//+-----------------------------------------------------------------------
//
// Microsoft Windows
//
// Copyright (c) Microsoft Corporation 1991 - 1992
//
// File: secpkg.h
//
// Contents: Global definitions for security packages
// This file will contain everything specific to writing
// a security package.
//
//
// History: 10 Mar 92 RichardW Created
// 24-Mar-94 wader Changed EstablishCredentials to SystemLogon
//
//------------------------------------------------------------------------
#ifndef __SECPKG_H__
#define __SECPKG_H__
#include <ntlsa.h> // SECURITY_LOGON_TYPE
#ifdef SECURITY_KERNEL
//
// Can't use the windows.h def'ns in kernel mode.
//
typedef PVOID SEC_THREAD_START;
typedef PVOID SEC_ATTRS;
#else
typedef LPTHREAD_START_ROUTINE SEC_THREAD_START;
typedef LPSECURITY_ATTRIBUTES SEC_ATTRS;
#endif
//
// The following structures are used by the helper functions
//
typedef struct _SECPKG_CLIENT_INFO {
LUID LogonId; // Effective Logon Id
ULONG ProcessID; // Process Id of caller
ULONG ThreadID; // Thread Id of caller
BOOLEAN HasTcbPrivilege; // Client has TCB
BOOLEAN Impersonating; // Client is impersonating
} SECPKG_CLIENT_INFO, * PSECPKG_CLIENT_INFO;
//
// This flag is used for to indicate which buffers in the SPMgr are located
// in the client's address space
//
#define SECBUFFER_UNMAPPED 0x40000000
//////////////////////////////////////////////////////////////////////////
//
// The following prototypes are to functions that are provided by the SPMgr
// to security packages.
//
//////////////////////////////////////////////////////////////////////////
typedef NTSTATUS
(NTAPI LSA_IMPERSONATE_CLIENT) (
);
typedef NTSTATUS
(NTAPI LSA_UNLOAD_PACKAGE)(
VOID
);
typedef NTSTATUS
(NTAPI LSA_DUPLICATE_HANDLE)(
IN HANDLE SourceHandle,
OUT PHANDLE DestionationHandle);
typedef NTSTATUS
(NTAPI LSA_SAVE_SUPPLEMENTAL_CREDENTIALS)(
IN PLUID LogonId,
IN ULONG SupplementalCredSize,
IN PVOID SupplementalCreds,
IN BOOLEAN Synchronous
);
#ifdef _WINDEF_
typedef NTSTATUS
(NTAPI LSA_GET_WINDOW)(
OUT HWND * Window
);
#else
typedef NTSTATUS
(NTAPI LSA_GET_WINDOW)(
OUT HANDLE * Window
);
#endif
typedef VOID
(NTAPI LSA_RELEASE_WINDOW)(
VOID
);
typedef HANDLE
(NTAPI LSA_CREATE_THREAD)(
IN SEC_ATTRS SecurityAttributes,
IN ULONG StackSize,
IN SEC_THREAD_START StartFunction,
IN PVOID ThreadParameter,
IN ULONG CreationFlags,
OUT PULONG ThreadId
);
typedef NTSTATUS
