msv1_0.h File Reference

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_RPC_SID
struct	_RPC_UNICODE_STRING
struct	_OLD_LARGE_INTEGER
struct	RPC_SHORT_BLOB
struct	_SAMPR_SR_SECURITY_DESCRIPTOR
struct	_ENCRYPTED_LM_OWF_PASSWORD
struct	_SAMPR_ULONG_ARRAY
struct	_SAMPR_LOGON_HOURS
struct	_SAMPR_USER_INTERNAL2_INFORMATION
struct	_SAMPR_USER_ALL_INFORMATION
union	_SAMPR_USER_INFO_BUFFER
struct	_LSAPR_POLICY_AUDIT_EVENTS_INFO
struct	_LSAPR_POLICY_PRIMARY_DOM_INFO
struct	_LSAPR_POLICY_ACCOUNT_DOM_INFO
struct	_LSAPR_POLICY_PD_ACCOUNT_INFO
struct	_POLICY_LSA_REPLICA_SRCE_INFO
struct	_LSAPR_POLICY_DNS_DOMAIN_INFO
union	_LSAPR_POLICY_INFORMATION

Macros
#define	FIXUP_POINTER(Pointer, Offset)   ((Pointer != NULL) ? ((PWSTR)((ULONG_PTR)Pointer + Offset)) : NULL)
#define	USER_LOGON_BAD_PASSWORD   0x08000000
#define	USER_LOGON_SUCCESS   0x10000000

Typedefs
typedef struct _RPC_SID	RPC_SID
typedef struct _RPC_SID *	PRPC_SID
typedef struct _RPC_UNICODE_STRING	RPC_UNICODE_STRING
typedef struct _RPC_UNICODE_STRING *	PRPC_UNICODE_STRING
typedef wchar_t *	PSAMPR_SERVER_NAME
typedef void *	SAMPR_HANDLE
typedef struct _OLD_LARGE_INTEGER	OLD_LARGE_INTEGER
typedef struct _OLD_LARGE_INTEGER *	POLD_LARGE_INTEGER
typedef struct RPC_SHORT_BLOB	RPC_SHORT_BLOB
typedef struct RPC_SHORT_BLOB *	PRPC_SHORT_BLOB
typedef struct _SAMPR_SR_SECURITY_DESCRIPTOR	SAMPR_SR_SECURITY_DESCRIPTOR
typedef struct _SAMPR_SR_SECURITY_DESCRIPTOR *	PSAMPR_SR_SECURITY_DESCRIPTOR
typedef struct _ENCRYPTED_LM_OWF_PASSWORD	ENCRYPTED_LM_OWF_PASSWORD
typedef struct _ENCRYPTED_LM_OWF_PASSWORD *	PENCRYPTED_LM_OWF_PASSWORD
typedef struct _ENCRYPTED_LM_OWF_PASSWORD	ENCRYPTED_NT_OWF_PASSWORD
typedef struct _ENCRYPTED_LM_OWF_PASSWORD *	PENCRYPTED_NT_OWF_PASSWORD
typedef struct _SAMPR_ULONG_ARRAY	SAMPR_ULONG_ARRAY
typedef struct _SAMPR_ULONG_ARRAY *	PSAMPR_ULONG_ARRAY
typedef struct _SAMPR_LOGON_HOURS	SAMPR_LOGON_HOURS
typedef struct _SAMPR_LOGON_HOURS *	PSAMPR_LOGON_HOURS
typedef struct _SAMPR_USER_INTERNAL2_INFORMATION	SAMPR_USER_INTERNAL2_INFORMATION
typedef struct _SAMPR_USER_INTERNAL2_INFORMATION *	PSAMPR_USER_INTERNAL2_INFORMATION
typedef struct _SAMPR_USER_ALL_INFORMATION	SAMPR_USER_ALL_INFORMATION
typedef struct _SAMPR_USER_ALL_INFORMATION *	PSAMPR_USER_ALL_INFORMATION
typedef union _SAMPR_USER_INFO_BUFFER	SAMPR_USER_INFO_BUFFER
typedef union _SAMPR_USER_INFO_BUFFER *	PSAMPR_USER_INFO_BUFFER
typedef PVOID	LSAPR_HANDLE
typedef struct _LSAPR_POLICY_AUDIT_EVENTS_INFO	LSAPR_POLICY_AUDIT_EVENTS_INFO
typedef struct _LSAPR_POLICY_AUDIT_EVENTS_INFO *	PLSAPR_POLICY_AUDIT_EVENTS_INFO
typedef struct _LSAPR_POLICY_PRIMARY_DOM_INFO	LSAPR_POLICY_PRIMARY_DOM_INFO
typedef struct _LSAPR_POLICY_PRIMARY_DOM_INFO *	PLSAPR_POLICY_PRIMARY_DOM_INFO
typedef struct _LSAPR_POLICY_ACCOUNT_DOM_INFO	LSAPR_POLICY_ACCOUNT_DOM_INFO
typedef struct _LSAPR_POLICY_ACCOUNT_DOM_INFO *	PLSAPR_POLICY_ACCOUNT_DOM_INFO
typedef struct _LSAPR_POLICY_PD_ACCOUNT_INFO	LSAPR_POLICY_PD_ACCOUNT_INFO
typedef struct _LSAPR_POLICY_PD_ACCOUNT_INFO *	PLSAPR_POLICY_PD_ACCOUNT_INFO
typedef struct _POLICY_LSA_REPLICA_SRCE_INFO	POLICY_LSA_REPLICA_SRCE_INFO
typedef struct _POLICY_LSA_REPLICA_SRCE_INFO *	PPOLICY_LSA_REPLICA_SRCE_INFO
typedef struct _LSAPR_POLICY_DNS_DOMAIN_INFO	LSAPR_POLICY_DNS_DOMAIN_INFO
typedef struct _LSAPR_POLICY_DNS_DOMAIN_INFO *	PLSAPR_POLICY_DNS_DOMAIN_INFO
typedef union _LSAPR_POLICY_INFORMATION	LSAPR_POLICY_INFORMATION
typedef union _LSAPR_POLICY_INFORMATION *	PLSAPR_POLICY_INFORMATION

