ntsecapi.rs - mozsearch

// Licensed under the Apache License, Version 2.0

// <LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0> or the MIT license

// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your option.

// All files in the project carrying such notice may not be copied, modified, or distributed

// except according to those terms.

//! This module defines the Local Security Authority APIs.

use shared::basetsd::{ULONG64, ULONG_PTR};

use shared::guiddef::GUID;

use shared::minwindef::{PUCHAR, PULONG, UCHAR, ULONG, USHORT};

use shared::ntdef::NTSTATUS;

use shared::sspi::SecHandle;

use um::lsalookup::{

    LSA_TRUST_INFORMATION, LSA_UNICODE_STRING, PLSA_TRUST_INFORMATION, PLSA_UNICODE_STRING

};

use um::subauth::{PUNICODE_STRING, STRING, UNICODE_STRING};

use um::winnt::{

    ACCESS_MASK, ANYSIZE_ARRAY, BOOLEAN, HANDLE, LARGE_INTEGER, LONG, LUID, PACL, PCSTR, PCWSTR,

    PSECURITY_DESCRIPTOR, PSID, PSTR, PVOID, PWSTR, QUOTA_LIMITS, SECURITY_INFORMATION, SHORT, SID,

    SID_NAME_USE, STANDARD_RIGHTS_EXECUTE, STANDARD_RIGHTS_READ, STANDARD_RIGHTS_REQUIRED,

    STANDARD_RIGHTS_WRITE, ULONGLONG

};

DEFINE_GUID!{Audit_System_SecurityStateChange,

    0x0cce9210, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_System_SecuritySubsystemExtension,

    0x0cce9211, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_System_Integrity,

    0x0cce9212, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_System_IPSecDriverEvents,

    0x0cce9213, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_System_Others,

    0x0cce9214, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_Logon,

    0x0cce9215, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_Logoff,

    0x0cce9216, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_AccountLockout,

    0x0cce9217, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_IPSecMainMode,

    0x0cce9218, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_IPSecQuickMode,

    0x0cce9219, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_IPSecUserMode,

    0x0cce921a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_SpecialLogon,

    0x0cce921b, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_Others,

    0x0cce921c, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_FileSystem,

    0x0cce921d, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_Registry,

    0x0cce921e, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_Kernel,

    0x0cce921f, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_Sam,

    0x0cce9220, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_CertificationServices,

    0x0cce9221, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_ApplicationGenerated,

    0x0cce9222, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_Handle,

    0x0cce9223, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_Share,

    0x0cce9224, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_FirewallPacketDrops,

    0x0cce9225, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_FirewallConnection,

    0x0cce9226, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_Other,

    0x0cce9227, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PrivilegeUse_Sensitive,

    0x0cce9228, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PrivilegeUse_NonSensitive,

    0x0cce9229, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PrivilegeUse_Others,

    0x0cce922a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DetailedTracking_ProcessCreation,

    0x0cce922b, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DetailedTracking_ProcessTermination,

    0x0cce922c, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DetailedTracking_DpapiActivity,

    0x0cce922d, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DetailedTracking_RpcCall,

    0x0cce922e, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange_AuditPolicy,

    0x0cce922f, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange_AuthenticationPolicy,

    0x0cce9230, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange_AuthorizationPolicy,

    0x0cce9231, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange_MpsscvRulePolicy,

    0x0cce9232, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange_WfpIPSecPolicy,

    0x0cce9233, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange_Others,

    0x0cce9234, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement_UserAccount,

    0x0cce9235, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement_ComputerAccount,

    0x0cce9236, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement_SecurityGroup,

    0x0cce9237, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement_DistributionGroup,

    0x0cce9238, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement_ApplicationGroup,

    0x0cce9239, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement_Others,

    0x0cce923a, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DSAccess_DSAccess,

    0x0cce923b, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DsAccess_AdAuditChanges,

    0x0cce923c, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Ds_Replication,

    0x0cce923d, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Ds_DetailedReplication,

    0x0cce923e, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountLogon_CredentialValidation,

    0x0cce923f, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountLogon_Kerberos,

    0x0cce9240, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountLogon_Others,

    0x0cce9241, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountLogon_KerbCredentialValidation,

    0x0cce9242, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_NPS,

    0x0cce9243, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_DetailedFileShare,

    0x0cce9244, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_RemovableStorage,

    0x0cce9245, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess_CbacStaging,

    0x0cce9246, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon_Claims,

    0x0cce9247, 0x69ae, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_System,

    0x69979848, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_Logon,

    0x69979849, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_ObjectAccess,

    0x6997984a, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PrivilegeUse,

    0x6997984b, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DetailedTracking,

    0x6997984c, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_PolicyChange,

    0x6997984d, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountManagement,

    0x6997984e, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_DirectoryServiceAccess,

    0x6997984f, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

DEFINE_GUID!{Audit_AccountLogon,

    0x69979850, 0x797a, 0x11d9, 0xbe, 0xd3, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30}

ENUM!{enum POLICY_AUDIT_EVENT_TYPE {

    AuditCategorySystem = 0,

    AuditCategoryLogon,

    AuditCategoryObjectAccess,

    AuditCategoryPrivilegeUse,

    AuditCategoryDetailedTracking,

    AuditCategoryPolicyChange,

    AuditCategoryAccountManagement,

    AuditCategoryDirectoryServiceAccess,

    AuditCategoryAccountLogon,

}}

pub type PPOLICY_AUDIT_EVENT_TYPE = *mut POLICY_AUDIT_EVENT_TYPE;

pub const POLICY_AUDIT_EVENT_UNCHANGED: POLICY_AUDIT_EVENT_OPTIONS = 0x00000000;

pub const POLICY_AUDIT_EVENT_SUCCESS: POLICY_AUDIT_EVENT_OPTIONS = 0x00000001;

pub const POLICY_AUDIT_EVENT_FAILURE: POLICY_AUDIT_EVENT_OPTIONS = 0x00000002;

pub const POLICY_AUDIT_EVENT_NONE: POLICY_AUDIT_EVENT_OPTIONS = 0x00000004;

pub const POLICY_AUDIT_EVENT_MASK: POLICY_AUDIT_EVENT_OPTIONS = POLICY_AUDIT_EVENT_SUCCESS

    | POLICY_AUDIT_EVENT_FAILURE | POLICY_AUDIT_EVENT_UNCHANGED | POLICY_AUDIT_EVENT_NONE;

pub const POLICY_VIEW_LOCAL_INFORMATION: ACCESS_MASK = 0x00000001;

pub const POLICY_VIEW_AUDIT_INFORMATION: ACCESS_MASK = 0x00000002;

pub const POLICY_GET_PRIVATE_INFORMATION: ACCESS_MASK = 0x00000004;

pub const POLICY_TRUST_ADMIN: ACCESS_MASK = 0x00000008;

pub const POLICY_CREATE_ACCOUNT: ACCESS_MASK = 0x00000010;

pub const POLICY_CREATE_SECRET: ACCESS_MASK = 0x00000020;

pub const POLICY_CREATE_PRIVILEGE: ACCESS_MASK = 0x00000040;

pub const POLICY_SET_DEFAULT_QUOTA_LIMITS: ACCESS_MASK = 0x00000080;

pub const POLICY_SET_AUDIT_REQUIREMENTS: ACCESS_MASK = 0x00000100;

pub const POLICY_AUDIT_LOG_ADMIN: ACCESS_MASK = 0x00000200;

pub const POLICY_SERVER_ADMIN: ACCESS_MASK = 0x00000400;

pub const POLICY_LOOKUP_NAMES: ACCESS_MASK = 0x00000800;

pub const POLICY_NOTIFICATION: ACCESS_MASK = 0x00001000;

pub const POLICY_ALL_ACCESS: ACCESS_MASK = STANDARD_RIGHTS_REQUIRED

    | POLICY_VIEW_LOCAL_INFORMATION | POLICY_VIEW_AUDIT_INFORMATION

    | POLICY_GET_PRIVATE_INFORMATION | POLICY_TRUST_ADMIN | POLICY_CREATE_ACCOUNT

    | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE | POLICY_SET_DEFAULT_QUOTA_LIMITS

    | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN | POLICY_SERVER_ADMIN

    | POLICY_LOOKUP_NAMES;

pub const POLICY_READ: ACCESS_MASK = STANDARD_RIGHTS_READ | POLICY_VIEW_AUDIT_INFORMATION

    | POLICY_GET_PRIVATE_INFORMATION;

pub const POLICY_WRITE: ACCESS_MASK = STANDARD_RIGHTS_WRITE | POLICY_TRUST_ADMIN

    | POLICY_CREATE_ACCOUNT | POLICY_CREATE_SECRET | POLICY_CREATE_PRIVILEGE

    | POLICY_SET_DEFAULT_QUOTA_LIMITS | POLICY_SET_AUDIT_REQUIREMENTS | POLICY_AUDIT_LOG_ADMIN

    | POLICY_SERVER_ADMIN;

pub const POLICY_EXECUTE: ACCESS_MASK = STANDARD_RIGHTS_EXECUTE

    | POLICY_VIEW_LOCAL_INFORMATION | POLICY_LOOKUP_NAMES;

STRUCT!{struct LSA_TRANSLATED_SID {

    Use: SID_NAME_USE,

    RelativeId: ULONG,

    DomainIndex: LONG,

}}

pub type PLSA_TRANSLATED_SID = *mut LSA_TRANSLATED_SID;

ENUM!{enum POLICY_LSA_SERVER_ROLE {

    PolicyServerRoleBackup = 2,

    PolicyServerRolePrimary,

}}

pub type PPOLICY_LSA_SERVER_ROLE = *mut POLICY_LSA_SERVER_ROLE;

pub type POLICY_AUDIT_EVENT_OPTIONS = ULONG;

pub type PPOLICY_AUDIT_EVENT_OPTIONS = *mut ULONG;

ENUM!{enum POLICY_INFORMATION_CLASS {

    PolicyAuditLogInformation = 1,

    PolicyAuditEventsInformation,

    PolicyPrimaryDomainInformation,

    PolicyPdAccountInformation,

    PolicyAccountDomainInformation,

    PolicyLsaServerRoleInformation,

    PolicyReplicaSourceInformation,

    PolicyDefaultQuotaInformation,

    PolicyModificationInformation,

    PolicyAuditFullSetInformation,

    PolicyAuditFullQueryInformation,

    PolicyDnsDomainInformation,

    PolicyDnsDomainInformationInt,

    PolicyLocalAccountDomainInformation,

    PolicyLastEntry,

}}

pub type PPOLICY_INFORMATION_CLASS = *mut POLICY_INFORMATION_CLASS;

STRUCT!{struct POLICY_AUDIT_LOG_INFO {

    AuditLogPercentFull: ULONG,

    MaximumLogSize: ULONG,

    AuditRetentionPeriod: LARGE_INTEGER,

    AuditLogFullShutdownInProgress: BOOLEAN,

    TimeToShutdown: LARGE_INTEGER,

    NextAuditRecordId: ULONG,

}}

pub type PPOLICY_AUDIT_LOG_INFO = *mut POLICY_AUDIT_LOG_INFO;

STRUCT!{struct POLICY_AUDIT_EVENTS_INFO {

    AuditingMode: BOOLEAN,

    EventAuditingOptions: PPOLICY_AUDIT_EVENT_OPTIONS,

    MaximumAuditEventCount: ULONG,

}}

pub type PPOLICY_AUDIT_EVENTS_INFO = *mut POLICY_AUDIT_EVENTS_INFO;

STRUCT!{struct POLICY_AUDIT_SUBCATEGORIES_INFO {

    MaximumSubCategoryCount: ULONG,

    EventAuditingOptions: PPOLICY_AUDIT_EVENT_OPTIONS,

}}

pub type PPOLICY_AUDIT_SUBCATEGORIES_INFO = *mut POLICY_AUDIT_SUBCATEGORIES_INFO;