(NTAPI LSA_GET_CLIENT_INFO)(
OUT PSECPKG_CLIENT_INFO ClientInfo
);
typedef HANDLE
(NTAPI LSA_REGISTER_NOTIFICATION)(
IN SEC_THREAD_START StartFunction,
IN PVOID Parameter,
IN ULONG NotificationType,
IN ULONG NotificationFlags,
IN ULONG IntervalMinutes,
IN OPTIONAL HANDLE WaitEvent
);
typedef NTSTATUS
(NTAPI LSA_CANCEL_NOTIFICATION)(
IN HANDLE NotifyHandle
);
typedef NTSTATUS
(NTAPI LSA_MAP_BUFFER)(
IN PSecBuffer InputBuffer,
OUT PSecBuffer OutputBuffer
);
typedef NTSTATUS
(NTAPI LSA_CREATE_TOKEN) (
IN PLUID LogonId,
IN PTOKEN_SOURCE TokenSource,
IN SECURITY_LOGON_TYPE LogonType,
IN LSA_TOKEN_INFORMATION_TYPE TokenInformationType,
IN PVOID TokenInformation,
IN PTOKEN_GROUPS TokenGroups,
IN PUNICODE_STRING AccountName,
IN PUNICODE_STRING AuthorityName,
IN PUNICODE_STRING Workstation,
OUT PHANDLE Token,
OUT PNTSTATUS SubStatus
);
typedef VOID
(NTAPI LSA_AUDIT_LOGON) (
IN NTSTATUS Status,
IN NTSTATUS SubStatus,
IN PUNICODE_STRING AccountName,
IN PUNICODE_STRING AuthenticatingAuthority,
IN PUNICODE_STRING WorkstationName,
IN OPTIONAL PSID UserSid,
IN SECURITY_LOGON_TYPE LogonType,
IN PTOKEN_SOURCE TokenSource,
IN PLUID LogonId
);
#define NOTIFIER_FLAG_NEW_THREAD 0x00000001
#define NOTIFIER_FLAG_ONE_SHOT 0x00000002
#define NOTIFIER_FLAG_HANDLE_FREE 0x00000004
#define NOTIFIER_FLAG_SECONDS 0x80000000
#define NOTIFIER_TYPE_INTERVAL 1
#define NOTIFIER_TYPE_HANDLE_WAIT 2
#define NOTIFIER_TYPE_STATE_CHANGE 3
#define NOTIFIER_TYPE_NOTIFY_EVENT 4
#define NOTIFIER_TYPE_IMMEDIATE 16
#define NOTIFY_CLASS_RENAME 1
#define NOTIFY_CLASS_STATE 2
typedef LSA_IMPERSONATE_CLIENT * PLSA_IMPERSONATE_CLIENT;
typedef LSA_UNLOAD_PACKAGE * PLSA_UNLOAD_PACKAGE;
typedef LSA_DUPLICATE_HANDLE * PLSA_DUPLICATE_HANDLE ;
typedef LSA_SAVE_SUPPLEMENTAL_CREDENTIALS * PLSA_SAVE_SUPPLEMENTAL_CREDENTIALS;
typedef LSA_GET_WINDOW * PLSA_GET_WINDOW;
typedef LSA_RELEASE_WINDOW * PLSA_RELEASE_WINDOW;
typedef LSA_CREATE_THREAD * PLSA_CREATE_THREAD;
typedef LSA_GET_CLIENT_INFO * PLSA_GET_CLIENT_INFO;
typedef LSA_REGISTER_NOTIFICATION * PLSA_REGISTER_NOTIFICATION;
typedef LSA_CANCEL_NOTIFICATION * PLSA_CANCEL_NOTIFICATION;
typedef LSA_MAP_BUFFER * PLSA_MAP_BUFFER;
typedef LSA_CREATE_TOKEN * PLSA_CREATE_TOKEN;
typedef LSA_AUDIT_LOGON * PLSA_AUDIT_LOGON;
// Functions provided by the SPM to the packages:
typedef struct _LSA_SECPKG_FUNCTION_TABLE {
PLSA_CREATE_LOGON_SESSION CreateLogonSession;
