PLSA_SECPKG_FUNCTION_TABLE;
|
---|
| 299 |
|
---|
| 300 | /* functions implemented by SSP/AP obtainable by dispatch tables */
|
---|
| 301 | typedef NTSTATUS (NTAPI *PLSA_AP_INITIALIZE_PACKAGE)(ULONG, PLSA_DISPATCH_TABLE,
|
---|
| 302 | PLSA_STRING, PLSA_STRING, PLSA_STRING *);
|
---|
| 303 | typedef NTSTATUS (NTAPI *PLSA_AP_LOGON_USER)(LPWSTR, LPWSTR, LPWSTR, LPWSTR,
|
---|
| 304 | DWORD, DWORD, PHANDLE);
|
---|
| 305 | typedef NTSTATUS (NTAPI *PLSA_AP_CALL_PACKAGE)(PUNICODE_STRING, PVOID, ULONG,
|
---|
| 306 | PVOID *, PULONG, PNTSTATUS);
|
---|
| 307 | typedef VOID (NTAPI *PLSA_AP_LOGON_TERMINATED)(PLUID);
|
---|
| 308 | typedef NTSTATUS (NTAPI *PLSA_AP_CALL_PACKAGE_UNTRUSTED)(PLSA_CLIENT_REQUEST,
|
---|
| 309 | PVOID, PVOID, ULONG, PVOID *, PULONG, PNTSTATUS);
|
---|
| 310 | typedef NTSTATUS (NTAPI *PLSA_AP_CALL_PACKAGE_PASSTHROUGH)(PUNICODE_STRING,
|
---|
| 311 | PVOID, PVOID, ULONG, PVOID *, PULONG, PNTSTATUS);
|
---|
| 312 | typedef NTSTATUS (NTAPI *PLSA_AP_LOGON_USER_EX)(PLSA_CLIENT_REQUEST,
|
---|
| 313 | SECURITY_LOGON_TYPE, PVOID, PVOID, ULONG, PVOID *, PULONG, PLUID, PNTSTATUS,
|
---|
| 314 | PLSA_TOKEN_INFORMATION_TYPE, PVOID *, PUNICODE_STRING *, PUNICODE_STRING *,
|
---|
| 315 | PUNICODE_STRING *);
|
---|
| 316 | typedef NTSTATUS (NTAPI *PLSA_AP_LOGON_USER_EX2)(PLSA_CLIENT_REQUEST,
|
---|
| 317 | SECURITY_LOGON_TYPE, PVOID, PVOID, ULONG, PVOID *, PULONG, PLUID, PNTSTATUS,
|
---|
| 318 | PLSA_TOKEN_INFORMATION_TYPE, PVOID *, PUNICODE_STRING *, PUNICODE_STRING *,
|
---|
| 319 | PUNICODE_STRING *, PSECPKG_PRIMARY_CRED, PSECPKG_SUPPLEMENTAL_CRED_ARRAY *);
|
---|
| 320 | typedef NTSTATUS (SpInitializeFn)(ULONG_PTR, PSECPKG_PARAMETERS,
|
---|
| 321 | PLSA_SECPKG_FUNCTION_TABLE);
|
---|
| 322 | typedef NTSTATUS (NTAPI SpShutDownFn)(void);
|
---|
| 323 | typedef NTSTATUS (NTAPI SpGetInfoFn)(PSecPkgInfoW);
|
---|
| 324 | typedef NTSTATUS (NTAPI SpAcceptCredentialsFn)(SECURITY_LOGON_TYPE,
|
---|
| 325 | PUNICODE_STRING, PSECPKG_PRIMARY_CRED, PSECPKG_SUPPLEMENTAL_CRED);
|
---|
| 326 | typedef NTSTATUS (NTAPI SpAcquireCredentialsHandleFn)(PUNICODE_STRING, ULONG,
|
---|
| 327 | PLUID, PVOID, PVOID, PVOID, PLSA_SEC_HANDLE, PTimeStamp);
|
---|
| 328 | typedef NTSTATUS (NTAPI SpQueryCredentialsAttributesFn)(LSA_SEC_HANDLE, ULONG,
|
---|
| 329 | PVOID);
|
---|
| 330 | typedef NTSTATUS (NTAPI SpFreeCredentialsHandleFn)(LSA_SEC_HANDLE);
|
---|
| 331 | typedef NTSTATUS (NTAPI SpSaveCredentialsFn)(LSA_SEC_HANDLE, PSecBuffer);
|
---|
| 332 | typedef NTSTATUS (NTAPI SpGetCredentialsFn)(LSA_SEC_HANDLE, PSecBuffer);
|
---|
| 333 | typedef NTSTATUS (NTAPI SpDeleteCredentialsFn)(LSA_SEC_HANDLE, PSecBuffer);
|
---|
| 334 | typedef NTSTATUS (NTAPI SpInitLsaModeContextFn)(LSA_SEC_HANDLE, LSA_SEC_HANDLE,
|
---|
| 335 | PUNICODE_STRING, ULONG, ULONG, PSecBufferDesc, PLSA_SEC_HANDLE, PSecBufferDesc,