STRUCT!{struct POLICY_AUDIT_CATEGORIES_INFO {

    MaximumSubCategoryCount: ULONG,

    SubCategoriesInfo: PPOLICY_AUDIT_SUBCATEGORIES_INFO,

}}

pub type PPOLICY_AUDIT_CATEGORIES_INFO = *mut POLICY_AUDIT_CATEGORIES_INFO;

pub const PER_USER_POLICY_UNCHANGED: ULONG = 0x00;

pub const PER_USER_AUDIT_SUCCESS_INCLUDE: ULONG = 0x01;

pub const PER_USER_AUDIT_SUCCESS_EXCLUDE: ULONG = 0x02;

pub const PER_USER_AUDIT_FAILURE_INCLUDE: ULONG = 0x04;

pub const PER_USER_AUDIT_FAILURE_EXCLUDE: ULONG = 0x08;

pub const PER_USER_AUDIT_NONE: ULONG = 0x10;

pub const VALID_PER_USER_AUDIT_POLICY_FLAG: ULONG = PER_USER_AUDIT_SUCCESS_INCLUDE

    | PER_USER_AUDIT_SUCCESS_EXCLUDE | PER_USER_AUDIT_FAILURE_INCLUDE

    | PER_USER_AUDIT_FAILURE_EXCLUDE | PER_USER_AUDIT_NONE;

STRUCT!{struct POLICY_PRIMARY_DOMAIN_INFO {

    Name: LSA_UNICODE_STRING,

    Sid: PSID,

}}

pub type PPOLICY_PRIMARY_DOMAIN_INFO = *mut POLICY_PRIMARY_DOMAIN_INFO;

STRUCT!{struct POLICY_PD_ACCOUNT_INFO {

    Name: LSA_UNICODE_STRING,

}}

pub type PPOLICY_PD_ACCOUNT_INFO = *mut POLICY_PD_ACCOUNT_INFO;

STRUCT!{struct POLICY_LSA_SERVER_ROLE_INFO {

    LsaServerRole: POLICY_LSA_SERVER_ROLE,

}}

pub type PPOLICY_LSA_SERVER_ROLE_INFO = *mut POLICY_LSA_SERVER_ROLE_INFO;

STRUCT!{struct POLICY_REPLICA_SOURCE_INFO {

    ReplicaSource: LSA_UNICODE_STRING,

    ReplicaAccountName: LSA_UNICODE_STRING,

}}

pub type PPOLICY_REPLICA_SOURCE_INFO = *mut POLICY_REPLICA_SOURCE_INFO;

STRUCT!{struct POLICY_DEFAULT_QUOTA_INFO {

    QuotaLimits: QUOTA_LIMITS,

}}

pub type PPOLICY_DEFAULT_QUOTA_INFO = *mut POLICY_DEFAULT_QUOTA_INFO;

STRUCT!{struct POLICY_MODIFICATION_INFO {

    ModifiedId: LARGE_INTEGER,

    DatabaseCreationTime: LARGE_INTEGER,

}}

pub type PPOLICY_MODIFICATION_INFO = *mut POLICY_MODIFICATION_INFO;

STRUCT!{struct POLICY_AUDIT_FULL_SET_INFO {

    ShutDownOnFull: BOOLEAN,

}}

pub type PPOLICY_AUDIT_FULL_SET_INFO = *mut POLICY_AUDIT_FULL_SET_INFO;

STRUCT!{struct POLICY_AUDIT_FULL_QUERY_INFO {

    ShutDownOnFull: BOOLEAN,

    LogIsFull: BOOLEAN,

}}

pub type PPOLICY_AUDIT_FULL_QUERY_INFO = *mut POLICY_AUDIT_FULL_QUERY_INFO;

ENUM!{enum POLICY_DOMAIN_INFORMATION_CLASS {

    PolicyDomainEfsInformation = 2,

    PolicyDomainKerberosTicketInformation,

}}

pub type PPOLICY_DOMAIN_INFORMATION_CLASS = *mut POLICY_DOMAIN_INFORMATION_CLASS;

STRUCT!{struct POLICY_DOMAIN_EFS_INFO {

    InfoLength: ULONG,

    EfsBlob: PUCHAR,

}}

pub type PPOLICY_DOMAIN_EFS_INFO = *mut POLICY_DOMAIN_EFS_INFO;

STRUCT!{struct POLICY_DOMAIN_KERBEROS_TICKET_INFO {

    AuthenticationOptions: ULONG,

    MaxServiceTicketAge: LARGE_INTEGER,

    MaxTicketAge: LARGE_INTEGER,

    MaxRenewAge: LARGE_INTEGER,

    MaxClockSkew: LARGE_INTEGER,

    Reserved: LARGE_INTEGER,

}}

pub type PPOLICY_DOMAIN_KERBEROS_TICKET_INFO = *mut POLICY_DOMAIN_KERBEROS_TICKET_INFO;

ENUM!{enum POLICY_NOTIFICATION_INFORMATION_CLASS {

    PolicyNotifyAuditEventsInformation = 1,

    PolicyNotifyAccountDomainInformation,

    PolicyNotifyServerRoleInformation,

    PolicyNotifyDnsDomainInformation,

    PolicyNotifyDomainEfsInformation,

    PolicyNotifyDomainKerberosTicketInformation,

    PolicyNotifyMachineAccountPasswordInformation,

    PolicyNotifyGlobalSaclInformation,

    PolicyNotifyMax,

}}

pub type PPOLICY_NOTIFICATION_INFORMATION_CLASS = *mut POLICY_NOTIFICATION_INFORMATION_CLASS;

pub type LSA_HANDLE = PVOID;

pub type PLSA_HANDLE = *mut PVOID;

ENUM!{enum TRUSTED_INFORMATION_CLASS {

    TrustedDomainNameInformation = 1,

    TrustedControllersInformation,

    TrustedPosixOffsetInformation,

    TrustedPasswordInformation,

    TrustedDomainInformationBasic,

    TrustedDomainInformationEx,

    TrustedDomainAuthInformation,

    TrustedDomainFullInformation,

    TrustedDomainAuthInformationInternal,

    TrustedDomainFullInformationInternal,

    TrustedDomainInformationEx2Internal,

    TrustedDomainFullInformation2Internal,

    TrustedDomainSupportedEncryptionTypes,

}}

pub type PTRUSTED_INFORMATION_CLASS = *mut TRUSTED_INFORMATION_CLASS;

STRUCT!{struct TRUSTED_DOMAIN_NAME_INFO {

    Name: LSA_UNICODE_STRING,

}}

pub type PTRUSTED_DOMAIN_NAME_INFO = *mut TRUSTED_DOMAIN_NAME_INFO;

STRUCT!{struct TRUSTED_CONTROLLERS_INFO {

    Entries: ULONG,

    Names: PLSA_UNICODE_STRING,

}}

pub type PTRUSTED_CONTROLLERS_INFO = *mut TRUSTED_CONTROLLERS_INFO;

STRUCT!{struct TRUSTED_POSIX_OFFSET_INFO {

    Offset: ULONG,

}}

pub type PTRUSTED_POSIX_OFFSET_INFO = *mut TRUSTED_POSIX_OFFSET_INFO;

STRUCT!{struct TRUSTED_PASSWORD_INFO {

    Password: LSA_UNICODE_STRING,

    OldPassword: LSA_UNICODE_STRING,

}}

pub type PTRUSTED_PASSWORD_INFO = *mut TRUSTED_PASSWORD_INFO;

pub type TRUSTED_DOMAIN_INFORMATION_BASIC = LSA_TRUST_INFORMATION;

pub type PTRUSTED_DOMAIN_INFORMATION_BASIC = PLSA_TRUST_INFORMATION;

pub const TRUST_DIRECTION_DISABLED: ULONG = 0x00000000;

pub const TRUST_DIRECTION_INBOUND: ULONG = 0x00000001;

pub const TRUST_DIRECTION_OUTBOUND: ULONG = 0x00000002;

pub const TRUST_DIRECTION_BIDIRECTIONAL: ULONG = TRUST_DIRECTION_INBOUND

    | TRUST_DIRECTION_OUTBOUND;

pub const TRUST_TYPE_DOWNLEVEL: ULONG = 0x00000001;

pub const TRUST_TYPE_UPLEVEL: ULONG = 0x00000002;

pub const TRUST_TYPE_MIT: ULONG = 0x00000003;

pub const TRUST_ATTRIBUTE_NON_TRANSITIVE: ULONG = 0x00000001;

pub const TRUST_ATTRIBUTE_UPLEVEL_ONLY: ULONG = 0x00000002;

pub const TRUST_ATTRIBUTE_QUARANTINED_DOMAIN: ULONG = 0x00000004;

pub const TRUST_ATTRIBUTE_FOREST_TRANSITIVE: ULONG = 0x00000008;

pub const TRUST_ATTRIBUTE_CROSS_ORGANIZATION: ULONG = 0x00000010;

pub const TRUST_ATTRIBUTE_WITHIN_FOREST: ULONG = 0x00000020;

pub const TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL: ULONG = 0x00000040;

pub const TRUST_ATTRIBUTE_TRUST_USES_RC4_ENCRYPTION: ULONG = 0x00000080;

pub const TRUST_ATTRIBUTE_TRUST_USES_AES_KEYS: ULONG = 0x00000100;

pub const TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION: ULONG = 0x00000200;

pub const TRUST_ATTRIBUTES_VALID: ULONG = 0xFF03FFFF;

pub const TRUST_ATTRIBUTES_USER: ULONG = 0xFF000000;

STRUCT!{struct TRUSTED_DOMAIN_INFORMATION_EX {

    Name: LSA_UNICODE_STRING,

    FlatName: LSA_UNICODE_STRING,

    Sid: PSID,

    TrustDirection: ULONG,

    TrustType: ULONG,

    TrustAttributes: ULONG,

}}

pub type PTRUSTED_DOMAIN_INFORMATION_EX = *mut TRUSTED_DOMAIN_INFORMATION_EX;

STRUCT!{struct TRUSTED_DOMAIN_INFORMATION_EX2 {

    Name: LSA_UNICODE_STRING,

    FlatName: LSA_UNICODE_STRING,

    Sid: PSID,

    TrustDirection: ULONG,

    TrustType: ULONG,

    TrustAttributes: ULONG,

    ForestTrustLength: ULONG,

    ForestTrustInfo: PUCHAR,

}}

pub type PTRUSTED_DOMAIN_INFORMATION_EX2 = *mut TRUSTED_DOMAIN_INFORMATION_EX2;

pub const TRUST_AUTH_TYPE_NONE: ULONG = 0;

pub const TRUST_AUTH_TYPE_NT4OWF: ULONG = 1;

pub const TRUST_AUTH_TYPE_CLEAR: ULONG = 2;

pub const TRUST_AUTH_TYPE_VERSION: ULONG = 3;

STRUCT!{struct LSA_AUTH_INFORMATION {

    LastUpdateTime: LARGE_INTEGER,

    AuthType: ULONG,

    AuthInfoLength: ULONG,

    AuthInfo: PUCHAR,

}}

pub type PLSA_AUTH_INFORMATION = *mut LSA_AUTH_INFORMATION;

STRUCT!{struct TRUSTED_DOMAIN_AUTH_INFORMATION {

    IncomingAuthInfos: ULONG,

    IncomingAuthenticationInformation: PLSA_AUTH_INFORMATION,

    IncomingPreviousAuthenticationInformation: PLSA_AUTH_INFORMATION,

    OutgoingAuthInfos: ULONG,

    OutgoingAuthenticationInformation: PLSA_AUTH_INFORMATION,

    OutgoingPreviousAuthenticationInformation: PLSA_AUTH_INFORMATION,

}}

pub type PTRUSTED_DOMAIN_AUTH_INFORMATION = *mut TRUSTED_DOMAIN_AUTH_INFORMATION;

STRUCT!{struct TRUSTED_DOMAIN_FULL_INFORMATION {

    Information: TRUSTED_DOMAIN_INFORMATION_EX,

    PosixOffset: TRUSTED_POSIX_OFFSET_INFO,

    AuthInformation: TRUSTED_DOMAIN_AUTH_INFORMATION,

}}

pub type PTRUSTED_DOMAIN_FULL_INFORMATION = *mut TRUSTED_DOMAIN_FULL_INFORMATION;

STRUCT!{struct TRUSTED_DOMAIN_FULL_INFORMATION2 {

    Information: TRUSTED_DOMAIN_INFORMATION_EX2,

    PosixOffset: TRUSTED_POSIX_OFFSET_INFO,

    AuthInformation: TRUSTED_DOMAIN_AUTH_INFORMATION,

}}

pub type PTRUSTED_DOMAIN_FULL_INFORMATION2 = *mut TRUSTED_DOMAIN_FULL_INFORMATION2;