PLSA_DELETE_LOGON_SESSION DeleteLogonSession;
PLSA_ADD_CREDENTIAL AddCredential;
PLSA_GET_CREDENTIALS GetCredentials;
PLSA_DELETE_CREDENTIAL DeleteCredential;
PLSA_ALLOCATE_LSA_HEAP AllocateLsaHeap;
PLSA_FREE_LSA_HEAP FreeLsaHeap;
PLSA_ALLOCATE_CLIENT_BUFFER AllocateClientBuffer;
PLSA_FREE_CLIENT_BUFFER FreeClientBuffer;
PLSA_COPY_TO_CLIENT_BUFFER CopyToClientBuffer;
PLSA_COPY_FROM_CLIENT_BUFFER CopyFromClientBuffer;
PLSA_IMPERSONATE_CLIENT ImpersonateClient;
PLSA_UNLOAD_PACKAGE UnloadPackage;
PLSA_DUPLICATE_HANDLE DuplicateHandle;
PLSA_SAVE_SUPPLEMENTAL_CREDENTIALS SaveSupplementalCredentials;
PLSA_GET_WINDOW GetWindow;
PLSA_RELEASE_WINDOW ReleaseWindow;
PLSA_CREATE_THREAD CreateThread;
PLSA_GET_CLIENT_INFO GetClientInfo;
PLSA_REGISTER_NOTIFICATION RegisterNotification;
PLSA_CANCEL_NOTIFICATION CancelNotification;
PLSA_MAP_BUFFER MapBuffer;
PLSA_CREATE_TOKEN CreateToken;
PLSA_AUDIT_LOGON AuditLogon;
} LSA_SECPKG_FUNCTION_TABLE, *PLSA_SECPKG_FUNCTION_TABLE;
typedef struct _SECPKG_DLL_FUNCTIONS {
PLSA_ALLOCATE_LSA_HEAP AllocateHeap;
PLSA_FREE_LSA_HEAP FreeHeap;
} SECPKG_DLL_FUNCTIONS, * PSECPKG_DLL_FUNCTIONS;
#define PRIMARY_CRED_OWF_PASSWORD 0x1
#define PRIMARY_CRED_CLEAR_PASSWORD 0x1
typedef struct _SECPKG_PRIMARY_CRED {
LUID LogonId;
UNICODE_STRING DownlevelName;
UNICODE_STRING DomainName;
UNICODE_STRING Password;
PSID UserSid;
ULONG Flags;
} SECPKG_PRIMARY_CRED, *PSECPKG_PRIMARY_CRED;
//
// Maximum size of stored credentials.
//
#define MAX_CRED_SIZE 1024
typedef struct _SecPkg_EventNotify {
PVOID pvPackageParameter;
ULONG EventClass;
ULONG EventSource;
ULONG DataSize;
PVOID DataPointer;
} SecPkg_EventNotify, * PSecPkg_EventNotify;
typedef struct _SecPkg_StateChange {
PVOID pvPackageParameter;
ULONG OldState;
ULONG NewState;
ULONG Type;
ULONG Flags;
} SecPkg_StateChange, * PSecPkg_StateChange;
#define SPM_STATECHANGE_BEGIN 0
#define SPM_STATECHANGE_COMPLETE 1
#define SPM_STATECHANGE_REVERT 2
typedef struct _SECPKG_PARAMETERS {
ULONG MachineState;
ULONG SetupMode;
UNICODE_STRING DomainName;
PSID DomainSid;
} SECPKG_PARAMETERS, *PSECPKG_PARAMETERS;
typedef struct _SECPKG_SUPPLEMENTAL_CRED {
UNICODE_STRING PackageName;
ULONG CredentialSize;
PUCHAR Credentials;
} SECPKG_SUPPLEMENTAL_CRED, *PSECPKG_SUPPLEMENTAL_CRED;
//
// The following prototypes are to functions that will be called only while
// in the Security Package Manager context.