Functions
NTSTATUS NTAPI	SamIConnect (IN PSAMPR_SERVER_NAME ServerName, OUT SAMPR_HANDLE *ServerHandle, IN ACCESS_MASK DesiredAccess, IN BOOLEAN Trusted)
VOID NTAPI	SamIFreeVoid (PVOID Ptr)
VOID NTAPI	SamIFree_SAMPR_ULONG_ARRAY (PSAMPR_ULONG_ARRAY Ptr)
VOID NTAPI	SamIFree_SAMPR_USER_INFO_BUFFER (PSAMPR_USER_INFO_BUFFER Ptr, USER_INFORMATION_CLASS InformationClass)
NTSTATUS NTAPI	SamrChangePasswordUser (IN SAMPR_HANDLE UserHandle, IN unsigned char LmPresent, IN PENCRYPTED_LM_OWF_PASSWORD OldLmEncryptedWithNewLm, IN PENCRYPTED_LM_OWF_PASSWORD NewLmEncryptedWithOldLm, IN unsigned char NtPresent, IN PENCRYPTED_NT_OWF_PASSWORD OldNtEncryptedWithNewNt, IN PENCRYPTED_NT_OWF_PASSWORD NewNtEncryptedWithOldNt, IN unsigned char NtCrossEncryptionPresent, IN PENCRYPTED_NT_OWF_PASSWORD NewNtEncryptedWithNewLm, IN unsigned char LmCrossEncryptionPresent, IN PENCRYPTED_LM_OWF_PASSWORD NewLmEncryptedWithNewNt)
NTSTATUS NTAPI	SamrCloseHandle (IN OUT SAMPR_HANDLE *SamHandle)
NTSTATUS NTAPI	SamrLookupDomainInSamServer (IN SAMPR_HANDLE ServerHandle, IN PRPC_UNICODE_STRING Name, OUT PRPC_SID *DomainId)
NTSTATUS NTAPI	SamrLookupNamesInDomain (IN SAMPR_HANDLE DomainHandle, IN ULONG Count, IN RPC_UNICODE_STRING Names[], OUT PSAMPR_ULONG_ARRAY RelativeIds, OUT PSAMPR_ULONG_ARRAY Use)
NTSTATUS NTAPI	SamrOpenDomain (IN SAMPR_HANDLE ServerHandle, IN ACCESS_MASK DesiredAccess, IN PRPC_SID DomainId, OUT SAMPR_HANDLE *DomainHandle)
NTSTATUS NTAPI	SamrOpenUser (IN SAMPR_HANDLE DomainHandle, IN ACCESS_MASK DesiredAccess, IN ULONG UserId, OUT SAMPR_HANDLE *UserHandle)
NTSTATUS NTAPI	SamrQueryInformationUser (IN SAMPR_HANDLE UserHandle, IN USER_INFORMATION_CLASS UserInformationClass, OUT PSAMPR_USER_INFO_BUFFER *Buffer)
NTSTATUS NTAPI	SamrSetInformationUser (IN SAMPR_HANDLE UserHandle, IN USER_INFORMATION_CLASS UserInformationClass, IN PSAMPR_USER_INFO_BUFFER Buffer)
VOID NTAPI	LsaIFree_LSAPR_POLICY_INFORMATION (IN POLICY_INFORMATION_CLASS InformationClass, IN PLSAPR_POLICY_INFORMATION PolicyInformation)
NTSTATUS WINAPI	LsaIOpenPolicyTrusted (OUT LSAPR_HANDLE *PolicyHandle)
NTSTATUS WINAPI	LsarClose (IN OUT LSAPR_HANDLE *ObjectHandle)
NTSTATUS WINAPI	LsarLookupPrivilegeValue (IN LSAPR_HANDLE PolicyHandle, IN PRPC_UNICODE_STRING Name, OUT PLUID Value)
NTSTATUS WINAPI	LsarQueryInformationPolicy (IN LSAPR_HANDLE PolicyHandle, IN POLICY_INFORMATION_CLASS InformationClass, OUT PLSAPR_POLICY_INFORMATION *PolicyInformation)
NTSTATUS WINAPI	SystemFunction006 (LPCSTR password, LPSTR hash)
NTSTATUS WINAPI	SystemFunction007 (PUNICODE_STRING string, LPBYTE hash)
NTSTATUS WINAPI	SystemFunction012 (const BYTE *in, const BYTE *key, LPBYTE out)
NTSTATUS NTAPI	LsaApCallPackage (_In_ PLSA_CLIENT_REQUEST ClientRequest, _In_ PVOID ProtocolSubmitBuffer, _In_ PVOID ClientBufferBase, _In_ ULONG SubmitBufferLength, _Out_ PVOID *ProtocolReturnBuffer, _Out_ PULONG ReturnBufferLength, _Out_ PNTSTATUS ProtocolStatus)
NTSTATUS NTAPI	LsaApCallPackagePassthrough (_In_ PLSA_CLIENT_REQUEST ClientRequest, _In_ PVOID ProtocolSubmitBuffer, _In_ PVOID ClientBufferBase, _In_ ULONG SubmitBufferLength, _Out_ PVOID *ProtocolReturnBuffer, _Out_ PULONG ReturnBufferLength, _Out_ PNTSTATUS ProtocolStatus)
NTSTATUS NTAPI	LsaApCallPackageUntrusted (_In_ PLSA_CLIENT_REQUEST ClientRequest, _In_ PVOID ProtocolSubmitBuffer, _In_ PVOID ClientBufferBase, _In_ ULONG SubmitBufferLength, _Out_ PVOID *ProtocolReturnBuffer, _Out_ PULONG ReturnBufferLength, _Out_ PNTSTATUS ProtocolStatus)
VOID NTAPI	LsaApLogonTerminated (_In_ PLUID LogonId)
NTSTATUS NTAPI	LsaApLogonUserEx2 (_In_ PLSA_CLIENT_REQUEST ClientRequest, _In_ SECURITY_LOGON_TYPE LogonType, _In_ PVOID ProtocolSubmitBuffer, _In_ PVOID ClientBufferBase, _In_ ULONG SubmitBufferSize, _Out_ PVOID *ProfileBuffer, _Out_ PULONG ProfileBufferSize, _Out_ PLUID LogonId, _Out_ PNTSTATUS SubStatus, _Out_ PLSA_TOKEN_INFORMATION_TYPE TokenInformationType, _Out_ PVOID *TokenInformation, _Out_ PUNICODE_STRING *AccountName, _Out_ PUNICODE_STRING *AuthenticatingAuthority, _Out_ PUNICODE_STRING *MachineName, _Out_ PSECPKG_PRIMARY_CRED PrimaryCredentials, _Out_ PSECPKG_SUPPLEMENTAL_CRED_ARRAY *SupplementalCredentials)

Macro Definition Documentation

FIXUP_POINTER

#define FIXUP_POINTER	(		Pointer,
			Offset
	)		((Pointer != NULL) ? ((PWSTR)((ULONG_PTR)Pointer + Offset)) : NULL)

Definition at line 9 of file msv1_0.h.

USER_LOGON_BAD_PASSWORD

#define USER_LOGON_BAD_PASSWORD   0x08000000

Definition at line 648 of file sam.idl.

USER_LOGON_SUCCESS

#define USER_LOGON_SUCCESS   0x10000000

Definition at line 649 of file sam.idl.

Typedef Documentation

ENCRYPTED_LM_OWF_PASSWORD

typedef struct _ENCRYPTED_LM_OWF_PASSWORD ENCRYPTED_LM_OWF_PASSWORD

ENCRYPTED_NT_OWF_PASSWORD

typedef struct _ENCRYPTED_LM_OWF_PASSWORD ENCRYPTED_NT_OWF_PASSWORD

LSAPR_HANDLE

typedef PVOID LSAPR_HANDLE

Definition at line 229 of file msv1_0.h.

LSAPR_POLICY_ACCOUNT_DOM_INFO

typedef struct _LSAPR_POLICY_ACCOUNT_DOM_INFO LSAPR_POLICY_ACCOUNT_DOM_INFO

LSAPR_POLICY_AUDIT_EVENTS_INFO

typedef struct _LSAPR_POLICY_AUDIT_EVENTS_INFO LSAPR_POLICY_AUDIT_EVENTS_INFO

LSAPR_POLICY_DNS_DOMAIN_INFO

typedef struct _LSAPR_POLICY_DNS_DOMAIN_INFO LSAPR_POLICY_DNS_DOMAIN_INFO

LSAPR_POLICY_INFORMATION

typedef union _LSAPR_POLICY_INFORMATION LSAPR_POLICY_INFORMATION

LSAPR_POLICY_PD_ACCOUNT_INFO

typedef struct _LSAPR_POLICY_PD_ACCOUNT_INFO LSAPR_POLICY_PD_ACCOUNT_INFO

LSAPR_POLICY_PRIMARY_DOM_INFO

typedef struct _LSAPR_POLICY_PRIMARY_DOM_INFO LSAPR_POLICY_PRIMARY_DOM_INFO

OLD_LARGE_INTEGER

typedef struct _OLD_LARGE_INTEGER OLD_LARGE_INTEGER

PENCRYPTED_LM_OWF_PASSWORD

typedef struct _ENCRYPTED_LM_OWF_PASSWORD * PENCRYPTED_LM_OWF_PASSWORD

PENCRYPTED_NT_OWF_PASSWORD

typedef struct _ENCRYPTED_LM_OWF_PASSWORD * PENCRYPTED_NT_OWF_PASSWORD

PLSAPR_POLICY_ACCOUNT_DOM_INFO

typedef struct _LSAPR_POLICY_ACCOUNT_DOM_INFO * PLSAPR_POLICY_ACCOUNT_DOM_INFO

PLSAPR_POLICY_AUDIT_EVENTS_INFO

typedef struct _LSAPR_POLICY_AUDIT_EVENTS_INFO * PLSAPR_POLICY_AUDIT_EVENTS_INFO

PLSAPR_POLICY_DNS_DOMAIN_INFO

typedef struct _LSAPR_POLICY_DNS_DOMAIN_INFO * PLSAPR_POLICY_DNS_DOMAIN_INFO

PLSAPR_POLICY_INFORMATION

typedef union _LSAPR_POLICY_INFORMATION * PLSAPR_POLICY_INFORMATION

PLSAPR_POLICY_PD_ACCOUNT_INFO

typedef struct _LSAPR_POLICY_PD_ACCOUNT_INFO * PLSAPR_POLICY_PD_ACCOUNT_INFO

PLSAPR_POLICY_PRIMARY_DOM_INFO

typedef struct _LSAPR_POLICY_PRIMARY_DOM_INFO * PLSAPR_POLICY_PRIMARY_DOM_INFO

POLD_LARGE_INTEGER

typedef struct _OLD_LARGE_INTEGER * POLD_LARGE_INTEGER

POLICY_LSA_REPLICA_SRCE_INFO

typedef struct _POLICY_LSA_REPLICA_SRCE_INFO POLICY_LSA_REPLICA_SRCE_INFO

PPOLICY_LSA_REPLICA_SRCE_INFO

typedef struct _POLICY_LSA_REPLICA_SRCE_INFO * PPOLICY_LSA_REPLICA_SRCE_INFO

PRPC_SHORT_BLOB

typedef struct RPC_SHORT_BLOB * PRPC_SHORT_BLOB

PRPC_SID

typedef struct _RPC_SID * PRPC_SID

PRPC_UNICODE_STRING

typedef struct _RPC_UNICODE_STRING * PRPC_UNICODE_STRING

PSAMPR_LOGON_HOURS

typedef struct _SAMPR_LOGON_HOURS * PSAMPR_LOGON_HOURS

PSAMPR_SERVER_NAME

typedef wchar_t* PSAMPR_SERVER_NAME

Definition at line 27 of file msv1_0.h.