STRUCT!{struct TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES {

    SupportedEncryptionTypes: ULONG,

}}

pub type PTRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES =

    *mut TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES;

ENUM!{enum LSA_FOREST_TRUST_RECORD_TYPE {

    ForestTrustTopLevelName,

    ForestTrustTopLevelNameEx,

    ForestTrustDomainInfo,

    ForestTrustRecordTypeLast, // = ForestTrustDomainInfo,

}}

pub const LSA_FTRECORD_DISABLED_REASONS: ULONG = 0x0000FFFF;

pub const LSA_TLN_DISABLED_NEW: ULONG = 0x00000001;

pub const LSA_TLN_DISABLED_ADMIN: ULONG = 0x00000002;

pub const LSA_TLN_DISABLED_CONFLICT: ULONG = 0x00000004;

pub const LSA_SID_DISABLED_ADMIN: ULONG = 0x00000001;

pub const LSA_SID_DISABLED_CONFLICT: ULONG = 0x00000002;

pub const LSA_NB_DISABLED_ADMIN: ULONG = 0x00000004;

pub const LSA_NB_DISABLED_CONFLICT: ULONG = 0x00000008;

STRUCT!{struct LSA_FOREST_TRUST_DOMAIN_INFO {

    Sid: PSID,

    DnsName: LSA_UNICODE_STRING,

    NetbiosName: LSA_UNICODE_STRING,

}}

pub type PLSA_FOREST_TRUST_DOMAIN_INFO = *mut LSA_FOREST_TRUST_DOMAIN_INFO;

pub const MAX_FOREST_TRUST_BINARY_DATA_SIZE: ULONG = 128 * 1024;

STRUCT!{struct LSA_FOREST_TRUST_BINARY_DATA {

    Length: ULONG,

    Buffer: PUCHAR,

}}

pub type PLSA_FOREST_TRUST_BINARY_DATA = *mut LSA_FOREST_TRUST_BINARY_DATA;

UNION!{union LSA_FOREST_TRUST_RECORD_ForestTrustData {

    [usize; 5],

    TopLevelName TopLevelName_mut: LSA_UNICODE_STRING,

    DomainInfo DomainInfo_mut: LSA_FOREST_TRUST_DOMAIN_INFO,

    Data Data_mut: LSA_FOREST_TRUST_BINARY_DATA,

}}

STRUCT!{struct LSA_FOREST_TRUST_RECORD {

    Flags: ULONG,

    ForestTrustType: LSA_FOREST_TRUST_RECORD_TYPE,

    Time: LARGE_INTEGER,

    ForestTrustData: LSA_FOREST_TRUST_RECORD_ForestTrustData,

}}

pub type PLSA_FOREST_TRUST_RECORD = *mut LSA_FOREST_TRUST_RECORD;

pub const MAX_RECORDS_IN_FOREST_TRUST_INFO: ULONG = 4000;

STRUCT!{struct LSA_FOREST_TRUST_INFORMATION {

    RecordCount: ULONG,

    Entries: *mut PLSA_FOREST_TRUST_RECORD,

}}

pub type PLSA_FOREST_TRUST_INFORMATION = *mut LSA_FOREST_TRUST_INFORMATION;

ENUM!{enum LSA_FOREST_TRUST_COLLISION_RECORD_TYPE {

    CollisionTdo,

    CollisionXref,

    CollisionOther,

}}

STRUCT!{struct LSA_FOREST_TRUST_COLLISION_RECORD {

    Index: ULONG,

    Type: LSA_FOREST_TRUST_COLLISION_RECORD_TYPE,

    Flags: ULONG,

    Name: LSA_UNICODE_STRING,

}}

pub type PLSA_FOREST_TRUST_COLLISION_RECORD = *mut LSA_FOREST_TRUST_COLLISION_RECORD;

STRUCT!{struct LSA_FOREST_TRUST_COLLISION_INFORMATION {

    RecordCount: ULONG,

    Entries: *mut PLSA_FOREST_TRUST_COLLISION_RECORD,

}}

pub type PLSA_FOREST_TRUST_COLLISION_INFORMATION = *mut LSA_FOREST_TRUST_COLLISION_INFORMATION;

pub type LSA_ENUMERATION_HANDLE = ULONG;

pub type PLSA_ENUMERATION_HANDLE = *mut ULONG;

STRUCT!{struct LSA_ENUMERATION_INFORMATION {

    Sid: PSID,

}}

pub type PLSA_ENUMERATION_INFORMATION = *mut LSA_ENUMERATION_INFORMATION;

STRUCT!{struct LSA_LAST_INTER_LOGON_INFO {

    LastSuccessfulLogon: LARGE_INTEGER,

    LastFailedLogon: LARGE_INTEGER,

    FailedAttemptCountSinceLastSuccessfulLogon: ULONG,

}}

pub type PLSA_LAST_INTER_LOGON_INFO = *mut LSA_LAST_INTER_LOGON_INFO;

STRUCT!{struct SECURITY_LOGON_SESSION_DATA {

    Size: ULONG,

    LogonId: LUID,

    UserName: LSA_UNICODE_STRING,

    LogonDomain: LSA_UNICODE_STRING,

    AuthenticationPackage: LSA_UNICODE_STRING,

    LogonType: ULONG,

    Session: ULONG,

    Sid: PSID,

    LogonTime: LARGE_INTEGER,

    LogonServer: LSA_UNICODE_STRING,

    DnsDomainName: LSA_UNICODE_STRING,

    Upn: LSA_UNICODE_STRING,

    UserFlags: ULONG,

    LastLogonInfo: LSA_LAST_INTER_LOGON_INFO,

    LogonScript: LSA_UNICODE_STRING,

    ProfilePath: LSA_UNICODE_STRING,

    HomeDirectory: LSA_UNICODE_STRING,

    HomeDirectoryDrive: LSA_UNICODE_STRING,

    LogoffTime: LARGE_INTEGER,

    KickOffTime: LARGE_INTEGER,

    PasswordLastSet: LARGE_INTEGER,

    PasswordCanChange: LARGE_INTEGER,

    PasswordMustChange: LARGE_INTEGER,

}}

pub type PSECURITY_LOGON_SESSION_DATA = *mut SECURITY_LOGON_SESSION_DATA;

pub const CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG: ULONG = 0x00000001;

pub const CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG: ULONG = 0x00000100;

pub const CENTRAL_ACCESS_POLICY_STAGED_FLAG: ULONG = 0x00010000;

pub const CENTRAL_ACCESS_POLICY_VALID_FLAG_MASK: ULONG =

    CENTRAL_ACCESS_POLICY_OWNER_RIGHTS_PRESENT_FLAG

    | CENTRAL_ACCESS_POLICY_STAGED_OWNER_RIGHTS_PRESENT_FLAG

    | CENTRAL_ACCESS_POLICY_STAGED_FLAG;

pub const LSASETCAPS_RELOAD_FLAG: ULONG = 0x00000001;

pub const LSASETCAPS_VALID_FLAG_MASK: ULONG = LSASETCAPS_RELOAD_FLAG;

STRUCT!{struct CENTRAL_ACCESS_POLICY_ENTRY {

    Name: LSA_UNICODE_STRING,

    Description: LSA_UNICODE_STRING,

    ChangeId: LSA_UNICODE_STRING,

    LengthAppliesTo: ULONG,

    AppliesTo: PUCHAR,

    LengthSD: ULONG,

    SD: PSECURITY_DESCRIPTOR,

    LengthStagedSD: ULONG,

    StagedSD: PSECURITY_DESCRIPTOR,

    Flags: ULONG,

}}

pub type PCENTRAL_ACCESS_POLICY_ENTRY = *mut CENTRAL_ACCESS_POLICY_ENTRY;

pub type PCCENTRAL_ACCESS_POLICY_ENTRY = *const CENTRAL_ACCESS_POLICY_ENTRY;

STRUCT!{struct CENTRAL_ACCESS_POLICY {

    CAPID: PSID,

    Name: LSA_UNICODE_STRING,

    Description: LSA_UNICODE_STRING,

    ChangeId: LSA_UNICODE_STRING,

    Flags: ULONG,

    CAPECount: ULONG,

    CAPEs: *mut PCENTRAL_ACCESS_POLICY_ENTRY,

}}

pub type PCENTRAL_ACCESS_POLICY = *mut CENTRAL_ACCESS_POLICY;

pub type PCCENTRAL_ACCESS_POLICY = *const CENTRAL_ACCESS_POLICY;

ENUM!{enum NEGOTIATE_MESSAGES {

    NegEnumPackagePrefixes = 0,

    NegGetCallerName = 1,

    NegTransferCredentials = 2,

    NegCallPackageMax,

}}

pub const NEGOTIATE_MAX_PREFIX: usize = 32;

STRUCT!{struct NEGOTIATE_PACKAGE_PREFIX {

    PackageId: ULONG_PTR,

    PackageDataA: PVOID,

    PackageDataW: PVOID,

    PrefixLen: ULONG_PTR,

    Prefix: [UCHAR; NEGOTIATE_MAX_PREFIX],

}}

pub type PNEGOTIATE_PACKAGE_PREFIX = *mut NEGOTIATE_PACKAGE_PREFIX;

STRUCT!{struct NEGOTIATE_PACKAGE_PREFIXES {

    MessageType: ULONG,

    PrefixCount: ULONG,

    Offset: ULONG,

    Pad: ULONG,

}}

pub type PNEGOTIATE_PACKAGE_PREFIXES = *mut NEGOTIATE_PACKAGE_PREFIXES;

STRUCT!{struct NEGOTIATE_CALLER_NAME_REQUEST {

    MessageType: ULONG,

    LogonId: LUID,

}}

pub type PNEGOTIATE_CALLER_NAME_REQUEST = *mut NEGOTIATE_CALLER_NAME_REQUEST;

STRUCT!{struct NEGOTIATE_CALLER_NAME_RESPONSE {

    MessageType: ULONG,

    CallerName: PWSTR,

}}

pub type PNEGOTIATE_CALLER_NAME_RESPONSE = *mut NEGOTIATE_CALLER_NAME_RESPONSE;

STRUCT!{struct DOMAIN_PASSWORD_INFORMATION {

    MinPasswordLength: USHORT,

    PasswordHistoryLength: USHORT,

    PasswordProperties: ULONG,

    MaxPasswordAge: LARGE_INTEGER,

    MinPasswordAge: LARGE_INTEGER,

}}

pub type PDOMAIN_PASSWORD_INFORMATION = *mut DOMAIN_PASSWORD_INFORMATION;

pub const DOMAIN_PASSWORD_COMPLEX: ULONG = 0x00000001;

pub const DOMAIN_PASSWORD_NO_ANON_CHANGE: ULONG = 0x00000002;

pub const DOMAIN_PASSWORD_NO_CLEAR_CHANGE: ULONG = 0x00000004;

pub const DOMAIN_LOCKOUT_ADMINS: ULONG = 0x00000008;

pub const DOMAIN_PASSWORD_STORE_CLEARTEXT: ULONG = 0x00000010;

pub const DOMAIN_REFUSE_PASSWORD_CHANGE: ULONG = 0x00000020;

pub const DOMAIN_NO_LM_OWF_CHANGE: ULONG = 0x00000040;

FN!{stdcall PSAM_PASSWORD_NOTIFICATION_ROUTINE(

    UserName: PUNICODE_STRING,

    RelativeId: ULONG,

    NewPassword: PUNICODE_STRING,

) -> NTSTATUS}

FN!{stdcall PSAM_INIT_NOTIFICATION_ROUTINE() -> BOOLEAN}

FN!{stdcall PSAM_PASSWORD_FILTER_ROUTINE(

    AccountName: PUNICODE_STRING,

    FullName: PUNICODE_STRING,

    Password: PUNICODE_STRING,

    SetOperation: BOOLEAN,

) -> BOOLEAN}

ENUM!{enum MSV1_0_LOGON_SUBMIT_TYPE {

    MsV1_0InteractiveLogon = 2,

    MsV1_0Lm20Logon,

    MsV1_0NetworkLogon,

    MsV1_0SubAuthLogon,

    MsV1_0WorkstationUnlockLogon = 7,

    MsV1_0S4ULogon = 12,

    MsV1_0VirtualLogon = 82,

    MsV1_0NoElevationLogon = 83,

    MsV1_0LuidLogon = 84,

}}

pub type PMSV1_0_LOGON_SUBMIT_TYPE = *mut MSV1_0_LOGON_SUBMIT_TYPE;