//
typedef NTSTATUS
(LSA_AP_INITIALIZE_PACKAGE) (
IN ULONG AuthenticationPackageId,
IN PLSA_DISPATCH_TABLE LsaDispatchTable,
IN PLSA_STRING Database OPTIONAL,
IN PLSA_STRING Confidentiality OPTIONAL,
OUT PLSA_STRING *AuthenticationPackageName
);
typedef NTSTATUS
(LSA_AP_LOGON_USER) (
IN PLSA_CLIENT_REQUEST ClientRequest,
IN SECURITY_LOGON_TYPE LogonType,
IN PVOID AuthenticationInformation,
IN PVOID ClientAuthenticationBase,
IN ULONG AuthenticationInformationLength,
OUT PVOID *ProfileBuffer,
OUT PULONG ProfileBufferLength,
OUT PLUID LogonId,
OUT PNTSTATUS SubStatus,
OUT PLSA_TOKEN_INFORMATION_TYPE TokenInformationType,
OUT PVOID *TokenInformation,
OUT PLSA_UNICODE_STRING *AccountName,
OUT PLSA_UNICODE_STRING *AuthenticatingAuthority
);
typedef NTSTATUS
(LSA_AP_LOGON_USER_EX) (
IN PLSA_CLIENT_REQUEST ClientRequest,
IN SECURITY_LOGON_TYPE LogonType,
IN PVOID AuthenticationInformation,
IN PVOID ClientAuthenticationBase,
IN ULONG AuthenticationInformationLength,
OUT PVOID *ProfileBuffer,
OUT PULONG ProfileBufferLength,
OUT PLUID LogonId,
OUT PNTSTATUS SubStatus,
OUT PLSA_TOKEN_INFORMATION_TYPE TokenInformationType,
OUT PVOID *TokenInformation,
OUT PUNICODE_STRING *AccountName,
OUT PUNICODE_STRING *AuthenticatingAuthority,
OUT PUNICODE_STRING *MachineName
);
typedef NTSTATUS
(LSA_AP_CALL_PACKAGE) (
IN PLSA_CLIENT_REQUEST ClientRequest,
IN PVOID ProtocolSubmitBuffer,
IN PVOID ClientBufferBase,
IN ULONG SubmitBufferLength,
OUT PVOID *ProtocolReturnBuffer,
OUT PULONG ReturnBufferLength,
OUT PNTSTATUS ProtocolStatus
);
typedef VOID
(LSA_AP_LOGON_TERMINATED) (
IN PLUID LogonId
);
typedef LSA_AP_CALL_PACKAGE LSA_AP_CALL_PACKAGE_UNTRUSTED;
typedef NTSTATUS
(NTAPI SpInitializeFn)(
IN ULONG PackageId,
IN PSECPKG_PARAMETERS Parameters,
IN PLSA_SECPKG_FUNCTION_TABLE FunctionTable
);
typedef NTSTATUS
(NTAPI SpShutdownFn)(
VOID
);
typedef NTSTATUS
(NTAPI SpGetInfoFn)(
OUT PSecPkgInfo PackageInfo
);
typedef NTSTATUS
(LSA_AP_LOGON_USER_EX2) (
IN PLSA_CLIENT_REQUEST ClientRequest,
IN SECURITY_LOGON_TYPE LogonType,
IN PVOID AuthenticationInformation,
IN PVOID ClientAuthenticationBase,
IN ULONG AuthenticationInformationLength,
OUT PVOID *ProfileBuffer,
OUT PULONG ProfileBufferLength,
OUT PLUID LogonId,
OUT PNTSTATUS SubStatus,
OUT PLSA_TOKEN_INFORMATION_TYPE TokenInformationType,
OUT PVOID *TokenInformation,
OUT PUNICODE_STRING *AccountName,
OUT PUNICODE_STRING *AuthenticatingAuthority,
OUT PUNICODE_STRING *MachineName,
OUT PSECPKG_PRIMARY_CRED PrimaryCredentials,
OUT PULONG CachedCredentialCount,
OUT PSECPKG_SUPPLEMENTAL_CRED * CachedCredentials
);