PSAMPR_SR_SECURITY_DESCRIPTOR

typedef struct _SAMPR_SR_SECURITY_DESCRIPTOR * PSAMPR_SR_SECURITY_DESCRIPTOR

PSAMPR_ULONG_ARRAY

typedef struct _SAMPR_ULONG_ARRAY * PSAMPR_ULONG_ARRAY

PSAMPR_USER_ALL_INFORMATION

typedef struct _SAMPR_USER_ALL_INFORMATION * PSAMPR_USER_ALL_INFORMATION

PSAMPR_USER_INFO_BUFFER

typedef union _SAMPR_USER_INFO_BUFFER * PSAMPR_USER_INFO_BUFFER

PSAMPR_USER_INTERNAL2_INFORMATION

typedef struct _SAMPR_USER_INTERNAL2_INFORMATION * PSAMPR_USER_INTERNAL2_INFORMATION

RPC_SHORT_BLOB

typedef struct RPC_SHORT_BLOB RPC_SHORT_BLOB

RPC_SID

typedef struct _RPC_SID RPC_SID

RPC_UNICODE_STRING

typedef struct _RPC_UNICODE_STRING RPC_UNICODE_STRING

SAMPR_HANDLE

typedef void* SAMPR_HANDLE

Definition at line 28 of file msv1_0.h.

SAMPR_LOGON_HOURS

typedef struct _SAMPR_LOGON_HOURS SAMPR_LOGON_HOURS

SAMPR_SR_SECURITY_DESCRIPTOR

typedef struct _SAMPR_SR_SECURITY_DESCRIPTOR SAMPR_SR_SECURITY_DESCRIPTOR

SAMPR_ULONG_ARRAY

typedef struct _SAMPR_ULONG_ARRAY SAMPR_ULONG_ARRAY

SAMPR_USER_ALL_INFORMATION

typedef struct _SAMPR_USER_ALL_INFORMATION SAMPR_USER_ALL_INFORMATION

SAMPR_USER_INFO_BUFFER

typedef union _SAMPR_USER_INFO_BUFFER SAMPR_USER_INFO_BUFFER

SAMPR_USER_INTERNAL2_INFORMATION

typedef struct _SAMPR_USER_INTERNAL2_INFORMATION SAMPR_USER_INTERNAL2_INFORMATION

Function Documentation

LsaApCallPackage()

NTSTATUS NTAPI LsaApCallPackage	(	_In_ PLSA_CLIENT_REQUEST	ClientRequest,
		_In_ PVOID	ProtocolSubmitBuffer,
		_In_ PVOID	ClientBufferBase,
		_In_ ULONG	SubmitBufferLength,
		_Out_ PVOID *	ProtocolReturnBuffer,
		_Out_ PULONG	ReturnBufferLength,
		_Out_ PNTSTATUS	ProtocolStatus
	)

LsaApCallPackagePassthrough()

NTSTATUS NTAPI LsaApCallPackagePassthrough	(	_In_ PLSA_CLIENT_REQUEST	ClientRequest,
		_In_ PVOID	ProtocolSubmitBuffer,
		_In_ PVOID	ClientBufferBase,
		_In_ ULONG	SubmitBufferLength,
		_Out_ PVOID *	ProtocolReturnBuffer,
		_Out_ PULONG	ReturnBufferLength,
		_Out_ PNTSTATUS	ProtocolStatus
	)

LsaApCallPackageUntrusted()

NTSTATUS NTAPI LsaApCallPackageUntrusted	(	_In_ PLSA_CLIENT_REQUEST	ClientRequest,
		_In_ PVOID	ProtocolSubmitBuffer,
		_In_ PVOID	ClientBufferBase,
		_In_ ULONG	SubmitBufferLength,
		_Out_ PVOID *	ProtocolReturnBuffer,
		_Out_ PULONG	ReturnBufferLength,
		_Out_ PNTSTATUS	ProtocolStatus
	)

LsaApLogonTerminated()

VOID NTAPI LsaApLogonTerminated

(

_In_ PLUID

LogonId

)

Definition at line 1335 of file msv1_0.c.

{
    PLOGON_LIST_ENTRY LogonEntry;
 
    TRACE("LsaApLogonTerminated()\n");
 
    /* Remove the given logon entry from the list */
    LogonEntry = GetLogonByLogonId(LogonId);
    if (LogonEntry != NULL)
    {
        RtlAcquireResourceExclusive(&LogonListResource, TRUE);
        RemoveEntryList(&LogonEntry->ListEntry);
        RtlReleaseResource(&LogonListResource);
 
        if (LogonEntry->UserName.Buffer)
            RtlFreeHeap(RtlGetProcessHeap(), 0, LogonEntry->UserName.Buffer);
 
        if (LogonEntry->LogonDomainName.Buffer)
            RtlFreeHeap(RtlGetProcessHeap(), 0, LogonEntry->LogonDomainName.Buffer);
 
        if (LogonEntry->LogonServer.Buffer)
            RtlFreeHeap(RtlGetProcessHeap(), 0, LogonEntry->LogonServer.Buffer);
 
        RtlFreeHeap(RtlGetProcessHeap(), 0, LogonEntry);
    }
}

LsaApLogonUserEx2()

NTSTATUS NTAPI LsaApLogonUserEx2	(	_In_ PLSA_CLIENT_REQUEST	ClientRequest,
		_In_ SECURITY_LOGON_TYPE	LogonType,
		_In_ PVOID	ProtocolSubmitBuffer,
		_In_ PVOID	ClientBufferBase,
		_In_ ULONG	SubmitBufferSize,
		_Out_ PVOID *	ProfileBuffer,
		_Out_ PULONG	ProfileBufferSize,
		_Out_ PLUID	LogonId,
		_Out_ PNTSTATUS	SubStatus,
		_Out_ PLSA_TOKEN_INFORMATION_TYPE	TokenInformationType,
		_Out_ PVOID *	TokenInformation,
		_Out_ PUNICODE_STRING *	AccountName,
		_Out_ PUNICODE_STRING *	AuthenticatingAuthority,
		_Out_ PUNICODE_STRING *	MachineName,
		_Out_ PSECPKG_PRIMARY_CRED	PrimaryCredentials,
		_Out_ PSECPKG_SUPPLEMENTAL_CRED_ARRAY *	SupplementalCredentials
	)

LsaIFree_LSAPR_POLICY_INFORMATION()

VOID NTAPI LsaIFree_LSAPR_POLICY_INFORMATION	(	IN POLICY_INFORMATION_CLASS	InformationClass,
		IN PLSAPR_POLICY_INFORMATION	PolicyInformation
	)

Definition at line 51 of file lsasrv.c.

