sam.h File Reference

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_LSA_SAM_PWD_DATA

Typedefs
typedef enum _LSA_SAM_NETLOGON_TYPE	LSA_SAM_NETLOGON_TYPE
typedef struct _LSA_SAM_PWD_DATA	LSA_SAM_PWD_DATA
typedef struct _LSA_SAM_PWD_DATA *	PLSA_SAM_PWD_DATA

Enumerations
enum	_LSA_SAM_NETLOGON_TYPE { NetLogonAnonymous = 0 , NetLogonLmKey , NetLogonNtKey }

Functions
NTSTATUS	SamValidateUser (_In_ SECURITY_LOGON_TYPE LogonType, _In_ PUNICODE_STRING LogonUserName, _In_ PUNICODE_STRING LogonDomain, _In_ PLSA_SAM_PWD_DATA LogonPwdData, _In_ PUNICODE_STRING ComputerName, _Out_ PBOOL SpecialAccount, _Out_ PRPC_SID *AccountDomainSidPtr, _Out_ SAMPR_HANDLE *UserHandlePtr, _Out_ PSAMPR_USER_INFO_BUFFER *UserInfoPtr, _Out_ PNTSTATUS SubStatus)
	Validates a user by checking if it exists in the sam database. Some other checks are done further.

Typedef Documentation

LSA_SAM_NETLOGON_TYPE

typedef enum _LSA_SAM_NETLOGON_TYPE LSA_SAM_NETLOGON_TYPE

LSA_SAM_PWD_DATA

typedef struct _LSA_SAM_PWD_DATA LSA_SAM_PWD_DATA

PLSA_SAM_PWD_DATA

typedef struct _LSA_SAM_PWD_DATA * PLSA_SAM_PWD_DATA

Enumeration Type Documentation

_LSA_SAM_NETLOGON_TYPE

enum _LSA_SAM_NETLOGON_TYPE

Enumerator
NetLogonAnonymous
NetLogonLmKey
NetLogonNtKey

Definition at line 10 of file sam.h.

{
    NetLogonAnonymous = 0,
    NetLogonLmKey,
    NetLogonNtKey
} LSA_SAM_NETLOGON_TYPE;

Function Documentation

SamValidateUser()

NTSTATUS SamValidateUser	(	_In_ SECURITY_LOGON_TYPE	LogonType,
		_In_ PUNICODE_STRING	LogonUserName,
		_In_ PUNICODE_STRING	LogonDomain,
		_In_ PLSA_SAM_PWD_DATA	LogonPwdData,
		_In_ PUNICODE_STRING	ComputerName,
		_Out_ PBOOL	SpecialAccount,
		_Out_ PRPC_SID *	AccountDomainSidPtr,
		_Out_ SAMPR_HANDLE *	UserHandlePtr,
		_Out_ PSAMPR_USER_INFO_BUFFER *	UserInfoPtr,
		_Out_ PNTSTATUS	SubStatus
	)

Validates a user by checking if it exists in the sam database. Some other checks are done further.

Definition at line 460 of file sam.c.

{
    static const UNICODE_STRING NtAuthorityU = RTL_CONSTANT_STRING(L"NT AUTHORITY");
    static const UNICODE_STRING LocalServiceU = RTL_CONSTANT_STRING(L"LocalService");
    static const UNICODE_STRING NetworkServiceU = RTL_CONSTANT_STRING(L"NetworkService");
 
    NTSTATUS Status = STATUS_SUCCESS;
 
    *SpecialAccount = FALSE;
    *UserInfoPtr = NULL;
    *SubStatus = STATUS_SUCCESS;
 
    /* Check for special accounts */
    // FIXME: Windows does not do this that way!! (msv1_0 does not contain these hardcoded values)
    if (RtlEqualUnicodeString(LogonDomain, &NtAuthorityU, TRUE))
    {
        *SpecialAccount = TRUE;
 
        /* Get the authority domain SID */
        Status = GetNtAuthorityDomainSid(AccountDomainSidPtr);
        if (!NT_SUCCESS(Status))
        {
            ERR("GetNtAuthorityDomainSid() failed (Status 0x%08lx)\n", Status);
            return Status;
        }
 
        if (RtlEqualUnicodeString(LogonUserName, &LocalServiceU, TRUE))
        {
            TRACE("SpecialAccount: LocalService\n");
 
            if (LogonType != Service)
                return STATUS_LOGON_FAILURE;
 
            *UserInfoPtr = RtlAllocateHeap(RtlGetProcessHeap(),
                                           HEAP_ZERO_MEMORY,
                                           sizeof(SAMPR_USER_ALL_INFORMATION));
            if (*UserInfoPtr == NULL)
                return STATUS_INSUFFICIENT_RESOURCES;
 
            (*UserInfoPtr)->All.UserId = SECURITY_LOCAL_SERVICE_RID;
            (*UserInfoPtr)->All.PrimaryGroupId = SECURITY_LOCAL_SERVICE_RID;
        }
        else if (RtlEqualUnicodeString(LogonUserName, &NetworkServiceU, TRUE))
        {
            TRACE("SpecialAccount: NetworkService\n");
 
            if (LogonType != Service)
                return STATUS_LOGON_FAILURE;
 
            *UserInfoPtr = RtlAllocateHeap(RtlGetProcessHeap(),
                                           HEAP_ZERO_MEMORY,
                                           sizeof(SAMPR_USER_ALL_INFORMATION));
            if (*UserInfoPtr == NULL)
                return STATUS_INSUFFICIENT_RESOURCES;
 
            (*UserInfoPtr)->All.UserId = SECURITY_NETWORK_SERVICE_RID;
            (*UserInfoPtr)->All.PrimaryGroupId = SECURITY_NETWORK_SERVICE_RID;
        }
        else
        {
            return STATUS_NO_SUCH_USER;
        }
    }
    else
    {
        TRACE("NormalAccount\n");
        Status = SamValidateNormalUser(LogonUserName,
                                       LogonPwdData,
                                       ComputerName,
                                       AccountDomainSidPtr,
                                       UserHandlePtr,
                                       UserInfoPtr,
                                       SubStatus);
        if (!NT_SUCCESS(Status))
        {
            ERR("SamValidateNormalUser() failed (Status 0x%08lx)\n", Status);
            return Status;
        }
    }
 
    return Status;
}

Referenced by LsaApLogonUserEx2(), and LsaApLogonUserEx2_Network().