typedef LSA_AP_LOGON_USER_EX2 *PLSA_AP_LOGON_USER_EX2;
#define LSA_AP_NAME_LOGON_USER_EX2 "LsaApLogonUserEx2\0"
typedef NTSTATUS
(NTAPI SpAcceptCredentialsFn)(
IN SECURITY_LOGON_TYPE LogonType,
IN PUNICODE_STRING AccountName,
IN PSECPKG_PRIMARY_CRED PrimaryCredentials,
IN PSECPKG_SUPPLEMENTAL_CRED SupplementalCredentials
);
typedef NTSTATUS
(NTAPI SpAcquireCredentialsHandleFn)(
IN OPTIONAL PUNICODE_STRING PrincipalName,
IN ULONG CredentialUseFlags,
IN OPTIONAL PLUID LogonId,
IN PVOID AuthorizationData,
IN PVOID GetKeyFunciton,
IN PVOID GetKeyArgument,
OUT PULONG CredentialHandle,
OUT PTimeStamp ExpirationTime
);
typedef NTSTATUS
(NTAPI SpFreeCredentialsHandleFn)(
IN ULONG CredentialHandle
);
typedef NTSTATUS
(NTAPI SpQueryCredentialsAttributesFn)(
IN ULONG CredentialHandle,
IN ULONG CredentialAttribute,
IN OUT PSecBuffer Buffer
);
typedef NTSTATUS
(NTAPI SpSaveCredentialsFn)(
IN ULONG CredentialHandle,
IN PSecBuffer Credentials);
typedef NTSTATUS
(NTAPI SpGetCredentialsFn)(
IN ULONG CredentialHandle,
IN OUT PSecBuffer Credentials
);
typedef NTSTATUS
(NTAPI SpDeleteCredentialsFn)(
IN ULONG CredentialHandle,
IN PSecBuffer Key
);
typedef NTSTATUS
(NTAPI SpInitLsaModeContextFn)(
IN OPTIONAL ULONG CredentialHandle,
IN OPTIONAL ULONG ContextHandle,
IN OPTIONAL PUNICODE_STRING TargetName,
IN ULONG ContextRequirements,
IN ULONG TargetDataRep,
IN PSecBufferDesc InputBuffers,
OUT PULONG NewContextHandle,
IN OUT PSecBufferDesc OutputBuffers,
OUT PULONG ContextAttributes,
OUT PTimeStamp ExpirationTime,
OUT PBOOLEAN MappedContext,
OUT PSecBuffer ContextData
);
typedef NTSTATUS
(NTAPI SpDeleteContextFn)(
IN ULONG ContextHandle
);
typedef NTSTATUS
(NTAPI SpApplyControlTokenFn)(
IN ULONG ContextHandle,
IN PSecBufferDesc ControlToken);
typedef NTSTATUS
(NTAPI SpAcceptLsaModeContextFn)(
IN OPTIONAL ULONG CredentialHandle,
IN OPTIONAL ULONG ContextHandle,
IN PSecBufferDesc InputBuffer,
IN ULONG ContextRequirements,
IN ULONG TargetDataRep,
OUT PULONG NewContextHandle,
OUT PSecBufferDesc OutputBuffer,
OUT PULONG ContextAttributes,
OUT PTimeStamp ExpirationTime,
OUT PBOOLEAN MappedContext,
OUT PSecBuffer ContextData
);
typedef NTSTATUS
(NTAPI SpGetUserInfoFn)(
IN PLUID LogonId,
IN ULONG Flags,
OUT PSecurityUserData * UserData
);
typedef NTSTATUS
(NTAPI SpGrantProxyFn)(
IN ULONG CredentialHandle,
IN OPTIONAL PUNICODE_STRING ProxyName,
IN PROXY_CLASS ProxyClass,
IN OPTIONAL PUNICODE_STRING TargetName,
IN ACCESS_MASK ContainerMask,
IN ACCESS_MASK ObjectMask,
IN PTimeStamp ExpirationTime,
IN PSecBuffer AccessInformation,
OUT PPROXY_REFERENCE ProxyReference
);
typedef NTSTATUS