{
    if (PolicyInformation != NULL)
    {
        switch (InformationClass)
        {
            case PolicyAuditLogInformation:      /* 1 */
                break;
 
            case PolicyAuditEventsInformation:   /* 2 */
                if (PolicyInformation->PolicyAuditEventsInfo.EventAuditingOptions != NULL)
                    midl_user_free(PolicyInformation->PolicyAuditEventsInfo.EventAuditingOptions);
                break;
 
            case PolicyPrimaryDomainInformation: /* 3 */
                if (PolicyInformation->PolicyPrimaryDomInfo.Name.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyPrimaryDomInfo.Name.Buffer);
 
                if (PolicyInformation->PolicyPrimaryDomInfo.Sid != NULL)
                    midl_user_free(PolicyInformation->PolicyPrimaryDomInfo.Sid);
                break;
 
            case PolicyPdAccountInformation:     /* 4 */
                if (PolicyInformation->PolicyPdAccountInfo.Name.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyPdAccountInfo.Name.Buffer);
                break;
 
            case PolicyAccountDomainInformation: /* 5 */
                if (PolicyInformation->PolicyAccountDomainInfo.DomainName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyAccountDomainInfo.DomainName.Buffer);
 
                if (PolicyInformation->PolicyAccountDomainInfo.Sid != NULL)
                    midl_user_free(PolicyInformation->PolicyAccountDomainInfo.Sid);
                break;
 
            case PolicyLsaServerRoleInformation: /* 6 */
                break;
 
            case PolicyReplicaSourceInformation: /* 7 */
                if (PolicyInformation->PolicyReplicaSourceInfo.ReplicaSource.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyReplicaSourceInfo.ReplicaSource.Buffer);
 
                if (PolicyInformation->PolicyReplicaSourceInfo.ReplicaAccountName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyReplicaSourceInfo.ReplicaAccountName.Buffer);
                break;
 
            case PolicyDefaultQuotaInformation:  /* 8 */
                break;
 
            case PolicyModificationInformation:  /* 9 */
                break;
 
            case PolicyAuditFullSetInformation:  /* 10 (0xA) */
                break;
 
            case PolicyAuditFullQueryInformation: /* 11 (0xB) */
                break;
 
            case PolicyDnsDomainInformation:      /* 12 (0xC) */
                if (PolicyInformation->PolicyDnsDomainInfo.Name.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfo.Name.Buffer);
 
                if (PolicyInformation->PolicyDnsDomainInfo.DnsDomainName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfo.DnsDomainName.Buffer);
 
                if (PolicyInformation->PolicyDnsDomainInfo.DnsForestName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfo.DnsForestName.Buffer);
 
                if (PolicyInformation->PolicyDnsDomainInfo.Sid != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfo.Sid);
                break;
 
            case PolicyDnsDomainInformationInt:   /* 13 (0xD) */
                if (PolicyInformation->PolicyDnsDomainInfoInt.Name.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfoInt.Name.Buffer);
 
                if (PolicyInformation->PolicyDnsDomainInfoInt.DnsDomainName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfoInt.DnsDomainName.Buffer);
 
                if (PolicyInformation->PolicyDnsDomainInfoInt.DnsForestName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfoInt.DnsForestName.Buffer);
 
                if (PolicyInformation->PolicyDnsDomainInfoInt.Sid != NULL)
                    midl_user_free(PolicyInformation->PolicyDnsDomainInfoInt.Sid);
                break;
 
            case PolicyLocalAccountDomainInformation: /* 14 (0xE) */
                if (PolicyInformation->PolicyLocalAccountDomainInfo.DomainName.Buffer != NULL)
                    midl_user_free(PolicyInformation->PolicyLocalAccountDomainInfo.DomainName.Buffer);
 
                if (PolicyInformation->PolicyLocalAccountDomainInfo.Sid != NULL)
                    midl_user_free(PolicyInformation->PolicyLocalAccountDomainInfo.Sid);
                break;
 
            default:
                ERR("Invalid InformationClass: %lu\n", InformationClass);
                break;
        }
 
        midl_user_free(PolicyInformation);
    }
}

LsaIOpenPolicyTrusted()

NTSTATUS WINAPI LsaIOpenPolicyTrusted

(

OUT LSAPR_HANDLE *

PolicyHandle

)

Definition at line 15 of file policy.c.

{
    PLSA_DB_OBJECT PolicyObject;
    NTSTATUS Status;
 
    TRACE("(%p)\n", PolicyHandle);
 
    Status = LsapOpenDbObject(NULL,
                              NULL,
                              L"Policy",
                              LsaDbPolicyObject,
                              POLICY_ALL_ACCESS,
                              TRUE,
                              &PolicyObject);
 
    if (NT_SUCCESS(Status))
        *PolicyHandle = (LSAPR_HANDLE)PolicyObject;
 
    return Status;
}

Referenced by GetAccountDomainSid().

LsarClose()

NTSTATUS WINAPI LsarClose

(

IN OUT LSAPR_HANDLE *

ObjectHandle

)

LsarLookupPrivilegeValue()

NTSTATUS WINAPI LsarLookupPrivilegeValue	(	IN LSAPR_HANDLE	PolicyHandle,
		IN PRPC_UNICODE_STRING	Name,
		OUT PLUID	Value
	)

LsarQueryInformationPolicy()

NTSTATUS WINAPI LsarQueryInformationPolicy	(	IN LSAPR_HANDLE	PolicyHandle,
		IN POLICY_INFORMATION_CLASS	InformationClass,
		OUT PLSAPR_POLICY_INFORMATION *	PolicyInformation
	)

SamIConnect()

NTSTATUS NTAPI SamIConnect	(	IN PSAMPR_SERVER_NAME	ServerName,
		OUT SAMPR_HANDLE *	ServerHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN BOOLEAN	Trusted
	)

Definition at line 65 of file samsrv.c.

{
    PSAM_DB_OBJECT ServerObject;
    NTSTATUS Status;
 
    TRACE("SamIConnect(%p %p %lx %ld)\n",
          ServerName, ServerHandle, DesiredAccess, Trusted);
 
    /* Map generic access rights */
    RtlMapGenericMask(&DesiredAccess,
                      pServerMapping);
 
    /* Open the Server Object */
    Status = SampOpenDbObject(NULL,
                              NULL,
                              L"SAM",
                              0,
                              SamDbServerObject,
                              DesiredAccess,
                              &ServerObject);
    if (NT_SUCCESS(Status))
    {
        ServerObject->Trusted = Trusted;
        *ServerHandle = (SAMPR_HANDLE)ServerObject;
    }
 
    TRACE("SamIConnect done (Status 0x%08lx)\n", Status);
 
    return Status;
}

SamIFree_SAMPR_ULONG_ARRAY()

VOID NTAPI SamIFree_SAMPR_ULONG_ARRAY

(

PSAMPR_ULONG_ARRAY

Ptr

)

Definition at line 524 of file samsrv.c.

{
    if (Ptr == NULL)
        return;
 
    if (Ptr->Element != NULL)
    {
        MIDL_user_free(Ptr->Element);
        Ptr->Element = NULL;
        Ptr->Count = 0;
    }
}

SamIFree_SAMPR_USER_INFO_BUFFER()

VOID NTAPI SamIFree_SAMPR_USER_INFO_BUFFER	(	PSAMPR_USER_INFO_BUFFER	Ptr,
		USER_INFORMATION_CLASS	InformationClass
	)

Definition at line 540 of file samsrv.c.

{
    if (Ptr == NULL)
        return;
 
    switch (InformationClass)
    {
        case UserGeneralInformation:
            if (Ptr->General.UserName.Buffer != NULL)
                MIDL_user_free(Ptr->General.UserName.Buffer);
 
            if (Ptr->General.FullName.Buffer != NULL)
                MIDL_user_free(Ptr->General.FullName.Buffer);
 
            if (Ptr->General.AdminComment.Buffer != NULL)
                MIDL_user_free(Ptr->General.AdminComment.Buffer);
 
            if (Ptr->General.UserComment.Buffer != NULL)
                MIDL_user_free(Ptr->General.UserComment.Buffer);
            break;
 
        case UserPreferencesInformation:
            if (Ptr->Preferences.UserComment.Buffer != NULL)
                MIDL_user_free(Ptr->Preferences.UserComment.Buffer);
 
            if (Ptr->Preferences.Reserved1.Buffer != NULL)
                MIDL_user_free(Ptr->Preferences.Reserved1.Buffer);
            break;
 
        case UserLogonInformation:
            if (Ptr->Logon.UserName.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.UserName.Buffer);
 
            if (Ptr->Logon.FullName.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.FullName.Buffer);
 
            if (Ptr->Logon.HomeDirectory.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.HomeDirectory.Buffer);
 
            if (Ptr->Logon.HomeDirectoryDrive.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.HomeDirectoryDrive.Buffer);
 
            if (Ptr->Logon.ScriptPath.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.ScriptPath.Buffer);
 
            if (Ptr->Logon.ProfilePath.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.ProfilePath.Buffer);
 
            if (Ptr->Logon.WorkStations.Buffer != NULL)
                MIDL_user_free(Ptr->Logon.WorkStations.Buffer);
 
            if (Ptr->Logon.LogonHours.LogonHours != NULL)
                MIDL_user_free(Ptr->Logon.LogonHours.LogonHours);
            break;
 
        case UserLogonHoursInformation:
            if (Ptr->LogonHours.LogonHours.LogonHours != NULL)
                MIDL_user_free(Ptr->LogonHours.LogonHours.LogonHours);
            break;
 