ENUM!{enum MSV1_0_PROFILE_BUFFER_TYPE {

    MsV1_0InteractiveProfile = 2,

    MsV1_0Lm20LogonProfile,

    MsV1_0SmartCardProfile,

}}

pub type PMSV1_0_PROFILE_BUFFER_TYPE = *mut MSV1_0_PROFILE_BUFFER_TYPE;

STRUCT!{struct MSV1_0_INTERACTIVE_LOGON {

    MessageType: MSV1_0_LOGON_SUBMIT_TYPE,

    LogonDomainName: UNICODE_STRING,

    UserName: UNICODE_STRING,

    Password: UNICODE_STRING,

}}

pub type PMSV1_0_INTERACTIVE_LOGON = *mut MSV1_0_INTERACTIVE_LOGON;

STRUCT!{struct MSV1_0_INTERACTIVE_PROFILE {

    MessageType: MSV1_0_PROFILE_BUFFER_TYPE,

    LogonCount: USHORT,

    BadPasswordCount: USHORT,

    LogonTime: LARGE_INTEGER,

    LogoffTime: LARGE_INTEGER,

    KickOffTime: LARGE_INTEGER,

    PasswordLastSet: LARGE_INTEGER,

    PasswordCanChange: LARGE_INTEGER,

    PasswordMustChange: LARGE_INTEGER,

    LogonScript: UNICODE_STRING,

    HomeDirectory: UNICODE_STRING,

    FullName: UNICODE_STRING,

    ProfilePath: UNICODE_STRING,

    HomeDirectoryDrive: UNICODE_STRING,

    LogonServer: UNICODE_STRING,

    UserFlags: ULONG,

}}

pub type PMSV1_0_INTERACTIVE_PROFILE = *mut MSV1_0_INTERACTIVE_PROFILE;

pub const MSV1_0_CHALLENGE_LENGTH: usize = 8;

pub const MSV1_0_USER_SESSION_KEY_LENGTH: usize = 16;

pub const MSV1_0_LANMAN_SESSION_KEY_LENGTH: usize = 8;

pub const MSV1_0_CLEARTEXT_PASSWORD_ALLOWED: ULONG = 0x02;

pub const MSV1_0_UPDATE_LOGON_STATISTICS: ULONG = 0x04;

pub const MSV1_0_RETURN_USER_PARAMETERS: ULONG = 0x08;

pub const MSV1_0_DONT_TRY_GUEST_ACCOUNT: ULONG = 0x10;

pub const MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT: ULONG = 0x20;

pub const MSV1_0_RETURN_PASSWORD_EXPIRY: ULONG = 0x40;

pub const MSV1_0_USE_CLIENT_CHALLENGE: ULONG = 0x80;

pub const MSV1_0_TRY_GUEST_ACCOUNT_ONLY: ULONG = 0x100;

pub const MSV1_0_RETURN_PROFILE_PATH: ULONG = 0x200;

pub const MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY: ULONG = 0x400;

pub const MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT: ULONG = 0x800;

pub const MSV1_0_DISABLE_PERSONAL_FALLBACK: ULONG = 0x00001000;

pub const MSV1_0_ALLOW_FORCE_GUEST: ULONG = 0x00002000;

pub const MSV1_0_CLEARTEXT_PASSWORD_SUPPLIED: ULONG = 0x00004000;

pub const MSV1_0_USE_DOMAIN_FOR_ROUTING_ONLY: ULONG = 0x00008000;

pub const MSV1_0_SUBAUTHENTICATION_DLL_EX: ULONG = 0x00100000;

pub const MSV1_0_ALLOW_MSVCHAPV2: ULONG = 0x00010000;

pub const MSV1_0_S4U2SELF: ULONG = 0x00020000;

pub const MSV1_0_CHECK_LOGONHOURS_FOR_S4U: ULONG = 0x00040000;

pub const MSV1_0_INTERNET_DOMAIN: ULONG = 0x00080000;

pub const MSV1_0_SUBAUTHENTICATION_DLL: ULONG = 0xFF000000;

pub const MSV1_0_SUBAUTHENTICATION_DLL_SHIFT: ULONG = 24;

pub const MSV1_0_MNS_LOGON: ULONG = 0x01000000;

pub const MSV1_0_SUBAUTHENTICATION_DLL_RAS: ULONG = 2;

pub const MSV1_0_SUBAUTHENTICATION_DLL_IIS: ULONG = 132;

STRUCT!{struct MSV1_0_LM20_LOGON {

    MessageType: MSV1_0_LOGON_SUBMIT_TYPE,

    LogonDomainName: UNICODE_STRING,

    UserName: UNICODE_STRING,

    Workstation: UNICODE_STRING,

    ChallengeToClient: [UCHAR; MSV1_0_CHALLENGE_LENGTH],

    CaseSensitiveChallengeResponse: STRING,

    CaseInsensitiveChallengeResponse: STRING,

    ParameterControl: ULONG,

}}

pub type PMSV1_0_LM20_LOGON = *mut MSV1_0_LM20_LOGON;

STRUCT!{struct MSV1_0_SUBAUTH_LOGON {

    MessageType: MSV1_0_LOGON_SUBMIT_TYPE,

    LogonDomainName: UNICODE_STRING,

    UserName: UNICODE_STRING,

    Workstation: UNICODE_STRING,

    ChallengeToClient: [UCHAR; MSV1_0_CHALLENGE_LENGTH],

    AuthenticationInfo1: STRING,

    AuthenticationInfo2: STRING,

    ParameterControl: ULONG,

    SubAuthPackageId: ULONG,

}}

pub type PMSV1_0_SUBAUTH_LOGON = *mut MSV1_0_SUBAUTH_LOGON;

STRUCT!{struct MSV1_0_S4U_LOGON {

    MessageType: MSV1_0_LOGON_SUBMIT_TYPE,

    MSV1_0_LOGON_SUBMIT_TYPE: ULONG,

    UserPrincipalName: UNICODE_STRING,

    DomainName: UNICODE_STRING,

}}

pub type PMSV1_0_S4U_LOGON = *mut MSV1_0_S4U_LOGON;

pub const LOGON_GUEST: ULONG = 0x01;

pub const LOGON_NOENCRYPTION: ULONG = 0x02;

pub const LOGON_CACHED_ACCOUNT: ULONG = 0x04;

pub const LOGON_USED_LM_PASSWORD: ULONG = 0x08;

pub const LOGON_EXTRA_SIDS: ULONG = 0x20;

pub const LOGON_SUBAUTH_SESSION_KEY: ULONG = 0x40;

pub const LOGON_SERVER_TRUST_ACCOUNT: ULONG = 0x80;

pub const LOGON_NTLMV2_ENABLED: ULONG = 0x100;

pub const LOGON_RESOURCE_GROUPS: ULONG = 0x200;

pub const LOGON_PROFILE_PATH_RETURNED: ULONG = 0x400;

pub const LOGON_NT_V2: ULONG = 0x800;

pub const LOGON_LM_V2: ULONG = 0x1000;

pub const LOGON_NTLM_V2: ULONG = 0x2000;

pub const LOGON_OPTIMIZED: ULONG = 0x4000;

pub const LOGON_WINLOGON: ULONG = 0x8000;

pub const LOGON_PKINIT: ULONG = 0x10000;

pub const LOGON_NO_OPTIMIZED: ULONG = 0x20000;

pub const LOGON_NO_ELEVATION: ULONG = 0x40000;

pub const LOGON_MANAGED_SERVICE: ULONG = 0x80000;

pub const LOGON_GRACE_LOGON: ULONG = 0x01000000;

STRUCT!{struct MSV1_0_LM20_LOGON_PROFILE {

    MessageType: MSV1_0_PROFILE_BUFFER_TYPE,

    KickOffTime: LARGE_INTEGER,

    LogoffTime: LARGE_INTEGER,

    UserFlags: ULONG,

    UserSessionKey: [UCHAR; MSV1_0_USER_SESSION_KEY_LENGTH],

    LogonDomainName: UNICODE_STRING,

    LanmanSessionKey: [UCHAR; MSV1_0_LANMAN_SESSION_KEY_LENGTH],

    LogonServer: UNICODE_STRING,

    UserParameters: UNICODE_STRING,

}}

pub type PMSV1_0_LM20_LOGON_PROFILE = *mut MSV1_0_LM20_LOGON_PROFILE;

pub const MSV1_0_OWF_PASSWORD_LENGTH: usize = 16;

STRUCT!{struct MSV1_0_SUPPLEMENTAL_CREDENTIAL {

    Version: ULONG,

    Flags: ULONG,

    LmPassword: [UCHAR; MSV1_0_OWF_PASSWORD_LENGTH],

    NtPassword: [UCHAR; MSV1_0_OWF_PASSWORD_LENGTH],

}}

pub type PMSV1_0_SUPPLEMENTAL_CREDENTIAL = *mut MSV1_0_SUPPLEMENTAL_CREDENTIAL;

pub const MSV1_0_NTLM3_RESPONSE_LENGTH: usize = 16;

pub const MSV1_0_NTLM3_OWF_LENGTH: usize = 16;

STRUCT!{struct MSV1_0_NTLM3_RESPONSE {

    Response: [UCHAR; MSV1_0_NTLM3_RESPONSE_LENGTH],

    RespType: UCHAR,

    HiRespType: UCHAR,

    Flags: USHORT,

    MsgWord: ULONG,

    TimeStamp: ULONGLONG,

    ChallengeFromClient: [UCHAR; MSV1_0_CHALLENGE_LENGTH],

    AvPairsOff: ULONG,

    Buffer: [UCHAR; 1],

}}

pub type PMSV1_0_NTLM3_RESPONSE = *mut MSV1_0_NTLM3_RESPONSE;

ENUM!{enum MSV1_0_AVID {

    MsvAvEOL,

    MsvAvNbComputerName,

    MsvAvNbDomainName,

    MsvAvDnsComputerName,

    MsvAvDnsDomainName,

    MsvAvDnsTreeName,

    MsvAvFlags,

    MsvAvTimestamp,

    MsvAvRestrictions,

    MsvAvTargetName,

    MsvAvChannelBindings,

}}

STRUCT!{struct MSV1_0_AV_PAIR {

    AvId: USHORT,

    AvLen: USHORT,

}}

pub type PMSV1_0_AV_PAIR = *mut MSV1_0_AV_PAIR;

ENUM!{enum MSV1_0_PROTOCOL_MESSAGE_TYPE {

    MsV1_0Lm20ChallengeRequest = 0,

    MsV1_0Lm20GetChallengeResponse,

    MsV1_0EnumerateUsers,

    MsV1_0GetUserInfo,

    MsV1_0ReLogonUsers,

    MsV1_0ChangePassword,

    MsV1_0ChangeCachedPassword,

    MsV1_0GenericPassthrough,

    MsV1_0CacheLogon,

    MsV1_0SubAuth,

    MsV1_0DeriveCredential,

    MsV1_0CacheLookup,

    MsV1_0SetProcessOption,

    MsV1_0ConfigLocalAliases,

    MsV1_0ClearCachedCredentials,

    MsV1_0LookupToken,

    MsV1_0ValidateAuth,

    MsV1_0CacheLookupEx,

    MsV1_0GetCredentialKey,

    MsV1_0SetThreadOption,

}}

pub type PMSV1_0_PROTOCOL_MESSAGE_TYPE = *mut MSV1_0_PROTOCOL_MESSAGE_TYPE;

STRUCT!{struct MSV1_0_CHANGEPASSWORD_REQUEST {

    MessageType: MSV1_0_PROTOCOL_MESSAGE_TYPE,

    DomainName: UNICODE_STRING,

    AccountName: UNICODE_STRING,

    OldPassword: UNICODE_STRING,

    NewPassword: UNICODE_STRING,

    Impersonating: BOOLEAN,

}}

pub type PMSV1_0_CHANGEPASSWORD_REQUEST = *mut MSV1_0_CHANGEPASSWORD_REQUEST;

STRUCT!{struct MSV1_0_CHANGEPASSWORD_RESPONSE {

    MessageType: MSV1_0_PROTOCOL_MESSAGE_TYPE,

    PasswordInfoValid: BOOLEAN,

    DomainPasswordInfo: DOMAIN_PASSWORD_INFORMATION,

}}

pub type PMSV1_0_CHANGEPASSWORD_RESPONSE = *mut MSV1_0_CHANGEPASSWORD_RESPONSE;

