Changeset 988 for vendor/current/librpc/idl/security.idl
- Timestamp:
- Nov 24, 2016, 1:14:11 PM (9 years ago)
- File:
-
- 1 edited
-
vendor/current/librpc/idl/security.idl (modified) (12 diffs)
Legend:
- Unmodified
- Added
- Removed
-
vendor/current/librpc/idl/security.idl
r860 r988 27 27 28 28 [ 29 /* 30 * cbf7d408-2d6c-11e2-ae5b-0b5692790e18 just to make ndrdump happy 31 */ 32 uuid("cbf7d408-2d6c-11e2-ae5b-0b5692790e18"), 33 version(0.0), 29 34 pyhelper("librpc/ndr/py_security.c"), 30 35 pointer_default(unique) … … 148 153 149 154 /* rights granted by some specific privileges */ 150 const int SEC_RIGHTS_PRIV_BACKUP = SEC_STD_READ_CONTROL | 155 const int SEC_RIGHTS_PRIV_BACKUP = SEC_STD_READ_CONTROL | 151 156 SEC_FLAG_SYSTEM_SECURITY | 152 SEC_GENERIC_READ; 153 const int SEC_RIGHTS_DIR_PRIV_BACKUP = SEC_RIGHTS_PRIV_BACKUP 154 | SEC_DIR_TRAVERSE; 155 156 const int SEC_RIGHTS_PRIV_RESTORE = SEC_STD_WRITE_DAC | 157 SEC_RIGHTS_FILE_READ | 158 SEC_DIR_TRAVERSE; 159 160 const int SEC_RIGHTS_PRIV_RESTORE = SEC_STD_WRITE_DAC | 157 161 SEC_STD_WRITE_OWNER | 158 162 SEC_FLAG_SYSTEM_SECURITY | 163 SEC_RIGHTS_FILE_WRITE | 164 SEC_DIR_ADD_FILE | 165 SEC_DIR_ADD_SUBDIR | 159 166 SEC_STD_DELETE; 160 const int SEC_RIGHTS_DIR_PRIV_RESTORE = SEC_RIGHTS_PRIV_RESTORE |161 SEC_DIR_ADD_FILE |162 SEC_DIR_ADD_SUBDIR;163 167 164 168 /* combinations of standard masks. */ … … 270 274 const string SID_BUILTIN_AUTH_ACCESS = "S-1-5-32-560"; 271 275 const string SID_BUILTIN_TS_LICENSE_SERVERS = "S-1-5-32-561"; 276 const string SID_BUILTIN_DISTRIBUTED_COM_USERS = "S-1-5-32-562"; 277 const string SID_BUILTIN_CRYPTO_OPERATORS = "S-1-5-32-569"; 278 const string SID_BUILTIN_EVENT_LOG_READERS = "S-1-5-32-573"; 279 const string SID_BUILTIN_CERT_SERV_DCOM_ACCESS = "S-1-5-32-574"; 272 280 273 281 /* SECURITY_NT_SERVICE */ … … 277 285 const string SID_NT_TRUSTED_INSTALLER = 278 286 "S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464"; 287 288 const string SID_AUTHENTICATION_AUTHORITY_ASSERTED_IDENTITY = "S-1-18-1"; 289 const string SID_SERVICE_ASSERTED_IDENTITY = "S-1-18-2"; 279 290 280 291 /* well-known domain RIDs */ … … 317 328 const int BUILTIN_RID_AUTH_ACCESS = 560; 318 329 const int BUILTIN_RID_TS_LICENSE_SERVERS = 561; 330 const int BUILTIN_RID_DISTRIBUTED_COM_USERS = 562; 331 const int BUILTIN_RID_CRYPTO_OPERATORS = 569; 332 const int BUILTIN_RID_EVENT_LOG_READERS = 573; 333 const int BUILTIN_RID_CERT_SERV_DCOM_ACCESS = 574; 319 334 320 335 /******************************************************************** … … 525 540 security_acl_revision revision; 526 541 [value(ndr_size_security_acl(r,ndr->flags))] uint16 size; 527 [range(0, 1000)] uint32 num_aces;542 [range(0,2000)] uint32 num_aces; 528 543 security_ace aces[num_aces]; 529 544 } security_acl; … … 565 580 } security_descriptor; 566 581 582 [nopython] void decode_security_descriptor ( 583 [in] security_descriptor sd 584 ); 585 567 586 typedef [public] struct { 568 587 [range(0,0x40000),value(ndr_size_security_descriptor(sd,ndr->flags))] uint32 sd_size; … … 570 589 } sec_desc_buf; 571 590 591 [nopython] void decode_sec_desc_buf ( 592 [in] sec_desc_buf sd_buf 593 ); 594 572 595 /* This is not yet sent over the network, but is simply defined in IDL */ 573 typedef [public ,gensize] struct {596 typedef [public] struct { 574 597 uint32 num_sids; 575 598 [size_is(num_sids)] dom_sid sids[*]; … … 578 601 } security_token; 579 602 603 [nopython] void decode_security_token ( 604 [in] security_token token 605 ); 606 580 607 /* This is not yet sent over the network, but is simply defined in IDL */ 581 typedef [public ,gensize] struct {608 typedef [public] struct { 582 609 uid_t uid; 583 uid_t gid;610 gid_t gid; 584 611 uint32 ngroups; 585 612 [size_is(ngroups)] gid_t groups[*]; 586 613 } security_unix_token; 614 615 [nopython] void decode_security_unix_token ( 616 [in] security_unix_token unix_token 617 ); 587 618 588 619 /* bits that determine which parts of a security descriptor … … 603 634 } security_secinfo; 604 635 636 /* 637 * a SMB server should only support the following flags 638 * and ignore all others. 