        case UserAccountInformation:
            if (Ptr->Account.UserName.Buffer != NULL)
                MIDL_user_free(Ptr->Account.UserName.Buffer);
 
            if (Ptr->Account.FullName.Buffer != NULL)
                MIDL_user_free(Ptr->Account.FullName.Buffer);
 
            if (Ptr->Account.HomeDirectory.Buffer != NULL)
                MIDL_user_free(Ptr->Account.HomeDirectory.Buffer);
 
            if (Ptr->Account.HomeDirectoryDrive.Buffer != NULL)
                MIDL_user_free(Ptr->Account.HomeDirectoryDrive.Buffer);
 
            if (Ptr->Account.ScriptPath.Buffer != NULL)
                MIDL_user_free(Ptr->Account.ScriptPath.Buffer);
 
            if (Ptr->Account.ProfilePath.Buffer != NULL)
                MIDL_user_free(Ptr->Account.ProfilePath.Buffer);
 
            if (Ptr->Account.AdminComment.Buffer != NULL)
                MIDL_user_free(Ptr->Account.AdminComment.Buffer);
 
            if (Ptr->Account.WorkStations.Buffer != NULL)
                MIDL_user_free(Ptr->Account.WorkStations.Buffer);
 
            if (Ptr->Account.LogonHours.LogonHours != NULL)
                MIDL_user_free(Ptr->Account.LogonHours.LogonHours);
            break;
 
        case UserNameInformation:
            if (Ptr->Name.UserName.Buffer != NULL)
                MIDL_user_free(Ptr->Name.UserName.Buffer);
 
            if (Ptr->Name.FullName.Buffer != NULL)
                MIDL_user_free(Ptr->Name.FullName.Buffer);
            break;
 
        case UserAccountNameInformation:
            if (Ptr->AccountName.UserName.Buffer != NULL)
                MIDL_user_free(Ptr->AccountName.UserName.Buffer);
            break;
 
        case UserFullNameInformation:
            if (Ptr->FullName.FullName.Buffer != NULL)
                MIDL_user_free(Ptr->FullName.FullName.Buffer);
            break;
 
        case UserPrimaryGroupInformation:
            break;
 
        case UserHomeInformation:
            if (Ptr->Home.HomeDirectory.Buffer != NULL)
                MIDL_user_free(Ptr->Home.HomeDirectory.Buffer);
 
            if (Ptr->Home.HomeDirectoryDrive.Buffer != NULL)
                MIDL_user_free(Ptr->Home.HomeDirectoryDrive.Buffer);
            break;
 
        case UserScriptInformation:
            if (Ptr->Script.ScriptPath.Buffer != NULL)
                MIDL_user_free(Ptr->Script.ScriptPath.Buffer);
            break;
 
        case UserProfileInformation:
            if (Ptr->Profile.ProfilePath.Buffer != NULL)
                MIDL_user_free(Ptr->Profile.ProfilePath.Buffer);
            break;
 
        case UserAdminCommentInformation:
            if (Ptr->AdminComment.AdminComment.Buffer != NULL)
                MIDL_user_free(Ptr->AdminComment.AdminComment.Buffer);
            break;
 
        case UserWorkStationsInformation:
            if (Ptr->WorkStations.WorkStations.Buffer != NULL)
                MIDL_user_free(Ptr->WorkStations.WorkStations.Buffer);
            break;
 
        case UserSetPasswordInformation:
            ERR("Information class UserSetPasswordInformation cannot be queried!\n");
            break;
 
        case UserControlInformation:
            break;
 
        case UserExpiresInformation:
            break;
 
        case UserInternal1Information:
            break;
 
        case UserInternal2Information:
            break;
 
        case UserParametersInformation:
            if (Ptr->Parameters.Parameters.Buffer != NULL)
                MIDL_user_free(Ptr->Parameters.Parameters.Buffer);
            break;
 
        case UserAllInformation:
            if (Ptr->All.UserName.Buffer != NULL)
                MIDL_user_free(Ptr->All.UserName.Buffer);
 
            if (Ptr->All.FullName.Buffer != NULL)
                MIDL_user_free(Ptr->All.FullName.Buffer);
 
            if (Ptr->All.HomeDirectory.Buffer != NULL)
                MIDL_user_free(Ptr->All.HomeDirectory.Buffer);
 
            if (Ptr->All.HomeDirectoryDrive.Buffer != NULL)
                MIDL_user_free(Ptr->All.HomeDirectoryDrive.Buffer);
 
            if (Ptr->All.ScriptPath.Buffer != NULL)
                MIDL_user_free(Ptr->All.ScriptPath.Buffer);
 
            if (Ptr->All.ProfilePath.Buffer != NULL)
                MIDL_user_free(Ptr->All.ProfilePath.Buffer);
 
            if (Ptr->All.AdminComment.Buffer != NULL)
                MIDL_user_free(Ptr->All.AdminComment.Buffer);
 
            if (Ptr->All.WorkStations.Buffer != NULL)
                MIDL_user_free(Ptr->All.WorkStations.Buffer);
 
            if (Ptr->All.UserComment.Buffer != NULL)
                MIDL_user_free(Ptr->All.UserComment.Buffer);
 
            if (Ptr->All.Parameters.Buffer != NULL)
                MIDL_user_free(Ptr->All.Parameters.Buffer);
 
            if (Ptr->All.LmOwfPassword.Buffer != NULL)
                MIDL_user_free(Ptr->All.LmOwfPassword.Buffer);
 
            if (Ptr->All.NtOwfPassword.Buffer != NULL)
                MIDL_user_free(Ptr->All.NtOwfPassword.Buffer);
 
            if (Ptr->All.PrivateData.Buffer != NULL)
                MIDL_user_free(Ptr->All.PrivateData.Buffer);
 
            if (Ptr->All.SecurityDescriptor.SecurityDescriptor != NULL)
                MIDL_user_free(Ptr->All.SecurityDescriptor.SecurityDescriptor);
 
            if (Ptr->All.LogonHours.LogonHours != NULL)
                MIDL_user_free(Ptr->All.LogonHours.LogonHours);
            break;
 
        default:
            FIXME("Unsupported information class: %lu\n", InformationClass);
            break;
    }
 
    MIDL_user_free(Ptr);
}

Referenced by LsaApLogonUserEx2(), and SamValidateNormalUser().

SamIFreeVoid()

VOID NTAPI SamIFreeVoid

(

PVOID

Ptr

)

Definition at line 155 of file samsrv.c.

{
    MIDL_user_free(Ptr);
}

Referenced by MsvpChangePassword().

SamrChangePasswordUser()

NTSTATUS NTAPI SamrChangePasswordUser	(	IN SAMPR_HANDLE	UserHandle,
		IN unsigned char	LmPresent,
		IN PENCRYPTED_LM_OWF_PASSWORD	OldLmEncryptedWithNewLm,
		IN PENCRYPTED_LM_OWF_PASSWORD	NewLmEncryptedWithOldLm,
		IN unsigned char	NtPresent,
		IN PENCRYPTED_NT_OWF_PASSWORD	OldNtEncryptedWithNewNt,
		IN PENCRYPTED_NT_OWF_PASSWORD	NewNtEncryptedWithOldNt,
		IN unsigned char	NtCrossEncryptionPresent,
		IN PENCRYPTED_NT_OWF_PASSWORD	NewNtEncryptedWithNewLm,
		IN unsigned char	LmCrossEncryptionPresent,
		IN PENCRYPTED_LM_OWF_PASSWORD	NewLmEncryptedWithNewNt
	)

Definition at line 7864 of file samrpc.c.