STRUCT!{struct MSV1_0_PASSTHROUGH_REQUEST {

    MessageType: MSV1_0_PROTOCOL_MESSAGE_TYPE,

    DomainName: UNICODE_STRING,

    PackageName: UNICODE_STRING,

    DataLength: ULONG,

    LogonData: PUCHAR,

    Pad: ULONG,

}}

pub type PMSV1_0_PASSTHROUGH_REQUEST = *mut MSV1_0_PASSTHROUGH_REQUEST;

STRUCT!{struct MSV1_0_PASSTHROUGH_RESPONSE {

    MessageType: MSV1_0_PROTOCOL_MESSAGE_TYPE,

    Pad: ULONG,

    DataLength: ULONG,

    ValidationData: PUCHAR,

}}

pub type PMSV1_0_PASSTHROUGH_RESPONSE = *mut MSV1_0_PASSTHROUGH_RESPONSE;

STRUCT!{struct MSV1_0_SUBAUTH_REQUEST {

    MessageType: MSV1_0_PROTOCOL_MESSAGE_TYPE,

    SubAuthPackageId: ULONG,

    SubAuthInfoLength: ULONG,

    SubAuthSubmitBuffer: PUCHAR,

}}

pub type PMSV1_0_SUBAUTH_REQUEST = *mut MSV1_0_SUBAUTH_REQUEST;

STRUCT!{struct MSV1_0_SUBAUTH_RESPONSE {

    MessageType: MSV1_0_PROTOCOL_MESSAGE_TYPE,

    SubAuthInfoLength: ULONG,

    SubAuthReturnBuffer: PUCHAR,

}}

pub type PMSV1_0_SUBAUTH_RESPONSE = *mut MSV1_0_SUBAUTH_RESPONSE;

pub use self::SystemFunction036 as RtlGenRandom;

pub use self::SystemFunction040 as RtlEncryptMemory;

pub use self::SystemFunction041 as RtlDecryptMemory;

extern "system" {

    pub fn SystemFunction036(

        RandomBuffer: PVOID,

        RandomBufferLength: ULONG,

    ) -> BOOLEAN;

pub const RTL_ENCRYPT_MEMORY_SIZE: ULONG = 8;

pub const RTL_ENCRYPT_OPTION_CROSS_PROCESS: ULONG = 0x01;

pub const RTL_ENCRYPT_OPTION_SAME_LOGON: ULONG = 0x02;

extern "system" {

    pub fn SystemFunction040(

        Memory: PVOID,

        MemorySize: ULONG,

        OptionFlags: ULONG,

    ) -> NTSTATUS;

    pub fn SystemFunction041(

        Memory: PVOID,

        MemorySize: ULONG,

        OptionFlags: ULONG,

    ) -> NTSTATUS;

pub const KERBEROS_VERSION: ULONG = 5;

pub const KERBEROS_REVISION: ULONG = 6;

pub const KERB_ETYPE_NULL: LONG = 0;

pub const KERB_ETYPE_DES_CBC_CRC: LONG = 1;

pub const KERB_ETYPE_DES_CBC_MD4: LONG = 2;

pub const KERB_ETYPE_DES_CBC_MD5: LONG = 3;

pub const KERB_ETYPE_AES128_CTS_HMAC_SHA1_96: LONG = 17;

pub const KERB_ETYPE_AES256_CTS_HMAC_SHA1_96: LONG = 18;

pub const KERB_ETYPE_RC4_MD4: LONG = -128;

pub const KERB_ETYPE_RC4_PLAIN2: LONG = -129;

pub const KERB_ETYPE_RC4_LM: LONG = -130;

pub const KERB_ETYPE_RC4_SHA: LONG = -131;

pub const KERB_ETYPE_DES_PLAIN: LONG = -132;

pub const KERB_ETYPE_RC4_HMAC_OLD: LONG = -133;

pub const KERB_ETYPE_RC4_PLAIN_OLD: LONG = -134;

pub const KERB_ETYPE_RC4_HMAC_OLD_EXP: LONG = -135;

pub const KERB_ETYPE_RC4_PLAIN_OLD_EXP: LONG = -136;

pub const KERB_ETYPE_RC4_PLAIN: LONG = -140;

pub const KERB_ETYPE_RC4_PLAIN_EXP: LONG = -141;

pub const KERB_ETYPE_AES128_CTS_HMAC_SHA1_96_PLAIN: LONG = -148;

pub const KERB_ETYPE_AES256_CTS_HMAC_SHA1_96_PLAIN: LONG = -149;

pub const KERB_ETYPE_DSA_SHA1_CMS: LONG = 9;

pub const KERB_ETYPE_RSA_MD5_CMS: LONG = 10;

pub const KERB_ETYPE_RSA_SHA1_CMS: LONG = 11;

pub const KERB_ETYPE_RC2_CBC_ENV: LONG = 12;

pub const KERB_ETYPE_RSA_ENV: LONG = 13;

pub const KERB_ETYPE_RSA_ES_OEAP_ENV: LONG = 14;

pub const KERB_ETYPE_DES_EDE3_CBC_ENV: LONG = 15;

pub const KERB_ETYPE_DSA_SIGN: LONG = 8;

pub const KERB_ETYPE_RSA_PRIV: LONG = 9;

pub const KERB_ETYPE_RSA_PUB: LONG = 10;

pub const KERB_ETYPE_RSA_PUB_MD5: LONG = 11;

pub const KERB_ETYPE_RSA_PUB_SHA1: LONG = 12;

pub const KERB_ETYPE_PKCS7_PUB: LONG = 13;

pub const KERB_ETYPE_DES3_CBC_MD5: LONG = 5;

pub const KERB_ETYPE_DES3_CBC_SHA1: LONG = 7;

pub const KERB_ETYPE_DES3_CBC_SHA1_KD: LONG = 16;

pub const KERB_ETYPE_DES_CBC_MD5_NT: LONG = 20;

pub const KERB_ETYPE_RC4_HMAC_NT: LONG = 23;

pub const KERB_ETYPE_RC4_HMAC_NT_EXP: LONG = 24;

pub const KERB_CHECKSUM_NONE: LONG = 0;

pub const KERB_CHECKSUM_CRC32: LONG = 1;

pub const KERB_CHECKSUM_MD4: LONG = 2;

pub const KERB_CHECKSUM_KRB_DES_MAC: LONG = 4;

pub const KERB_CHECKSUM_KRB_DES_MAC_K: LONG = 5;

pub const KERB_CHECKSUM_MD5: LONG = 7;

pub const KERB_CHECKSUM_MD5_DES: LONG = 8;

pub const KERB_CHECKSUM_SHA1_NEW: LONG = 14;

pub const KERB_CHECKSUM_HMAC_SHA1_96_AES128: LONG = 15;

pub const KERB_CHECKSUM_HMAC_SHA1_96_AES256: LONG = 16;

pub const KERB_CHECKSUM_LM: LONG = -130;

pub const KERB_CHECKSUM_SHA1: LONG = -131;

pub const KERB_CHECKSUM_REAL_CRC32: LONG = -132;

pub const KERB_CHECKSUM_DES_MAC: LONG = -133;

pub const KERB_CHECKSUM_DES_MAC_MD5: LONG = -134;

pub const KERB_CHECKSUM_MD25: LONG = -135;

pub const KERB_CHECKSUM_RC4_MD5: LONG = -136;

pub const KERB_CHECKSUM_MD5_HMAC: LONG = -137;

pub const KERB_CHECKSUM_HMAC_MD5: LONG = -138;

pub const KERB_CHECKSUM_HMAC_SHA1_96_AES128_Ki: LONG = -150;

pub const KERB_CHECKSUM_HMAC_SHA1_96_AES256_Ki: LONG = -151;

pub const KERB_TICKET_FLAGS_reserved: ULONG = 0x80000000;

pub const KERB_TICKET_FLAGS_forwardable: ULONG = 0x40000000;

pub const KERB_TICKET_FLAGS_forwarded: ULONG = 0x20000000;

pub const KERB_TICKET_FLAGS_proxiable: ULONG = 0x10000000;

pub const KERB_TICKET_FLAGS_proxy: ULONG = 0x08000000;

pub const KERB_TICKET_FLAGS_may_postdate: ULONG = 0x04000000;

pub const KERB_TICKET_FLAGS_postdated: ULONG = 0x02000000;

pub const KERB_TICKET_FLAGS_invalid: ULONG = 0x01000000;

pub const KERB_TICKET_FLAGS_renewable: ULONG = 0x00800000;

pub const KERB_TICKET_FLAGS_initial: ULONG = 0x00400000;

pub const KERB_TICKET_FLAGS_pre_authent: ULONG = 0x00200000;

pub const KERB_TICKET_FLAGS_hw_authent: ULONG = 0x00100000;

pub const KERB_TICKET_FLAGS_ok_as_delegate: ULONG = 0x00040000;

pub const KERB_TICKET_FLAGS_name_canonicalize: ULONG = 0x00010000;

pub const KERB_TICKET_FLAGS_cname_in_pa_data: ULONG = 0x00040000;

pub const KERB_TICKET_FLAGS_enc_pa_rep: ULONG = 0x00010000;

pub const KERB_TICKET_FLAGS_reserved1: ULONG = 0x00000001;

pub const KRB_NT_UNKNOWN: LONG = 0;

pub const KRB_NT_PRINCIPAL: LONG = 1;

pub const KRB_NT_PRINCIPAL_AND_ID: LONG = -131;

pub const KRB_NT_SRV_INST: LONG = 2;

pub const KRB_NT_SRV_INST_AND_ID: LONG = -132;

pub const KRB_NT_SRV_HST: LONG = 3;

pub const KRB_NT_SRV_XHST: LONG = 4;

pub const KRB_NT_UID: LONG = 5;

pub const KRB_NT_ENTERPRISE_PRINCIPAL: LONG = 10;

pub const KRB_NT_WELLKNOWN: LONG = 11;

pub const KRB_NT_ENT_PRINCIPAL_AND_ID: LONG = -130;

pub const KRB_NT_MS_PRINCIPAL: LONG = -128;

pub const KRB_NT_MS_PRINCIPAL_AND_ID: LONG = -129;

pub const KRB_NT_MS_BRANCH_ID: LONG = -133;

pub const KRB_NT_X500_PRINCIPAL: LONG = 6;

pub const KERB_WRAP_NO_ENCRYPT: ULONG = 0x80000001;

ENUM!{enum KERB_LOGON_SUBMIT_TYPE {

    KerbInteractiveLogon = 2,

    KerbSmartCardLogon = 6,

    KerbWorkstationUnlockLogon = 7,

    KerbSmartCardUnlockLogon = 8,

    KerbProxyLogon = 9,

    KerbTicketLogon = 10,

    KerbTicketUnlockLogon = 11,

    KerbS4ULogon = 12,

    KerbCertificateLogon = 13,

    KerbCertificateS4ULogon = 14,

    KerbCertificateUnlockLogon = 15,

    KerbNoElevationLogon = 83,

    KerbLuidLogon = 84,

}}

pub type PKERB_LOGON_SUBMIT_TYPE = *mut KERB_LOGON_SUBMIT_TYPE;

STRUCT!{struct KERB_INTERACTIVE_LOGON {

    MessageType: KERB_LOGON_SUBMIT_TYPE,

    LogonDomainName: UNICODE_STRING,

    UserName: UNICODE_STRING,

    Password: UNICODE_STRING,

}}

pub type PKERB_INTERACTIVE_LOGON = *mut KERB_INTERACTIVE_LOGON;

STRUCT!{struct KERB_INTERACTIVE_UNLOCK_LOGON {

    Logon: KERB_INTERACTIVE_LOGON,

    LogonId: LUID,

}}

pub type PKERB_INTERACTIVE_UNLOCK_LOGON = *mut KERB_INTERACTIVE_UNLOCK_LOGON;

STRUCT!{struct KERB_SMART_CARD_LOGON {

    MessageType: KERB_LOGON_SUBMIT_TYPE,

    Pin: UNICODE_STRING,

    CspDataLength: ULONG,

    CspData: PUCHAR,

}}

pub type PKERB_SMART_CARD_LOGON = *mut KERB_SMART_CARD_LOGON;