(NTAPI SpRevokeProxyFn)(
IN ULONG CredentialHandle,
IN OPTIONAL PPROXY_REFERENCE ProxyReference,
IN OPTIONAL PUNICODE_STRING ProxyName
);
typedef NTSTATUS
(NTAPI SpInvokeProxyFn)(
IN ULONG CredentialHandle,
IN OPTIONAL PPROXY_REFERENCE ProxyReference,
IN OPTIONAL PUNICODE_STRING ProxyName,
OUT PULONG ContextHandle,
OUT PLUID LogonId,
OUT PULONG CachedCredentialCount,
OUT PSECPKG_SUPPLEMENTAL_CRED * CachedCredentials,
OUT PSecBuffer ContextData
);
typedef NTSTATUS
(NTAPI SpRenewProxyFn)(
IN ULONG CredentialHandle,
IN OPTIONAL PPROXY_REFERENCE ProxyReference,
IN OPTIONAL PUNICODE_STRING ProxyName,
IN PTimeStamp ExpirationTime
);
typedef struct _SECPKG_FUNCTION_TABLE {
PLSA_AP_INITIALIZE_PACKAGE InitializePackage;
PLSA_AP_LOGON_USER LogonUser;
PLSA_AP_CALL_PACKAGE CallPackage;
PLSA_AP_LOGON_TERMINATED LogonTerminated;
PLSA_AP_CALL_PACKAGE_UNTRUSTED CallPackageUntrusted;
PLSA_AP_LOGON_USER_EX LogonUserEx;
PLSA_AP_LOGON_USER_EX2 LogonUserEx2;
SpInitializeFn * Initialize;
SpShutdownFn * Shutdown;
SpGetInfoFn * GetInfo;
SpAcceptCredentialsFn * AcceptCredentials;
SpAcquireCredentialsHandleFn * AcquireCredentialsHandle;
SpFreeCredentialsHandleFn * FreeCredentialsHandle;
SpSaveCredentialsFn * SaveCredentials;
SpGetCredentialsFn * GetCredentials;
SpDeleteCredentialsFn * DeleteCredentials;
SpInitLsaModeContextFn * InitLsaModeContext;
SpAcceptLsaModeContextFn * AcceptLsaModeContext;
SpDeleteContextFn * DeleteContext;
SpApplyControlTokenFn * ApplyControlToken;
SpGetUserInfoFn * GetUserInfo;
SpGrantProxyFn * GrantProxy;
SpRevokeProxyFn * RevokeProxy;
SpInvokeProxyFn * InvokeProxy;
SpRenewProxyFn * RenewProxy;
} SECPKG_FUNCTION_TABLE, *PSECPKG_FUNCTION_TABLE;
//
// The following prototypes are to functions that will be called while in the
// context of a user process that is using the functions through the security
// DLL.
//
typedef NTSTATUS
(NTAPI SpInstanceInitFn)(
IN ULONG Version,
IN PSECPKG_DLL_FUNCTIONS FunctionTable,
OUT PVOID * UserFunctions
);
typedef NTSTATUS
(NTAPI SpInitUserModeContextFn)(
IN ULONG ContextHandle,
IN PSecBuffer PackedContext
);
typedef NTSTATUS
(NTAPI SpMakeSignatureFn)(
IN ULONG ContextHandle,
IN ULONG QualityOfProtection,
IN PSecBufferDesc MessageBuffers,
IN ULONG MessageSequenceNumber
);
typedef NTSTATUS
(NTAPI SpVerifySignatureFn)(
IN ULONG ContextHandle,
IN PSecBufferDesc MessageBuffers,
IN ULONG MessageSequenceNumber,
OUT PULONG QualityOfProtection
);
typedef NTSTATUS
(NTAPI SpSealMessageFn)(
IN ULONG ContextHandle,
IN ULONG QualityOfProtection,
IN PSecBufferDesc MessageBuffers,
IN ULONG MessageSequenceNumber
);