{
    ENCRYPTED_LM_OWF_PASSWORD StoredLmPassword;
    ENCRYPTED_NT_OWF_PASSWORD StoredNtPassword;
    LM_OWF_PASSWORD OldLmPassword;
    LM_OWF_PASSWORD NewLmPassword;
    NT_OWF_PASSWORD OldNtPassword;
    NT_OWF_PASSWORD NewNtPassword;
    BOOLEAN StoredLmPresent = FALSE;
    BOOLEAN StoredNtPresent = FALSE;
    BOOLEAN StoredLmEmpty = TRUE;
    BOOLEAN StoredNtEmpty = TRUE;
    PSAM_DB_OBJECT UserObject;
    ULONG Length;
    SAM_USER_FIXED_DATA UserFixedData;
    SAM_DOMAIN_FIXED_DATA DomainFixedData;
    LARGE_INTEGER SystemTime;
    NTSTATUS Status;
 
    DBG_UNREFERENCED_LOCAL_VARIABLE(StoredLmPresent);
    DBG_UNREFERENCED_LOCAL_VARIABLE(StoredNtPresent);
    DBG_UNREFERENCED_LOCAL_VARIABLE(StoredLmEmpty);
 
    TRACE("SamrChangePasswordUser(%p %u %p %p %u %p %p %u %p %u %p)\n",
          UserHandle, LmPresent, OldLmEncryptedWithNewLm, NewLmEncryptedWithOldLm,
          NtPresent, OldNtEncryptedWithNewNt, NewNtEncryptedWithOldNt, NtCrossEncryptionPresent,
          NewNtEncryptedWithNewLm, LmCrossEncryptionPresent, NewLmEncryptedWithNewNt);
 
    RtlAcquireResourceExclusive(&SampResource,
                                TRUE);
 
    /* Validate the user handle */
    Status = SampValidateDbObject(UserHandle,
                                  SamDbUserObject,
                                  USER_CHANGE_PASSWORD,
                                  &UserObject);
    if (!NT_SUCCESS(Status))
    {
        TRACE("SampValidateDbObject failed with status 0x%08lx\n", Status);
        goto done;
    }
 
    /* Get the current time */
    Status = NtQuerySystemTime(&SystemTime);
    if (!NT_SUCCESS(Status))
    {
        TRACE("NtQuerySystemTime failed (Status 0x%08lx)\n", Status);
        goto done;
    }
 
    /* Retrieve the LM password */
    Length = sizeof(ENCRYPTED_LM_OWF_PASSWORD);
    Status = SampGetObjectAttribute(UserObject,
                                    L"LMPwd",
                                    NULL,
                                    &StoredLmPassword,
                                    &Length);
    if (NT_SUCCESS(Status))
    {
        if (Length == sizeof(ENCRYPTED_LM_OWF_PASSWORD))
        {
            StoredLmPresent = TRUE;
            if (!RtlEqualMemory(&StoredLmPassword,
                                &EmptyLmHash,
                                sizeof(ENCRYPTED_LM_OWF_PASSWORD)))
                StoredLmEmpty = FALSE;
        }
    }
 
    /* Retrieve the NT password */
    Length = sizeof(ENCRYPTED_NT_OWF_PASSWORD);
    Status = SampGetObjectAttribute(UserObject,
                                    L"NTPwd",
                                    NULL,
                                    &StoredNtPassword,
                                    &Length);
    if (NT_SUCCESS(Status))
    {
        if (Length == sizeof(ENCRYPTED_NT_OWF_PASSWORD))
        {
            StoredNtPresent = TRUE;
            if (!RtlEqualMemory(&StoredNtPassword,
                                &EmptyNtHash,
                                sizeof(ENCRYPTED_NT_OWF_PASSWORD)))
                StoredNtEmpty = FALSE;
        }
    }
 
    /* Retrieve the fixed size user data */
    Length = sizeof(SAM_USER_FIXED_DATA);
    Status = SampGetObjectAttribute(UserObject,
                                    L"F",
                                    NULL,
                                    &UserFixedData,
                                    &Length);
    if (!NT_SUCCESS(Status))
    {
        TRACE("SampGetObjectAttribute failed to retrieve the fixed user data (Status 0x%08lx)\n", Status);
        goto done;
    }
 
    /* Check if we can change the password at this time */
    if ((StoredLmEmpty == FALSE) || (StoredNtEmpty == FALSE))
    {
        /* Get fixed domain data */
        Length = sizeof(SAM_DOMAIN_FIXED_DATA);
        Status = SampGetObjectAttribute(UserObject->ParentObject,
                                        L"F",
                                        NULL,
                                        &DomainFixedData,
                                        &Length);
        if (!NT_SUCCESS(Status))
        {
            TRACE("SampGetObjectAttribute failed to retrieve the fixed domain data (Status 0x%08lx)\n", Status);
            goto done;
        }
 
        if (DomainFixedData.MinPasswordAge.QuadPart > 0)
        {
            if (SystemTime.QuadPart < (UserFixedData.PasswordLastSet.QuadPart + DomainFixedData.MinPasswordAge.QuadPart))
            {
                Status = STATUS_ACCOUNT_RESTRICTION;
                goto done;
            }
        }
    }
 
    /* Decrypt the LM passwords, if present */
    if (LmPresent)
    {
        Status = SystemFunction013((const BYTE *)NewLmEncryptedWithOldLm,
                                   (const BYTE *)&StoredLmPassword,
                                   (LPBYTE)&NewLmPassword);
        if (!NT_SUCCESS(Status))
        {
            TRACE("SystemFunction013 failed (Status 0x%08lx)\n", Status);
            goto done;
        }
 
        Status = SystemFunction013((const BYTE *)OldLmEncryptedWithNewLm,
                                   (const BYTE *)&NewLmPassword,
                                   (LPBYTE)&OldLmPassword);
        if (!NT_SUCCESS(Status))
        {
            TRACE("SystemFunction013 failed (Status 0x%08lx)\n", Status);
            goto done;
        }
    }
 
    /* Decrypt the NT passwords, if present */
    if (NtPresent)
    {
        Status = SystemFunction013((const BYTE *)NewNtEncryptedWithOldNt,
                                   (const BYTE *)&StoredNtPassword,
                                   (LPBYTE)&NewNtPassword);
        if (!NT_SUCCESS(Status))
        {
            TRACE("SystemFunction013 failed (Status 0x%08lx)\n", Status);
            goto done;
        }
 
        Status = SystemFunction013((const BYTE *)OldNtEncryptedWithNewNt,
                                   (const BYTE *)&NewNtPassword,
                                   (LPBYTE)&OldNtPassword);
        if (!NT_SUCCESS(Status))
        {
            TRACE("SystemFunction013 failed (Status 0x%08lx)\n", Status);
            goto done;
        }
    }
 
    /* Check if the old passwords match the stored ones */
    if (NtPresent)
    {
        if (LmPresent)
        {
            if (!RtlEqualMemory(&StoredLmPassword,
                                &OldLmPassword,
                                sizeof(ENCRYPTED_LM_OWF_PASSWORD)))
            {
                TRACE("Old LM Password does not match!\n");
                Status = STATUS_WRONG_PASSWORD;
            }
            else
            {
                if (!RtlEqualMemory(&StoredNtPassword,
                                    &OldNtPassword,
                                    sizeof(ENCRYPTED_LM_OWF_PASSWORD)))
                {
                    TRACE("Old NT Password does not match!\n");
                    Status = STATUS_WRONG_PASSWORD;
                }
            }
        }
        else
        {
            if (!RtlEqualMemory(&StoredNtPassword,
                                &OldNtPassword,
                                sizeof(ENCRYPTED_LM_OWF_PASSWORD)))
            {
                TRACE("Old NT Password does not match!\n");
                Status = STATUS_WRONG_PASSWORD;
            }
        }
    }
    else
    {
        if (LmPresent)
        {
            if (!RtlEqualMemory(&StoredLmPassword,
                                &OldLmPassword,
                                sizeof(ENCRYPTED_LM_OWF_PASSWORD)))
            {
                TRACE("Old LM Password does not match!\n");
                Status = STATUS_WRONG_PASSWORD;
            }
        }
        else
        {
            Status = STATUS_INVALID_PARAMETER;
        }
    }
 
    /* Store the new password hashes */
    if (NT_SUCCESS(Status))
    {
        Status = SampSetUserPassword(UserObject,
                                     &NewNtPassword,
                                     NtPresent,
                                     &NewLmPassword,
                                     LmPresent);
        if (NT_SUCCESS(Status))
        {
            /* Update PasswordLastSet */
            UserFixedData.PasswordLastSet.QuadPart = SystemTime.QuadPart;
 
            /* Set the fixed size user data */
            Length = sizeof(SAM_USER_FIXED_DATA);
            Status = SampSetObjectAttribute(UserObject,
                                            L"F",
                                            REG_BINARY,
                                            &UserFixedData,
                                            Length);
        }
    }
 
    if (Status == STATUS_WRONG_PASSWORD)
    {
        /* Update BadPasswordCount and LastBadPasswordTime */
        UserFixedData.BadPasswordCount++;
        UserFixedData.LastBadPasswordTime.QuadPart = SystemTime.QuadPart;
 
        /* Set the fixed size user data */
        Length = sizeof(SAM_USER_FIXED_DATA);
        Status = SampSetObjectAttribute(UserObject,
                                        L"F",
                                        REG_BINARY,
                                        &UserFixedData,
                                        Length);
    }
 
done:
    RtlReleaseResource(&SampResource);
 
    return Status;
}

Referenced by MsvpChangePassword(), and SamChangePasswordUser().