STRUCT!{struct KERB_SMART_CARD_UNLOCK_LOGON {

    Logon: KERB_SMART_CARD_LOGON,

    LogonId: LUID,

}}

pub type PKERB_SMART_CARD_UNLOCK_LOGON = *mut KERB_SMART_CARD_UNLOCK_LOGON;

pub const KERB_CERTIFICATE_LOGON_FLAG_CHECK_DUPLICATES: ULONG = 0x1;

pub const KERB_CERTIFICATE_LOGON_FLAG_USE_CERTIFICATE_INFO: ULONG = 0x2;

STRUCT!{struct KERB_CERTIFICATE_LOGON {

    MessageType: KERB_LOGON_SUBMIT_TYPE,

    DomainName: UNICODE_STRING,

    UserName: UNICODE_STRING,

    Pin: UNICODE_STRING,

    Flags: ULONG,

    CspDataLength: ULONG,

    CspData: PUCHAR,

}}

pub type PKERB_CERTIFICATE_LOGON = *mut KERB_CERTIFICATE_LOGON;

STRUCT!{struct KERB_CERTIFICATE_UNLOCK_LOGON {

    Logon: KERB_CERTIFICATE_LOGON,

    LogonId: LUID,

}}

pub type PKERB_CERTIFICATE_UNLOCK_LOGON = *mut KERB_CERTIFICATE_UNLOCK_LOGON;

pub const KERB_CERTIFICATE_S4U_LOGON_FLAG_CHECK_DUPLICATES: ULONG = 0x1;

pub const KERB_CERTIFICATE_S4U_LOGON_FLAG_CHECK_LOGONHOURS: ULONG = 0x2;

pub const KERB_CERTIFICATE_S4U_LOGON_FLAG_FAIL_IF_NT_AUTH_POLICY_REQUIRED: ULONG = 0x4;

pub const KERB_CERTIFICATE_S4U_LOGON_FLAG_IDENTIFY: ULONG = 0x8;

STRUCT!{struct KERB_CERTIFICATE_S4U_LOGON {

    MessageType: KERB_LOGON_SUBMIT_TYPE,

    Flags: ULONG,

    UserPrincipalName: UNICODE_STRING,

    DomainName: UNICODE_STRING,

    CertificateLength: ULONG,

    Certificate: PUCHAR,

}}

pub type PKERB_CERTIFICATE_S4U_LOGON = *mut KERB_CERTIFICATE_S4U_LOGON;

STRUCT!{struct KERB_TICKET_LOGON {

    MessageType: KERB_LOGON_SUBMIT_TYPE,

    Flags: ULONG,

    ServiceTicketLength: ULONG,

    TicketGrantingTicketLength: ULONG,

    ServiceTicket: PUCHAR,

    TicketGrantingTicket: PUCHAR,

}}

pub type PKERB_TICKET_LOGON = *mut KERB_TICKET_LOGON;

STRUCT!{struct KERB_TICKET_UNLOCK_LOGON {

    Logon: KERB_TICKET_LOGON,

    LogonId: LUID,

}}

pub type PKERB_TICKET_UNLOCK_LOGON = *mut KERB_TICKET_UNLOCK_LOGON;

pub const KERB_S4U_LOGON_FLAG_CHECK_LOGONHOURS: ULONG = 0x2;

pub const KERB_S4U_LOGON_FLAG_IDENTIFY: ULONG = 0x8;

STRUCT!{struct KERB_S4U_LOGON {

    MessageType: KERB_LOGON_SUBMIT_TYPE,

    Flags: ULONG,

    ClientUpn: UNICODE_STRING,

    ClientRealm: UNICODE_STRING,

}}

pub type PKERB_S4U_LOGON = *mut KERB_S4U_LOGON;

ENUM!{enum KERB_PROFILE_BUFFER_TYPE {

    KerbInteractiveProfile = 2,

    KerbSmartCardProfile = 4,

    KerbTicketProfile = 6,

}}

pub type PKERB_PROFILE_BUFFER_TYPE = *mut KERB_PROFILE_BUFFER_TYPE;

STRUCT!{struct KERB_INTERACTIVE_PROFILE {

    MessageType: KERB_PROFILE_BUFFER_TYPE,

    LogonCount: USHORT,

    BadPasswordCount: USHORT,

    LogonTime: LARGE_INTEGER,

    LogoffTime: LARGE_INTEGER,

    KickOffTime: LARGE_INTEGER,

    PasswordLastSet: LARGE_INTEGER,

    PasswordCanChange: LARGE_INTEGER,

    PasswordMustChange: LARGE_INTEGER,

    LogonScript: UNICODE_STRING,

    HomeDirectory: UNICODE_STRING,

    FullName: UNICODE_STRING,

    ProfilePath: UNICODE_STRING,

    HomeDirectoryDrive: UNICODE_STRING,

    LogonServer: UNICODE_STRING,

    UserFlags: ULONG,

}}

pub type PKERB_INTERACTIVE_PROFILE = *mut KERB_INTERACTIVE_PROFILE;

STRUCT!{struct KERB_SMART_CARD_PROFILE {

    Profile: KERB_INTERACTIVE_PROFILE,

    CertificateSize: ULONG,

    CertificateData: PUCHAR,

}}

pub type PKERB_SMART_CARD_PROFILE = *mut KERB_SMART_CARD_PROFILE;

STRUCT!{struct KERB_CRYPTO_KEY {

    KeyType: LONG,

    Length: ULONG,

    Value: PUCHAR,

}}

pub type PKERB_CRYPTO_KEY = *mut KERB_CRYPTO_KEY;

STRUCT!{struct KERB_CRYPTO_KEY32 {

    KeyType: LONG,

    Length: ULONG,

    Offset: ULONG,

}}

pub type PKERB_CRYPTO_KEY32 = *mut KERB_CRYPTO_KEY32;

STRUCT!{struct KERB_TICKET_PROFILE {

    Profile: KERB_INTERACTIVE_PROFILE,

    SessionKey: KERB_CRYPTO_KEY,

}}

pub type PKERB_TICKET_PROFILE = *mut KERB_TICKET_PROFILE;

ENUM!{enum KERB_PROTOCOL_MESSAGE_TYPE {

    KerbDebugRequestMessage = 0,

    KerbQueryTicketCacheMessage,

    KerbChangeMachinePasswordMessage,

    KerbVerifyPacMessage,

    KerbRetrieveTicketMessage,

    KerbUpdateAddressesMessage,

    KerbPurgeTicketCacheMessage,

    KerbChangePasswordMessage,

    KerbRetrieveEncodedTicketMessage,

    KerbDecryptDataMessage,

    KerbAddBindingCacheEntryMessage,

    KerbSetPasswordMessage,

    KerbSetPasswordExMessage,

    KerbVerifyCredentialsMessage,

    KerbQueryTicketCacheExMessage,

    KerbPurgeTicketCacheExMessage,

    KerbRefreshSmartcardCredentialsMessage,

    KerbAddExtraCredentialsMessage,

    KerbQuerySupplementalCredentialsMessage,

    KerbTransferCredentialsMessage,

    KerbQueryTicketCacheEx2Message,

    KerbSubmitTicketMessage,

    KerbAddExtraCredentialsExMessage,

    KerbQueryKdcProxyCacheMessage,

    KerbPurgeKdcProxyCacheMessage,

    KerbQueryTicketCacheEx3Message,

    KerbCleanupMachinePkinitCredsMessage,

    KerbAddBindingCacheEntryExMessage,

    KerbQueryBindingCacheMessage,

    KerbPurgeBindingCacheMessage,

    KerbPinKdcMessage,

    KerbUnpinAllKdcsMessage,

    KerbQueryDomainExtendedPoliciesMessage,

    KerbQueryS4U2ProxyCacheMessage,

}}

pub type PKERB_PROTOCOL_MESSAGE_TYPE = *mut KERB_PROTOCOL_MESSAGE_TYPE;

STRUCT!{struct KERB_QUERY_TKT_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

}}

pub type PKERB_QUERY_TKT_CACHE_REQUEST = *mut KERB_QUERY_TKT_CACHE_REQUEST;

STRUCT!{struct KERB_TICKET_CACHE_INFO {

    ServerName: UNICODE_STRING,

    RealmName: UNICODE_STRING,

    StartTime: LARGE_INTEGER,

    EndTime: LARGE_INTEGER,

    RenewTime: LARGE_INTEGER,

    EncryptionType: LONG,

    TicketFlags: ULONG,

}}

pub type PKERB_TICKET_CACHE_INFO = *mut KERB_TICKET_CACHE_INFO;

STRUCT!{struct KERB_TICKET_CACHE_INFO_EX {

    ClientName: UNICODE_STRING,

    ClientRealm: UNICODE_STRING,

    ServerName: UNICODE_STRING,

    ServerRealm: UNICODE_STRING,

    StartTime: LARGE_INTEGER,

    EndTime: LARGE_INTEGER,

    RenewTime: LARGE_INTEGER,

    EncryptionType: LONG,

    TicketFlags: ULONG,

}}

pub type PKERB_TICKET_CACHE_INFO_EX = *mut KERB_TICKET_CACHE_INFO_EX;

STRUCT!{struct KERB_TICKET_CACHE_INFO_EX2 {

    ClientName: UNICODE_STRING,

    ClientRealm: UNICODE_STRING,

    ServerName: UNICODE_STRING,

    ServerRealm: UNICODE_STRING,

    StartTime: LARGE_INTEGER,

    EndTime: LARGE_INTEGER,

    RenewTime: LARGE_INTEGER,

    EncryptionType: LONG,

    TicketFlags: ULONG,

    SessionKeyType: ULONG,

    BranchId: ULONG,

}}

pub type PKERB_TICKET_CACHE_INFO_EX2 = *mut KERB_TICKET_CACHE_INFO_EX2;

STRUCT!{struct KERB_TICKET_CACHE_INFO_EX3 {

    ClientName: UNICODE_STRING,

    ClientRealm: UNICODE_STRING,

    ServerName: UNICODE_STRING,

    ServerRealm: UNICODE_STRING,

    StartTime: LARGE_INTEGER,

    EndTime: LARGE_INTEGER,

    RenewTime: LARGE_INTEGER,

    EncryptionType: LONG,

    TicketFlags: ULONG,

    SessionKeyType: ULONG,

    BranchId: ULONG,

    CacheFlags: ULONG,

    KdcCalled: UNICODE_STRING,

}}

pub type PKERB_TICKET_CACHE_INFO_EX3 = *mut KERB_TICKET_CACHE_INFO_EX3;

STRUCT!{struct KERB_QUERY_TKT_CACHE_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfTickets: ULONG,

    Tickets: [KERB_TICKET_CACHE_INFO; ANYSIZE_ARRAY],

}}

pub type PKERB_QUERY_TKT_CACHE_RESPONSE = *mut KERB_QUERY_TKT_CACHE_RESPONSE;

STRUCT!{struct KERB_QUERY_TKT_CACHE_EX_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfTickets: ULONG,

    Tickets: [KERB_TICKET_CACHE_INFO_EX; ANYSIZE_ARRAY],

}}

pub type PKERB_QUERY_TKT_CACHE_EX_RESPONSE = *mut KERB_QUERY_TKT_CACHE_EX_RESPONSE;

STRUCT!{struct KERB_QUERY_TKT_CACHE_EX2_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfTickets: ULONG,

    Tickets: [KERB_TICKET_CACHE_INFO_EX2; ANYSIZE_ARRAY],

}}

pub type PKERB_QUERY_TKT_CACHE_EX2_RESPONSE = *mut KERB_QUERY_TKT_CACHE_EX2_RESPONSE;

STRUCT!{struct KERB_QUERY_TKT_CACHE_EX3_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfTickets: ULONG,

    Tickets: [KERB_TICKET_CACHE_INFO_EX3; ANYSIZE_ARRAY],

}}

pub type PKERB_QUERY_TKT_CACHE_EX3_RESPONSE = *mut KERB_QUERY_TKT_CACHE_EX3_RESPONSE;

pub const KERB_USE_DEFAULT_TICKET_FLAGS: ULONG = 0x0;

pub const KERB_RETRIEVE_TICKET_DEFAULT: ULONG = 0x0;

pub const KERB_RETRIEVE_TICKET_DONT_USE_CACHE: ULONG = 0x1;

pub const KERB_RETRIEVE_TICKET_USE_CACHE_ONLY: ULONG = 0x2;

pub const KERB_RETRIEVE_TICKET_USE_CREDHANDLE: ULONG = 0x4;

pub const KERB_RETRIEVE_TICKET_AS_KERB_CRED: ULONG = 0x8;

pub const KERB_RETRIEVE_TICKET_WITH_SEC_CRED: ULONG = 0x10;

pub const KERB_RETRIEVE_TICKET_CACHE_TICKET: ULONG = 0x20;

pub const KERB_RETRIEVE_TICKET_MAX_LIFETIME: ULONG = 0x40;