|
---|
| 336 | PULONG, PTimeStamp, PBOOLEAN, PSecBuffer);
|
---|
| 337 | typedef NTSTATUS (NTAPI SpAcceptLsaModeContextFn)(LSA_SEC_HANDLE,
|
---|
| 338 | LSA_SEC_HANDLE, PSecBufferDesc, ULONG, ULONG, PLSA_SEC_HANDLE, PSecBufferDesc,
|
---|
| 339 | PULONG, PTimeStamp, PBOOLEAN, PSecBuffer);
|
---|
| 340 | typedef NTSTATUS (NTAPI SpDeleteContextFn)(LSA_SEC_HANDLE);
|
---|
| 341 | typedef NTSTATUS (NTAPI SpApplyControlTokenFn)(LSA_SEC_HANDLE, PSecBufferDesc);
|
---|
| 342 | typedef NTSTATUS (NTAPI SpGetUserInfoFn)(PLUID, ULONG, PSecurityUserData *);
|
---|
| 343 | typedef NTSTATUS (NTAPI SpGetExtendedInformationFn)(
|
---|
| 344 | SECPKG_EXTENDED_INFORMATION_CLASS, PSECPKG_EXTENDED_INFORMATION *);
|
---|
| 345 | typedef NTSTATUS (NTAPI SpQueryContextAttributesFn)(LSA_SEC_HANDLE, ULONG,
|
---|
| 346 | PVOID);
|
---|
| 347 | typedef NTSTATUS (NTAPI SpAddCredentialsFn)(LSA_SEC_HANDLE, PUNICODE_STRING,
|
---|
| 348 | PUNICODE_STRING, ULONG, PVOID, PVOID, PVOID, PTimeStamp);
|
---|
| 349 | typedef NTSTATUS (NTAPI SpSetExtendedInformationFn)(
|
---|
| 350 | SECPKG_EXTENDED_INFORMATION_CLASS, PSECPKG_EXTENDED_INFORMATION);
|
---|
| 351 | typedef NTSTATUS (NTAPI SpInstanceInitFn)(ULONG, PSECPKG_DLL_FUNCTIONS,
|
---|
| 352 | PVOID *);
|
---|
| 353 | typedef NTSTATUS (NTAPI SpInitUserModeContextFn)(LSA_SEC_HANDLE, PSecBuffer);
|
---|
| 354 | typedef NTSTATUS (NTAPI SpMakeSignatureFn)(LSA_SEC_HANDLE, ULONG,
|
---|
| 355 | PSecBufferDesc, ULONG);
|
---|
| 356 | typedef NTSTATUS (NTAPI SpVerifySignatureFn)(LSA_SEC_HANDLE, PSecBufferDesc,
|
---|
| 357 | ULONG, PULONG);
|
---|
| 358 | typedef NTSTATUS (NTAPI SpSealMessageFn)(LSA_SEC_HANDLE, ULONG, PSecBufferDesc,
|
---|
| 359 | ULONG);
|
---|
| 360 | typedef NTSTATUS (NTAPI SpUnsealMessageFn)(LSA_SEC_HANDLE, PSecBufferDesc,
|
---|
| 361 | ULONG, PULONG);
|
---|
| 362 | typedef NTSTATUS (NTAPI SpGetContextTokenFn)(LSA_SEC_HANDLE, PHANDLE);
|
---|
| 363 | typedef NTSTATUS (NTAPI SpCompleteAuthTokenFn)(LSA_SEC_HANDLE, PSecBufferDesc);
|
---|
| 364 | typedef NTSTATUS (NTAPI SpFormatCredentialsFn)(PSecBuffer, PSecBuffer);
|
---|
| 365 | typedef NTSTATUS (NTAPI SpMarshallSupplementalCredsFn)(ULONG, PUCHAR, PULONG,
|
---|
| 366 | PVOID *);
|
---|
| 367 | typedef NTSTATUS (NTAPI SpExportSecurityContextFn)(LSA_SEC_HANDLE, ULONG,
|
---|
| 368 | PSecBuffer, PHANDLE);
|
---|
| 369 | typedef NTSTATUS (NTAPI SpImportSecurityContextFn)(PSecBuffer, HANDLE,
|
---|
| 370 | PLSA_SEC_HANDLE);
|
---|
| 371 |
|
---|
| 372 | /* Dispatch tables of functions implemented by SSP/AP */
|
---|
| 373 | typedef struct SECPKG_FUNCTION_TABLE {
|
---|
| 374 | PLSA_AP_INITIALIZE_PACKAGE InitializePackage;
|
---|
| 375 | PLSA_AP_LOGON_USER LogonUser;
|
---|
| 376 | PLSA_AP_CALL_PACKAGE CallPackage;
|
---|
| 377 | PLSA_AP_LOGON_TERMINATED LogonTerminated;