SamrCloseHandle()

NTSTATUS NTAPI SamrCloseHandle

(

IN OUT SAMPR_HANDLE *

SamHandle

)

Definition at line 161 of file samrpc.c.

{
    PSAM_DB_OBJECT DbObject;
    NTSTATUS Status = STATUS_SUCCESS;
 
    TRACE("SamrCloseHandle(%p)\n", SamHandle);
 
    RtlAcquireResourceShared(&SampResource,
                             TRUE);
 
    Status = SampValidateDbObject(*SamHandle,
                                  SamDbIgnoreObject,
                                  0,
                                  &DbObject);
    if (Status == STATUS_SUCCESS)
    {
        Status = SampCloseDbObject(DbObject);
        *SamHandle = NULL;
    }
 
    RtlReleaseResource(&SampResource);
 
    TRACE("SamrCloseHandle done (Status 0x%08lx)\n", Status);
 
    return Status;
}

Referenced by SamrGetDomainPasswordInformation().

SamrLookupDomainInSamServer()

NTSTATUS NTAPI SamrLookupDomainInSamServer	(	IN SAMPR_HANDLE	ServerHandle,
		IN PRPC_UNICODE_STRING	Name,
		OUT PRPC_SID *	DomainId
	)

Definition at line 504 of file samrpc.c.

{
    PSAM_DB_OBJECT ServerObject;
    HANDLE DomainsKeyHandle = NULL;
    HANDLE DomainKeyHandle = NULL;
    WCHAR DomainKeyName[64];
    ULONG Index;
    WCHAR DomainNameString[MAX_COMPUTERNAME_LENGTH + 1];
    UNICODE_STRING DomainName;
    ULONG Length;
    BOOL Found = FALSE;
    NTSTATUS Status;
 
    TRACE("SamrLookupDomainInSamServer(%p %p %p)\n",
          ServerHandle, Name, DomainId);
 
    RtlAcquireResourceShared(&SampResource,
                             TRUE);
 
    /* Validate the server handle */
    Status = SampValidateDbObject(ServerHandle,
                                  SamDbServerObject,
                                  SAM_SERVER_LOOKUP_DOMAIN,
                                  &ServerObject);
    if (!NT_SUCCESS(Status))
        goto done;
 
    *DomainId = NULL;
 
    Status = SampRegOpenKey(ServerObject->KeyHandle,
                            L"Domains",
                            KEY_READ,
                            &DomainsKeyHandle);
    if (!NT_SUCCESS(Status))
        goto done;
 
    Index = 0;
    while (Found == FALSE)
    {
        Status = SampRegEnumerateSubKey(DomainsKeyHandle,
                                        Index,
                                        64,
                                        DomainKeyName);
        if (!NT_SUCCESS(Status))
        {
            if (Status == STATUS_NO_MORE_ENTRIES)
                Status = STATUS_NO_SUCH_DOMAIN;
            break;
        }
 
        TRACE("Domain key name: %S\n", DomainKeyName);
 
        Status = SampRegOpenKey(DomainsKeyHandle,
                                DomainKeyName,
                                KEY_READ,
                                &DomainKeyHandle);
        if (NT_SUCCESS(Status))
        {
            Length = (MAX_COMPUTERNAME_LENGTH + 1) * sizeof(WCHAR);
            Status = SampRegQueryValue(DomainKeyHandle,
                                       L"Name",
                                       NULL,
                                       (PVOID)&DomainNameString,
                                       &Length);
            if (NT_SUCCESS(Status))
            {
                TRACE("Domain name: %S\n", DomainNameString);
 
                RtlInitUnicodeString(&DomainName,
                                     DomainNameString);
                if (RtlEqualUnicodeString(&DomainName, (PUNICODE_STRING)Name, TRUE))
                {
                   TRACE("Found it!\n");
                   Found = TRUE;
 
                   Status = SampRegQueryValue(DomainKeyHandle,
                                              L"SID",
                                              NULL,
                                              NULL,
                                              &Length);
                   if (NT_SUCCESS(Status))
                   {
                       *DomainId = midl_user_allocate(Length);
 
                       SampRegQueryValue(DomainKeyHandle,
                                         L"SID",
                                         NULL,
                                         (PVOID)*DomainId,
                                         &Length);
 
                       Status = STATUS_SUCCESS;
                       break;
                   }
                }
            }
 
            SampRegCloseKey(&DomainKeyHandle);
        }
 
        Index++;
    }
 
done:
    SampRegCloseKey(&DomainKeyHandle);
    SampRegCloseKey(&DomainsKeyHandle);
 
    RtlReleaseResource(&SampResource);
 
    return Status;
}

Referenced by MsvpChangePassword(), and SamLookupDomainInSamServer().

SamrLookupNamesInDomain()

NTSTATUS NTAPI SamrLookupNamesInDomain	(	IN SAMPR_HANDLE	DomainHandle,
		IN ULONG	Count,
		IN RPC_UNICODE_STRING	Names[],
		OUT PSAMPR_ULONG_ARRAY	RelativeIds,
		OUT PSAMPR_ULONG_ARRAY	Use
	)

Definition at line 3464 of file samrpc.c.

{
    PSAM_DB_OBJECT DomainObject;
    HANDLE AccountsKeyHandle = NULL;
    HANDLE NamesKeyHandle = NULL;
    ULONG MappedCount = 0;
    ULONG DataLength;
    ULONG i;
    ULONG RelativeId;
    NTSTATUS Status;
 
    TRACE("SamrLookupNamesInDomain(%p %lu %p %p %p)\n",
          DomainHandle, Count, Names, RelativeIds, Use);
 
    RtlAcquireResourceShared(&SampResource,
                             TRUE);
 
    /* Validate the domain handle */
    Status = SampValidateDbObject(DomainHandle,
                                  SamDbDomainObject,
                                  DOMAIN_LOOKUP,
                                  &DomainObject);
    if (!NT_SUCCESS(Status))
    {
        TRACE("failed with status 0x%08lx\n", Status);
        goto done;
    }
 
    RelativeIds->Count = 0;
    Use->Count = 0;
 
    if (Count == 0)
    {
        Status = STATUS_SUCCESS;
        goto done;
    }
 
    /* Allocate the relative IDs array */
    RelativeIds->Element = midl_user_allocate(Count * sizeof(ULONG));
    if (RelativeIds->Element == NULL)
    {
        Status = STATUS_INSUFFICIENT_RESOURCES;
        goto done;
    }
 
    /* Allocate the use array */
    Use->Element = midl_user_allocate(Count * sizeof(ULONG));
    if (Use->Element == NULL)
    {
        Status = STATUS_INSUFFICIENT_RESOURCES;
        goto done;
    }
 
    RelativeIds->Count = Count;
    Use->Count = Count;
 
    for (i = 0; i < Count; i++)
    {
        TRACE("Name: %S\n", Names[i].Buffer);
 
        RelativeId = 0;
 
        /* Lookup aliases */
        Status = SampRegOpenKey(DomainObject->KeyHandle,
                                L"Aliases",
                                KEY_READ,
                                &AccountsKeyHandle);
        if (NT_SUCCESS(Status))
        {
            Status = SampRegOpenKey(AccountsKeyHandle,
                                    L"Names",
                                    KEY_READ,
                                    &NamesKeyHandle);
            if (NT_SUCCESS(Status))
            {
                DataLength = sizeof(ULONG);
                Status = SampRegQueryValue(NamesKeyHandle,
                                           Names[i].Buffer,
                                           NULL,
                                           &RelativeId,
                                           &DataLength);
 
                SampRegCloseKey(&NamesKeyHandle);
            }
 
            SampRegCloseKey(&AccountsKeyHandle);
        }
 
        if (!NT_SUCCESS(Status) && Status != STATUS_OBJECT_NAME_NOT_FOUND)
            break;
 
        /* Return alias account */
        if (NT_SUCCESS(Status) && RelativeId != 0)
        {
            TRACE("Rid: %lu\n", RelativeId);
            RelativeIds->Element[i] = RelativeId;
            Use->Element[i] = SidTypeAlias;
            MappedCount++;
            continue;
        }
 