STRUCT!{struct KERB_AUTH_DATA {

    Type: ULONG,

    Length: ULONG,

    Data: PUCHAR,

}}

pub type PKERB_AUTH_DATA = *mut KERB_AUTH_DATA;

STRUCT!{struct KERB_NET_ADDRESS {

    Family: ULONG,

    Length: ULONG,

    Address: PUCHAR,

}}

pub type PKERB_NET_ADDRESS = *mut KERB_NET_ADDRESS;

STRUCT!{struct KERB_NET_ADDRESSES {

    Number: ULONG,

    Addresses: [KERB_NET_ADDRESS; ANYSIZE_ARRAY],

}}

pub type PKERB_NET_ADDRESSES = *mut KERB_NET_ADDRESSES;

STRUCT!{struct KERB_EXTERNAL_NAME {

    NameType: SHORT,

    NameCount: USHORT,

    Names: [UNICODE_STRING; ANYSIZE_ARRAY],

}}

pub type PKERB_EXTERNAL_NAME = *mut KERB_EXTERNAL_NAME;

STRUCT!{struct KERB_EXTERNAL_TICKET {

    ServiceName: PKERB_EXTERNAL_NAME,

    TargetName: PKERB_EXTERNAL_NAME,

    ClientName: PKERB_EXTERNAL_NAME,

    DomainName: UNICODE_STRING,

    TargetDomainName: UNICODE_STRING,

    AltTargetDomainName: UNICODE_STRING,

    SessionKey: KERB_CRYPTO_KEY,

    TicketFlags: ULONG,

    Flags: ULONG,

    KeyExpirationTime: LARGE_INTEGER,

    StartTime: LARGE_INTEGER,

    EndTime: LARGE_INTEGER,

    RenewUntil: LARGE_INTEGER,

    TimeSkew: LARGE_INTEGER,

    EncodedTicketSize: ULONG,

    EncodedTicket: PUCHAR,

}}

pub type PKERB_EXTERNAL_TICKET = *mut KERB_EXTERNAL_TICKET;

STRUCT!{struct KERB_RETRIEVE_TKT_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    TargetName: UNICODE_STRING,

    TicketFlags: ULONG,

    CacheOptions: ULONG,

    EncryptionType: LONG,

    CredentialsHandle: SecHandle,

}}

pub type PKERB_RETRIEVE_TKT_REQUEST = *mut KERB_RETRIEVE_TKT_REQUEST;

STRUCT!{struct KERB_RETRIEVE_TKT_RESPONSE {

    Ticket: KERB_EXTERNAL_TICKET,

}}

pub type PKERB_RETRIEVE_TKT_RESPONSE = *mut KERB_RETRIEVE_TKT_RESPONSE;

STRUCT!{struct KERB_PURGE_TKT_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    ServerName: UNICODE_STRING,

    RealmName: UNICODE_STRING,

}}

pub type PKERB_PURGE_TKT_CACHE_REQUEST = *mut KERB_PURGE_TKT_CACHE_REQUEST;

pub const KERB_PURGE_ALL_TICKETS: ULONG = 1;

STRUCT!{struct KERB_PURGE_TKT_CACHE_EX_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    Flags: ULONG,

    TicketTemplate: KERB_TICKET_CACHE_INFO_EX,

}}

pub type PKERB_PURGE_TKT_CACHE_EX_REQUEST = *mut KERB_PURGE_TKT_CACHE_EX_REQUEST;

STRUCT!{struct KERB_SUBMIT_TKT_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    Flags: ULONG,

    Key: KERB_CRYPTO_KEY32,

    KerbCredSize: ULONG,

    KerbCredOffset: ULONG,

}}

pub type PKERB_SUBMIT_TKT_REQUEST = *mut KERB_SUBMIT_TKT_REQUEST;

STRUCT!{struct KERB_QUERY_KDC_PROXY_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    Flags: ULONG,

    LogonId: LUID,

}}

pub type PKERB_QUERY_KDC_PROXY_CACHE_REQUEST = *mut KERB_QUERY_KDC_PROXY_CACHE_REQUEST;

STRUCT!{struct KDC_PROXY_CACHE_ENTRY_DATA {

    SinceLastUsed: ULONG64,

    DomainName: UNICODE_STRING,

    ProxyServerName: UNICODE_STRING,

    ProxyServerVdir: UNICODE_STRING,

    ProxyServerPort: USHORT,

    LogonId: LUID,

    CredUserName: UNICODE_STRING,

    CredDomainName: UNICODE_STRING,

    GlobalCache: BOOLEAN,

}}

pub type PKDC_PROXY_CACHE_ENTRY_DATA = *mut KDC_PROXY_CACHE_ENTRY_DATA;

STRUCT!{struct KERB_QUERY_KDC_PROXY_CACHE_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfEntries: ULONG,

    Entries: PKDC_PROXY_CACHE_ENTRY_DATA,

}}

pub type PKERB_QUERY_KDC_PROXY_CACHE_RESPONSE = *mut KERB_QUERY_KDC_PROXY_CACHE_RESPONSE;

STRUCT!{struct KERB_PURGE_KDC_PROXY_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    Flags: ULONG,

    LogonId: LUID,

}}

pub type PKERB_PURGE_KDC_PROXY_CACHE_REQUEST = *mut KERB_PURGE_KDC_PROXY_CACHE_REQUEST;

STRUCT!{struct KERB_PURGE_KDC_PROXY_CACHE_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfPurged: ULONG,

}}

pub type PKERB_PURGE_KDC_PROXY_CACHE_RESPONSE = *mut KERB_PURGE_KDC_PROXY_CACHE_RESPONSE;

pub const KERB_S4U2PROXY_CACHE_ENTRY_INFO_FLAG_NEGATIVE: ULONG = 0x1;

STRUCT!{struct KERB_S4U2PROXY_CACHE_ENTRY_INFO {

    ServerName: UNICODE_STRING,

    Flags: ULONG,

    LastStatus: NTSTATUS,

    Expiry: LARGE_INTEGER,

}}

pub type PKERB_S4U2PROXY_CACHE_ENTRY_INFO = *mut KERB_S4U2PROXY_CACHE_ENTRY_INFO;

pub const KERB_S4U2PROXY_CRED_FLAG_NEGATIVE: ULONG = 0x1;

STRUCT!{struct KERB_S4U2PROXY_CRED {

    UserName: UNICODE_STRING,

    DomainName: UNICODE_STRING,

    Flags: ULONG,

    LastStatus: NTSTATUS,

    Expiry: LARGE_INTEGER,

    CountOfEntries: ULONG,

    Entries: PKERB_S4U2PROXY_CACHE_ENTRY_INFO,

}}

pub type PKERB_S4U2PROXY_CRED = *mut KERB_S4U2PROXY_CRED;

STRUCT!{struct KERB_QUERY_S4U2PROXY_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    Flags: ULONG,

    LogonId: LUID,

}}

pub type PKERB_QUERY_S4U2PROXY_CACHE_REQUEST = *mut KERB_QUERY_S4U2PROXY_CACHE_REQUEST;

STRUCT!{struct KERB_QUERY_S4U2PROXY_CACHE_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfCreds: ULONG,

    Creds: PKERB_S4U2PROXY_CRED,

}}

pub type PKERB_QUERY_S4U2PROXY_CACHE_RESPONSE = *mut KERB_QUERY_S4U2PROXY_CACHE_RESPONSE;

STRUCT!{struct KERB_CHANGEPASSWORD_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    DomainName: UNICODE_STRING,

    AccountName: UNICODE_STRING,

    OldPassword: UNICODE_STRING,

    NewPassword: UNICODE_STRING,

    Impersonating: BOOLEAN,

}}

pub type PKERB_CHANGEPASSWORD_REQUEST = *mut KERB_CHANGEPASSWORD_REQUEST;

STRUCT!{struct KERB_SETPASSWORD_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    CredentialsHandle: SecHandle,

    Flags: ULONG,

    DomainName: UNICODE_STRING,

    AccountName: UNICODE_STRING,

    Password: UNICODE_STRING,

}}

pub type PKERB_SETPASSWORD_REQUEST = *mut KERB_SETPASSWORD_REQUEST;

STRUCT!{struct KERB_SETPASSWORD_EX_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    CredentialsHandle: SecHandle,

    Flags: ULONG,

    AccountRealm: UNICODE_STRING,

    AccountName: UNICODE_STRING,

    Password: UNICODE_STRING,

    ClientRealm: UNICODE_STRING,

    ClientName: UNICODE_STRING,

    Impersonating: BOOLEAN,

    KdcAddress: UNICODE_STRING,

    KdcAddressType: ULONG,

}}

pub type PKERB_SETPASSWORD_EX_REQUEST = *mut KERB_SETPASSWORD_EX_REQUEST;

pub const DS_UNKNOWN_ADDRESS_TYPE: ULONG = 0;

pub const KERB_SETPASS_USE_LOGONID: ULONG = 1;

pub const KERB_SETPASS_USE_CREDHANDLE: ULONG = 2;

STRUCT!{struct KERB_DECRYPT_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

    Flags: ULONG,

    CryptoType: LONG,

    KeyUsage: LONG,

    Key: KERB_CRYPTO_KEY,

    EncryptedDataSize: ULONG,

    InitialVectorSize: ULONG,

    InitialVector: PUCHAR,

    EncryptedData: PUCHAR,

}}

pub type PKERB_DECRYPT_REQUEST = *mut KERB_DECRYPT_REQUEST;

pub const KERB_DECRYPT_FLAG_DEFAULT_KEY: ULONG = 0x00000001;

STRUCT!{struct KERB_DECRYPT_RESPONSE {

    DecryptedData: [UCHAR; ANYSIZE_ARRAY],

}}

pub type PKERB_DECRYPT_RESPONSE = *mut KERB_DECRYPT_RESPONSE;

STRUCT!{struct KERB_ADD_BINDING_CACHE_ENTRY_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    RealmName: UNICODE_STRING,

    KdcAddress: UNICODE_STRING,

    AddressType: ULONG,

}}

pub type PKERB_ADD_BINDING_CACHE_ENTRY_REQUEST = *mut KERB_ADD_BINDING_CACHE_ENTRY_REQUEST;

STRUCT!{struct KERB_REFRESH_SCCRED_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CredentialBlob: UNICODE_STRING,

    LogonId: LUID,

    Flags: ULONG,

}}

pub type PKERB_REFRESH_SCCRED_REQUEST = *mut KERB_REFRESH_SCCRED_REQUEST;

pub const KERB_REFRESH_SCCRED_RELEASE: ULONG = 0x0;

pub const KERB_REFRESH_SCCRED_GETTGT: ULONG = 0x1;

STRUCT!{struct KERB_ADD_CREDENTIALS_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    UserName: UNICODE_STRING,

    DomainName: UNICODE_STRING,

    Password: UNICODE_STRING,

    LogonId: LUID,

    Flags: ULONG,

}}

pub type PKERB_ADD_CREDENTIALS_REQUEST = *mut KERB_ADD_CREDENTIALS_REQUEST;

pub const KERB_REQUEST_ADD_CREDENTIAL: ULONG = 1;

pub const KERB_REQUEST_REPLACE_CREDENTIAL: ULONG = 2;

pub const KERB_REQUEST_REMOVE_CREDENTIAL: ULONG = 4;

STRUCT!{struct KERB_ADD_CREDENTIALS_REQUEST_EX {

    Credentials: KERB_ADD_CREDENTIALS_REQUEST,

    PrincipalNameCount: ULONG,

    PrincipalNames: [UNICODE_STRING; ANYSIZE_ARRAY],

}}

pub type PKERB_ADD_CREDENTIALS_REQUEST_EX = *mut KERB_ADD_CREDENTIALS_REQUEST_EX;

STRUCT!{struct KERB_TRANSFER_CRED_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    OriginLogonId: LUID,