|
---|
| 378 | PLSA_AP_CALL_PACKAGE_UNTRUSTED CallPackageUntrusted;
|
---|
| 379 | PLSA_AP_CALL_PACKAGE_PASSTHROUGH CallPackagePassthrough;
|
---|
| 380 | PLSA_AP_LOGON_USER_EX LogonUserEx;
|
---|
| 381 | PLSA_AP_LOGON_USER_EX2 LogonUserEx2;
|
---|
| 382 | SpInitializeFn *Initialize;
|
---|
| 383 | SpShutDownFn *Shutdown;
|
---|
| 384 | SpGetInfoFn *GetInfo;
|
---|
| 385 | SpAcceptCredentialsFn *AcceptCredentials;
|
---|
| 386 | SpAcquireCredentialsHandleFn *AcquireCredentialsHandle;
|
---|
| 387 | SpQueryCredentialsAttributesFn *QueryCredentialsAttributes;
|
---|
| 388 | SpFreeCredentialsHandleFn *FreeCredentialsHandle;
|
---|
| 389 | SpSaveCredentialsFn *SaveCredentials;
|
---|
| 390 | SpGetCredentialsFn *GetCredentials;
|
---|
| 391 | SpDeleteCredentialsFn *DeleteCredentials;
|
---|
| 392 | SpInitLsaModeContextFn *InitLsaModeContext;
|
---|
| 393 | SpAcceptLsaModeContextFn *AcceptLsaModeContext;
|
---|
| 394 | SpDeleteContextFn *DeleteContext;
|
---|
| 395 | SpApplyControlTokenFn *ApplyControlToken;
|
---|
| 396 | SpGetUserInfoFn *GetUserInfo;
|
---|
| 397 | SpGetExtendedInformationFn *GetExtendedInformation;
|
---|
| 398 | SpQueryContextAttributesFn *QueryContextAttributes;
|
---|
| 399 | SpAddCredentialsFn *AddCredentials;
|
---|
| 400 | SpSetExtendedInformationFn *SetExtendedInformation;
|
---|
| 401 | } SECPKG_FUNCTION_TABLE,
|
---|
| 402 | *PSECPKG_FUNCTION_TABLE;
|
---|
| 403 |
|
---|
| 404 | typedef struct SECPKG_USER_FUNCTION_TABLE {
|
---|
| 405 | SpInstanceInitFn *InstanceInit;
|
---|
| 406 | SpInitUserModeContextFn *InitUserModeContext;
|
---|
| 407 | SpMakeSignatureFn *MakeSignature;
|
---|
| 408 | SpVerifySignatureFn *VerifySignature;
|
---|
| 409 | SpSealMessageFn *SealMessage;
|
---|
| 410 | SpUnsealMessageFn *UnsealMessage;
|
---|
| 411 | SpGetContextTokenFn *GetContextToken;
|
---|
| 412 | SpQueryContextAttributesFn *QueryContextAttributes;
|
---|
| 413 | SpCompleteAuthTokenFn *CompleteAuthToken;
|
---|
| 414 | SpDeleteContextFn *DeleteUserModeContext;
|
---|
| 415 | SpFormatCredentialsFn *FormatCredentials;
|
---|
| 416 | SpMarshallSupplementalCredsFn *MarshallSupplementalCreds;
|
---|
| 417 | SpExportSecurityContextFn *ExportContext;
|
---|
| 418 | SpImportSecurityContextFn *ImportContext;
|
---|
| 419 | } SECPKG_USER_FUNCTION_TABLE,
|
---|
| 420 | *PSECPKG_USER_FUNCTION_TABLE;
|
---|
| 421 |
|
---|
| 422 | /* Entry points to SSP/AP */
|
---|
| 423 | typedef NTSTATUS (NTAPI *SpLsaModeInitializeFn)(ULONG, PULONG,
|
---|
| 424 | PSECPKG_FUNCTION_TABLE *, PULONG);
|
---|
| 425 | typedef NTSTATUS (WINAPI *SpUserModeInitializeFn)(ULONG, PULONG,
|
---|
| 426 | PSECPKG_USER_FUNCTION_TABLE *, PULONG);
|
---|
| 427 |
|
---|
| 428 | #ifdef __cplusplus
|
---|
| 429 | }
|
---|
| 430 | #endif
|
---|
| 431 | #endif /* _NTSECPKG_H */
|
---|