        /* Lookup groups */
        Status = SampRegOpenKey(DomainObject->KeyHandle,
                                L"Groups",
                                KEY_READ,
                                &AccountsKeyHandle);
        if (NT_SUCCESS(Status))
        {
            Status = SampRegOpenKey(AccountsKeyHandle,
                                    L"Names",
                                    KEY_READ,
                                    &NamesKeyHandle);
            if (NT_SUCCESS(Status))
            {
                DataLength = sizeof(ULONG);
                Status = SampRegQueryValue(NamesKeyHandle,
                                           Names[i].Buffer,
                                           NULL,
                                           &RelativeId,
                                           &DataLength);
 
                SampRegCloseKey(&NamesKeyHandle);
            }
 
            SampRegCloseKey(&AccountsKeyHandle);
        }
 
        if (!NT_SUCCESS(Status) && Status != STATUS_OBJECT_NAME_NOT_FOUND)
            break;
 
        /* Return group account */
        if (NT_SUCCESS(Status) && RelativeId != 0)
        {
            TRACE("Rid: %lu\n", RelativeId);
            RelativeIds->Element[i] = RelativeId;
            Use->Element[i] = SidTypeGroup;
            MappedCount++;
            continue;
        }
 
        /* Lookup users */
        Status = SampRegOpenKey(DomainObject->KeyHandle,
                                L"Users",
                                KEY_READ,
                                &AccountsKeyHandle);
        if (NT_SUCCESS(Status))
        {
            Status = SampRegOpenKey(AccountsKeyHandle,
                                    L"Names",
                                    KEY_READ,
                                    &NamesKeyHandle);
            if (NT_SUCCESS(Status))
            {
                DataLength = sizeof(ULONG);
                Status = SampRegQueryValue(NamesKeyHandle,
                                           Names[i].Buffer,
                                           NULL,
                                           &RelativeId,
                                           &DataLength);
 
                SampRegCloseKey(&NamesKeyHandle);
            }
 
            SampRegCloseKey(&AccountsKeyHandle);
        }
 
        if (!NT_SUCCESS(Status) && Status != STATUS_OBJECT_NAME_NOT_FOUND)
            break;
 
        /* Return user account */
        if (NT_SUCCESS(Status) && RelativeId != 0)
        {
            TRACE("Rid: %lu\n", RelativeId);
            RelativeIds->Element[i] = RelativeId;
            Use->Element[i] = SidTypeUser;
            MappedCount++;
            continue;
        }
 
        /* Return unknown account */
        RelativeIds->Element[i] = 0;
        Use->Element[i] = SidTypeUnknown;
    }
 
done:
    if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
        Status = STATUS_SUCCESS;
 
    if (NT_SUCCESS(Status))
    {
        if (MappedCount == 0)
            Status = STATUS_NONE_MAPPED;
        else if (MappedCount < Count)
            Status = STATUS_SOME_NOT_MAPPED;
    }
    else
    {
        if (RelativeIds->Element != NULL)
        {
            midl_user_free(RelativeIds->Element);
            RelativeIds->Element = NULL;
        }
 
        RelativeIds->Count = 0;
 
        if (Use->Element != NULL)
        {
            midl_user_free(Use->Element);
            Use->Element = NULL;
        }
 
        Use->Count = 0;
    }
 
    RtlReleaseResource(&SampResource);
 
    TRACE("Returned Status %lx\n", Status);
 
    return Status;
}

SamrOpenDomain()

NTSTATUS NTAPI SamrOpenDomain	(	IN SAMPR_HANDLE	ServerHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN PRPC_SID	DomainId,
		OUT SAMPR_HANDLE *	DomainHandle
	)

Definition at line 831 of file samrpc.c.

{
    PSAM_DB_OBJECT ServerObject;
    PSAM_DB_OBJECT DomainObject;
    NTSTATUS Status;
 
    TRACE("SamrOpenDomain(%p %lx %p %p)\n",
          ServerHandle, DesiredAccess, DomainId, DomainHandle);
 
    /* Map generic access rights */
    RtlMapGenericMask(&DesiredAccess,
                      &DomainMapping);
 
    RtlAcquireResourceShared(&SampResource,
                             TRUE);
 
    /* Validate the server handle */
    Status = SampValidateDbObject(ServerHandle,
                                  SamDbServerObject,
                                  SAM_SERVER_LOOKUP_DOMAIN,
                                  &ServerObject);
    if (!NT_SUCCESS(Status))
        return Status;
 
    /* Validate the Domain SID */
    if ((DomainId->Revision != SID_REVISION) ||
        (DomainId->SubAuthorityCount > SID_MAX_SUB_AUTHORITIES) ||
        (memcmp(&DomainId->IdentifierAuthority, &NtSidAuthority, sizeof(SID_IDENTIFIER_AUTHORITY)) != 0))
        return STATUS_INVALID_PARAMETER;
 
    /* Open the domain object */
    if ((DomainId->SubAuthorityCount == 1) &&
        (DomainId->SubAuthority[0] == SECURITY_BUILTIN_DOMAIN_RID))
    {
        /* Builtin domain object */
        TRACE("Opening the builtin domain object.\n");
 
        Status = SampOpenDbObject(ServerObject,
                                  L"Domains",
                                  L"Builtin",
                                  0,
                                  SamDbDomainObject,
                                  DesiredAccess,
                                  &DomainObject);
    }
    else if ((DomainId->SubAuthorityCount == 4) &&
             (DomainId->SubAuthority[0] == SECURITY_NT_NON_UNIQUE))
    {
        /* Account domain object */
        TRACE("Opening the account domain object.\n");
 
        /* FIXME: Check the account domain sub authorities!!! */
 
        Status = SampOpenDbObject(ServerObject,
                                  L"Domains",
                                  L"Account",
                                  0,
                                  SamDbDomainObject,
                                  DesiredAccess,
                                  &DomainObject);
    }
    else
    {
        /* No valid domain SID */
        Status = STATUS_INVALID_PARAMETER;
    }
 
    if (NT_SUCCESS(Status))
        *DomainHandle = (SAMPR_HANDLE)DomainObject;
 
    RtlReleaseResource(&SampResource);
 
    TRACE("SamrOpenDomain done (Status 0x%08lx)\n", Status);
 
    return Status;
}

SamrOpenUser()

NTSTATUS NTAPI SamrOpenUser	(	IN SAMPR_HANDLE	DomainHandle,
		IN ACCESS_MASK	DesiredAccess,
		IN ULONG	UserId,
		OUT SAMPR_HANDLE *	UserHandle
	)

Referenced by MsvpChangePassword(), SamOpenUser(), and SamValidateNormalUser().

SamrQueryInformationUser()

NTSTATUS NTAPI SamrQueryInformationUser	(	IN SAMPR_HANDLE	UserHandle,
		IN USER_INFORMATION_CLASS	UserInformationClass,
		OUT PSAMPR_USER_INFO_BUFFER *	Buffer
	)

Definition at line 7234 of file samrpc.c.

{
    TRACE("SamrQueryInformationUser(%p %lu %p)\n",
          UserHandle, UserInformationClass, Buffer);
 
    return SamrQueryInformationUser2(UserHandle,
                                     UserInformationClass,
                                     Buffer);
}

Referenced by SamQueryInformationUser(), and SamValidateNormalUser().

SamrSetInformationUser()

NTSTATUS NTAPI SamrSetInformationUser	(	IN SAMPR_HANDLE	UserHandle,
		IN USER_INFORMATION_CLASS	UserInformationClass,
		IN PSAMPR_USER_INFO_BUFFER	Buffer
	)

Definition at line 7848 of file samrpc.c.

{
    TRACE("SamrSetInformationUser(%p %lu %p)\n",
          UserHandle, UserInformationClass, Buffer);
 
    return SamrSetInformationUser2(UserHandle,
                                   UserInformationClass,
                                   Buffer);
}

Referenced by LsaApLogonUserEx2(), and SamSetInformationUser().

SystemFunction006()

NTSTATUS WINAPI SystemFunction006	(	LPCSTR	password,
		LPSTR	hash
	)

Definition at line 53 of file crypt_lmhash.c.

{
    CRYPT_LMhash( (unsigned char*)hash, (const unsigned char*)password, strlen(password) );
 
    return STATUS_SUCCESS;
}

SystemFunction007()

NTSTATUS WINAPI SystemFunction007	(	PUNICODE_STRING	string,
		LPBYTE	hash
	)

SystemFunction012()

NTSTATUS WINAPI SystemFunction012	(	const BYTE *	in,
		const BYTE *	key,
		LPBYTE	out
	)

Definition at line 353 of file sysfunc.c.

{
    if (!in || !out)
        return STATUS_UNSUCCESSFUL;
 
    CRYPT_DEShash(out, key, in);
    CRYPT_DEShash(out+8, key+7, in+8);
    return STATUS_SUCCESS;
}