639 * 640 * See AdditionalInformation in [MS-SMB2] 2.2.37 SMB2 QUERY_INFO Request 641 * and 2.2.39 SMB2 SET_INFO Request. 642 */ 643 const int SMB_SUPPORTED_SECINFO_FLAGS = ( 644 SECINFO_OWNER | 645 SECINFO_GROUP | 646 SECINFO_DACL | 647 SECINFO_SACL | 648 SECINFO_LABEL | 649 SECINFO_ATTRIBUTE | 650 SECINFO_SCOPE | 651 SECINFO_BACKUP | 652 0); 653 654 /* 655 * See [MS-KILE] 2.2.5 LSAP_TOKEN_INFO_INTEGRITY 656 */ 657 typedef [public,gensize,flag(NDR_PAHEX)] struct { 658 uint32 Flags; 659 uint32 TokenIL; 660 uint8 MachineId[32]; 661 } LSAP_TOKEN_INFO_INTEGRITY; 662 663 /* 664 * See [MS-KILE] 2.2.6 Supported Encryption Types Bit Flags 665 */ 605 666 typedef [public,bitmap32bit] bitmap { 606 667 KERB_ENCTYPE_DES_CBC_CRC = 0x00000001, … … 608 669 KERB_ENCTYPE_RC4_HMAC_MD5 = 0x00000004, 609 670 KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96 = 0x00000008, 610 KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96 = 0x00000010 671 KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96 = 0x00000010, 672 KERB_ENCTYPE_FAST_SUPPORTED = 0x00010000, 673 KERB_ENCTYPE_COMPOUND_IDENTITY_SUPPORTED = 0x00020000, 674 KERB_ENCTYPE_CLAIMS_SUPPORTED = 0x00040000, 675 KERB_ENCTYPE_RESOURCE_SID_COMPRESSION_DISABLED = 0x00080000 611 676 } kerb_EncTypes; 612 677 … … 629 694 const string GUID_DRS_CHANGE_SCHEMA_MASTER = "e12b56b6-0a95-11d1-adbb-00c04fd8d5cd"; 630 695 const string GUID_DRS_GET_CHANGES = "1131f6aa-9c07-11d1-f79f-00c04fc2dcd2"; 696 const string GUID_DRS_REPL_SYNCRONIZE = "1131f6ab-9c07-11d1-f79f-00c04fc2dcd2"; 697 const string GUID_DRS_MANAGE_TOPOLOGY = "1131f6ac-9c07-11d1-f79f-00c04fc2dcd2"; 631 698 const string GUID_DRS_GET_ALL_CHANGES = "1131f6ad-9c07-11d1-f79f-00c04fc2dcd2"; 699 const string GUID_DRS_RO_REPL_SECRET_SYNC = "1131f6ae-9c07-11d1-f79f-00c04fc2dcd2"; 632 700 const string GUID_DRS_GET_FILTERED_ATTRIBUTES = "89e95b76-444d-4c62-991a-0facbeda640c"; 633 const string GUID_DRS_MANAGE_TOPOLOGY = "1131f6ac-9c07-11d1-f79f-00c04fc2dcd2";634 701 const string GUID_DRS_MONITOR_TOPOLOGY = "f98340fb-7c5b-4cdb-a00b-2ebdfa115a96"; 635 const string GUID_DRS_REPL_SYNCRONIZE = "1131f6ab-9c07-11d1-f79f-00c04fc2dcd2";636 const string GUID_DRS_RO_REPL_SECRET_SYNC = "1131f6ae-9c07-11d1-f79f-00c04fc2dcd2";637 702 const string GUID_DRS_USER_CHANGE_PASSWORD = "ab721a53-1e2f-11d0-9819-00aa0040529b"; 638 703 const string GUID_DRS_FORCE_CHANGE_PASSWORD = "00299570-246d-11d0-a768-00aa006e0529"; 704 const string GUID_DRS_UPDATE_PASSWORD_NOT_REQUIRED_BIT 705 = "280f369c-67c7-438e-ae98-1d46f3c6f541"; 706 const string GUID_DRS_UNEXPIRE_PASSWORD = "ccc2dc7d-a6ad-4a7a-8846-c04e3cc53501"; 707 const string GUID_DRS_ENABLE_PER_USER_REVERSIBLY_ENCRYPTED_PASSWORD 708 = "05c74c5e-4deb-43b4-bd9f-86664c2a7fd5"; 709 const string GUID_DRS_DS_INSTALL_REPLICA = "9923a32a-3607-11d2-b9be-0000f87a36b2"; 710 const string GUID_DRS_REANIMATE_TOMBSTONE = "45ec5156-db7e-47bb-b53f-dbeb2d03c40f"; 711 639 712 640 713 /***************************************************************/
Note:
See TracChangeset
for help on using the changeset viewer.
