Changeset 988 for vendor/current/librpc/idl/auth.idl

Timestamp:

Nov 24, 2016, 1:14:11 PM (9 years ago)

Author:

Silvan Scherrer

Message:

Samba Server: update vendor to version 4.4.3

File:

• vendor/current/librpc/idl/auth.idl (modified) (6 diffs)

vendor/current/librpc/idl/auth.idl

@@ -2 +2 @@
 
 /*
-  security IDL structures
+  Authentication IDL structures
+
+  These are NOT public network structures, but it is helpful to define
+  these things in IDL. They may change without ABI breakage or
+  warning.
+
 */
 
 import "misc.idl", "security.idl", "lsa.idl", "krb5pac.idl";
+[
+        pyhelper("librpc/ndr/py_auth.c"),
+        helper("../librpc/ndr/ndr_auth.h"),
+        helpstring("internal Samba authentication structures")
+]
 
 interface auth
@@ -18 +28 @@
          * during local privilage and group manipulations */
         typedef [public] struct {
-                utf8string account_name;
-                utf8string domain_name;
+                [unique,charset(UTF8),string] char *account_name;
+                [unique,charset(UTF8),string] char *domain_name;
 
-                utf8string full_name;
-                utf8string logon_script;
-                utf8string profile_path;
-                utf8string home_directory;
-                utf8string home_drive;
-                utf8string logon_server;
+                [unique,charset(UTF8),string] char *full_name;
+                [unique,charset(UTF8),string] char *logon_script;
+                [unique,charset(UTF8),string] char *profile_path;
+                [unique,charset(UTF8),string] char *home_directory;
+                [unique,charset(UTF8),string] char *home_drive;
+                [unique,charset(UTF8),string] char *logon_server;
 
                 NTTIME last_logon;
@@ -48 +58 @@
                 uint32 num_dc_sids;
                 [size_is(num_dc_sids)] dom_sid dc_sids[*];
-                PAC_SIGNATURE_DATA *pac_srv_sig;
-                PAC_SIGNATURE_DATA *pac_kdc_sig;
         } auth_user_info_torture;
 
         typedef [public] struct {
-                utf8string unix_name;
+                [unique,charset(UTF8),string] char *unix_name;
 
                 /*
@@ -62 +70 @@
                  * smb request. See set_current_user_info in source3.
                  */
-                utf8string sanitized_username;
+                [unique,charset(UTF8),string] char *sanitized_username;
         } auth_user_info_unix;
 
@@ -71 +79 @@
                 [size_is(num_sids)] dom_sid sids[*];
                 auth_user_info *info;
-                DATA_BLOB user_session_key;
-                DATA_BLOB lm_session_key;
+                [noprint] DATA_BLOB user_session_key;
+                [noprint] DATA_BLOB lm_session_key;
         } auth_user_info_dc;
 
@@ -80 +88 @@
                 auth_user_info *info;
                 auth_user_info_unix *unix_info;
-                DATA_BLOB session_key;
-                DATA_BLOB exported_gssapi_credentials;
+                [value(NULL), ignore] auth_user_info_torture *torture;
+
+                /* This is the final session key, as used by SMB signing, and
+                 * (truncated to 16 bytes) encryption on the SAMR and LSA pipes
+                 * when over ncacn_np.
+                 * It is calculated by NTLMSSP from the session key in the info3,
+                 * and is  set from the Kerberos session key using
+                 * krb5_auth_con_getremotesubkey().
+                 *
+                 * Bottom line, it is not the same as the session keys in info3.
+                 */
+
+                [noprint] DATA_BLOB session_key;
+
+                [value(NULL), ignore] cli_credentials *credentials;
+        } auth_session_info;
+
+        typedef [public] struct {
+                auth_session_info *session_info;
+                [noprint] DATA_BLOB exported_gssapi_credentials;
         } auth_session_info_transport;
 }