    DestinationLogonId: LUID,

    Flags: ULONG,

}}

pub type PKERB_TRANSFER_CRED_REQUEST = *mut KERB_TRANSFER_CRED_REQUEST;

pub const KERB_TRANSFER_CRED_WITH_TICKETS: ULONG = 0x1;

pub const KERB_TRANSFER_CRED_CLEANUP_CREDENTIALS: ULONG = 0x2;

STRUCT!{struct KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    LogonId: LUID,

}}

pub type PKERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST =

    *mut KERB_CLEANUP_MACHINE_PKINIT_CREDS_REQUEST;

STRUCT!{struct KERB_BINDING_CACHE_ENTRY_DATA {

    DiscoveryTime: ULONG64,

    RealmName: UNICODE_STRING,

    KdcAddress: UNICODE_STRING,

    AddressType: ULONG,

    Flags: ULONG,

    DcFlags: ULONG,

    CacheFlags: ULONG,

    KdcName: UNICODE_STRING,

}}

pub type PKERB_BINDING_CACHE_ENTRY_DATA = *mut KERB_BINDING_CACHE_ENTRY_DATA;

STRUCT!{struct KERB_QUERY_BINDING_CACHE_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    CountOfEntries: ULONG,

    Entries: PKERB_BINDING_CACHE_ENTRY_DATA,

}}

pub type PKERB_QUERY_BINDING_CACHE_RESPONSE = *mut KERB_QUERY_BINDING_CACHE_RESPONSE;

STRUCT!{struct KERB_ADD_BINDING_CACHE_ENTRY_EX_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    RealmName: UNICODE_STRING,

    KdcAddress: UNICODE_STRING,

    AddressType: ULONG,

    DcFlags: ULONG,

}}

pub type PKERB_ADD_BINDING_CACHE_ENTRY_EX_REQUEST = *mut KERB_ADD_BINDING_CACHE_ENTRY_EX_REQUEST;

STRUCT!{struct KERB_QUERY_BINDING_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

}}

pub type PKERB_QUERY_BINDING_CACHE_REQUEST = *mut KERB_QUERY_BINDING_CACHE_REQUEST;

STRUCT!{struct KERB_PURGE_BINDING_CACHE_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

}}

pub type PKERB_PURGE_BINDING_CACHE_REQUEST = *mut KERB_PURGE_BINDING_CACHE_REQUEST;

STRUCT!{struct KERB_QUERY_DOMAIN_EXTENDED_POLICIES_REQUEST {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    Flags: ULONG,

    DomainName: UNICODE_STRING,

}}

pub type PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_REQUEST =

    *mut KERB_QUERY_DOMAIN_EXTENDED_POLICIES_REQUEST;

STRUCT!{struct KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE {

    MessageType: KERB_PROTOCOL_MESSAGE_TYPE,

    Flags: ULONG,

    ExtendedPolicies: ULONG,

    DsFlags: ULONG,

}}

pub type PKERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE =

    *mut KERB_QUERY_DOMAIN_EXTENDED_POLICIES_RESPONSE;

ENUM!{enum KERB_CERTIFICATE_INFO_TYPE {

    CertHashInfo = 1,

}}

pub type PKERB_CERTIFICATE_INFO_TYPE = *mut KERB_CERTIFICATE_INFO_TYPE;

STRUCT!{struct KERB_CERTIFICATE_HASHINFO {

    StoreNameLength: USHORT,

    HashLength: USHORT,

}}

pub type PKERB_CERTIFICATE_HASHINFO = *mut KERB_CERTIFICATE_HASHINFO;

STRUCT!{struct KERB_CERTIFICATE_INFO {

    CertInfoSize: ULONG,

    InfoType: ULONG,

}}

pub type PKERB_CERTIFICATE_INFO = *mut KERB_CERTIFICATE_INFO;

STRUCT!{struct POLICY_AUDIT_SID_ARRAY {

    UsersCount: ULONG,

    UserSidArray: *mut PSID,

}}

pub type PPOLICY_AUDIT_SID_ARRAY = *mut POLICY_AUDIT_SID_ARRAY;

STRUCT!{struct AUDIT_POLICY_INFORMATION {

    AuditSubCategoryGuid: GUID,

    AuditingInformation: ULONG,

    AuditCategoryGuid: GUID,

}}

pub type PAUDIT_POLICY_INFORMATION = *mut AUDIT_POLICY_INFORMATION;

pub type LPAUDIT_POLICY_INFORMATION = PAUDIT_POLICY_INFORMATION;

pub type PCAUDIT_POLICY_INFORMATION = *const AUDIT_POLICY_INFORMATION;

pub const AUDIT_SET_SYSTEM_POLICY: ULONG = 0x0001;

pub const AUDIT_QUERY_SYSTEM_POLICY: ULONG = 0x0002;

pub const AUDIT_SET_USER_POLICY: ULONG = 0x0004;

pub const AUDIT_QUERY_USER_POLICY: ULONG = 0x0008;

pub const AUDIT_ENUMERATE_USERS: ULONG = 0x0010;

pub const AUDIT_SET_MISC_POLICY: ULONG = 0x0020;

pub const AUDIT_QUERY_MISC_POLICY: ULONG = 0x0040;

pub const AUDIT_GENERIC_ALL: ULONG = STANDARD_RIGHTS_REQUIRED | AUDIT_SET_SYSTEM_POLICY

    | AUDIT_QUERY_SYSTEM_POLICY | AUDIT_SET_USER_POLICY | AUDIT_QUERY_USER_POLICY

    | AUDIT_ENUMERATE_USERS | AUDIT_SET_MISC_POLICY | AUDIT_QUERY_MISC_POLICY;

pub const AUDIT_GENERIC_READ: ULONG = STANDARD_RIGHTS_READ | AUDIT_QUERY_SYSTEM_POLICY

    | AUDIT_QUERY_USER_POLICY | AUDIT_ENUMERATE_USERS | AUDIT_QUERY_MISC_POLICY;

pub const AUDIT_GENERIC_WRITE: ULONG = STANDARD_RIGHTS_WRITE | AUDIT_SET_USER_POLICY

    | AUDIT_SET_MISC_POLICY | AUDIT_SET_SYSTEM_POLICY;

pub const AUDIT_GENERIC_EXECUTE: ULONG = STANDARD_RIGHTS_EXECUTE;

extern "system" {

    pub fn AuditSetSystemPolicy(

        pAuditPolicy: PCAUDIT_POLICY_INFORMATION,

        PolicyCount: ULONG,

    ) -> BOOLEAN;

    pub fn AuditSetPerUserPolicy(

        pSid: *const SID,

        pAuditPolicy: PCAUDIT_POLICY_INFORMATION,

        PolicyCount: ULONG,

    ) -> BOOLEAN;

    pub fn AuditQuerySystemPolicy(

        pSubCategoryGuids: *const GUID,

        PolicyCount: ULONG,

        ppAuditPolicy: *mut PAUDIT_POLICY_INFORMATION,

    ) -> BOOLEAN;

    pub fn AuditQueryPerUserPolicy(

        pSid: *const SID,

        pSubCategoryGuids: *const GUID,

        PolicyCount: ULONG,

        ppAuditPolicy: *mut PAUDIT_POLICY_INFORMATION,

    ) -> BOOLEAN;

    pub fn AuditEnumeratePerUserPolicy(

        ppAuditSidArray: *mut PPOLICY_AUDIT_SID_ARRAY,

    ) -> BOOLEAN;

    pub fn AuditComputeEffectivePolicyBySid(

        pSid: *const SID,

        pSubCategoryGuids: *const GUID,

        dwPolicyCount: ULONG,

        ppAuditPolicy: *mut PAUDIT_POLICY_INFORMATION,

    ) -> BOOLEAN;

    pub fn AuditComputeEffectivePolicyByToken(

        hTokenHandle: HANDLE,

        pSubCategoryGuids: *const GUID,

        dwPolicyCount: ULONG,

        ppAuditPolicy: *mut PAUDIT_POLICY_INFORMATION,

    ) -> BOOLEAN;

    pub fn AuditEnumerateCategories(

        ppAuditCategoriesArray: *mut *mut GUID,

        pdwCountReturned: PULONG,

    ) -> BOOLEAN;

    pub fn AuditEnumerateSubCategories(

        pAuditCategoryGuid: *const GUID,

        bRetrieveAllSubCategories: BOOLEAN,

        ppAuditSubCategoriesArray: *mut *mut GUID,

        pdwCountReturned: PULONG,

    ) -> BOOLEAN;

    pub fn AuditLookupCategoryNameW(

        pAuditCategoryGuid: *const GUID,

        ppszCategoryName: *mut PWSTR,

    ) -> BOOLEAN;

    pub fn AuditLookupCategoryNameA(

        pAuditCategoryGuid: *const GUID,

        ppszCategoryName: *mut PSTR,

    ) -> BOOLEAN;

    pub fn AuditLookupSubCategoryNameW(

        pAuditSubCategoryGuid: *const GUID,

        ppszSubCategoryName: *mut PWSTR,

    ) -> BOOLEAN;

    pub fn AuditLookupSubCategoryNameA(

        pAuditSubCategoryGuid: *const GUID,

        ppszSubCategoryName: *mut PSTR,

    ) -> BOOLEAN;

    pub fn AuditLookupCategoryIdFromCategoryGuid(

        pAuditCategoryGuid: *const GUID,

        pAuditCategoryId: PPOLICY_AUDIT_EVENT_TYPE,

    ) -> BOOLEAN;

    pub fn AuditLookupCategoryGuidFromCategoryId(

        AuditCategoryId: POLICY_AUDIT_EVENT_TYPE,

        pAuditCategoryGuid: *mut GUID,

    ) -> BOOLEAN;

    pub fn AuditSetSecurity(

        SecurityInformation: SECURITY_INFORMATION,

        pSecurityDescriptor: PSECURITY_DESCRIPTOR,

    ) -> BOOLEAN;

    pub fn AuditQuerySecurity(

        SecurityInformation: SECURITY_INFORMATION,

        ppSecurityDescriptor: *mut PSECURITY_DESCRIPTOR,

    ) -> BOOLEAN;

    pub fn AuditSetGlobalSaclW(

        ObjectTypeName: PCWSTR,

        Acl: PACL,

    ) -> BOOLEAN;

    pub fn AuditSetGlobalSaclA(

        ObjectTypeName: PCSTR,

        Acl: PACL,

    ) -> BOOLEAN;

    pub fn AuditQueryGlobalSaclW(

        ObjectTypeName: PCWSTR,

        Acl: *mut PACL,

    ) -> BOOLEAN;

    pub fn AuditQueryGlobalSaclA(

        ObjectTypeName: PCSTR,

        Acl: *mut PACL,

    ) -> BOOLEAN;

    pub fn AuditFree(

        Buffer: PVOID,

);

STRUCT!{struct PKU2U_CERT_BLOB {

    CertOffset: ULONG,

    CertLength: USHORT,

}}

pub type PPKU2U_CERT_BLOB = *mut PKU2U_CERT_BLOB;

pub const PKU2U_CREDUI_CONTEXT_VERSION: ULONG64 = 0x4154414454524543;

STRUCT!{struct PKU2U_CREDUI_CONTEXT {

    Version: ULONG64,

    cbHeaderLength: USHORT,

    cbStructureLength: ULONG,

    CertArrayCount: USHORT,

    CertArrayOffset: ULONG,

}}

pub type PPKU2U_CREDUI_CONTEXT = *mut PKU2U_CREDUI_CONTEXT;

ENUM!{enum PKU2U_LOGON_SUBMIT_TYPE {

    Pku2uCertificateS4ULogon = 14,

}}

pub type PPKU2U_LOGON_SUBMIT_TYPE = *mut PKU2U_LOGON_SUBMIT_TYPE;

STRUCT!{struct PKU2U_CERTIFICATE_S4U_LOGON {

    MessageType: PKU2U_LOGON_SUBMIT_TYPE,

    Flags: ULONG,

    UserPrincipalName: UNICODE_STRING,

    DomainName: UNICODE_STRING,

    CertificateLength: ULONG,

    Certificate: PUCHAR,

}}

pub type PPKU2U_CERTIFICATE_S4U_LOGON = *mut PKU2U_CERTIFICATE_S4U_LOGON;

Revision control

Copy as Markdown

Other Tools