typedef NTSTATUS
(NTAPI SpUnsealMessageFn)(
IN ULONG ContextHandle,
IN PSecBufferDesc MessageBuffers,
IN ULONG MessageSequenceNumber,
OUT PULONG QualityOfProtection
);
typedef NTSTATUS
(NTAPI SpGetContextTokenFn)(
IN ULONG ContextHandle,
OUT PHANDLE ImpersonationToken
);
typedef NTSTATUS
(NTAPI SpQueryContextAttributesFn)(
IN ULONG ContextHandle,
IN ULONG ContextAttribute,
IN OUT PVOID Buffer);
typedef NTSTATUS
(NTAPI SpCompleteAuthTokenFn)(
IN ULONG ContextHandle,
IN PSecBufferDesc InputBuffer
);
typedef NTSTATUS
(NTAPI SpFormatCredentialsFn)(
IN PSecBuffer Credentials,
OUT PSecBuffer FormattedCredentials
);
typedef NTSTATUS
(NTAPI SpMarshallSupplementalCredsFn)(
IN ULONG CredentialSize,
IN PUCHAR Credentials,
OUT PULONG MarshalledCredSize,
OUT PVOID * MarshalledCreds);
typedef struct _SECPKG_USER_FUNCTION_TABLE {
SpInstanceInitFn * InstanceInit;
SpInitUserModeContextFn * InitUserModeContext;
SpMakeSignatureFn * MakeSignature;
SpVerifySignatureFn * VerifySignature;
SpSealMessageFn * SealMessage;
SpUnsealMessageFn * UnsealMessage;
SpGetContextTokenFn * GetContextToken;
SpQueryContextAttributesFn * QueryContextAttributes;
SpCompleteAuthTokenFn * CompleteAuthToken;
SpDeleteContextFn * DeleteUserModeContext;
SpFormatCredentialsFn * FormatCredentials;
SpMarshallSupplementalCredsFn * MarshallSupplementalCreds;
} SECPKG_USER_FUNCTION_TABLE, *PSECPKG_USER_FUNCTION_TABLE;
typedef NTSTATUS
(SEC_ENTRY * SpLsaModeInitializeFn)(
IN ULONG LsaVersion,
OUT PULONG PackageVersion,
OUT PSECPKG_FUNCTION_TABLE * ppTables,
OUT PULONG pcTables);
typedef NTSTATUS
(SEC_ENTRY * SpUserModeInitializeFn)(
IN ULONG LsaVersion,
OUT PULONG PackageVersion,
OUT PSECPKG_USER_FUNCTION_TABLE *ppTables,
OUT PULONG pcTables
);
#define SP_ORDINAL_LSA_INIT 0
#define SP_ORDINAL_LOGONUSER 1
#define SP_ORDINAL_CALLPACKAGE 2
#define SP_ORDINAL_LOGONTERMINATED 3
#define SP_ORDINAL_CALLPACKAGEUNTRUSTED 4
#define SP_ORDINAL_LOGONUSEREX 5
#define SP_ORDINAL_LOGONUSEREX2 6
#define SP_ORDINAL_INITIALIZE 7
#define SP_ORDINAL_SHUTDOWN 8
#define SP_ORDINAL_GETINFO 9
#define SP_ORDINAL_ACCEPTCREDS 10
#define SP_ORDINAL_ACQUIRECREDHANDLE 11
#define SP_ORDINAL_FREECREDHANDLE 12
#define SP_ORDINAL_SAVECRED 13
#define SP_ORDINAL_GETCRED 14
#define SP_ORDINAL_DELETECRED 15
#define SP_ORDINAL_INITLSAMODECTXT 16
#define SP_ORDINAL_ACCEPTLSAMODECTXT 17
#define SP_ORDINAL_DELETECTXT 18
#define SP_ORDINAL_APPLYCONTROLTOKEN 19
#define SP_ORDINAL_GETUSERINFO 20
#define SP_ORDINAL_GRANTPROXY 21
#define SP_ORDINAL_REVOKEPROXY 22
#define SP_ORDINAL_INVOKEPROXY 23
#define SP_ORDINAL_RENEWPROXY 24
#define SP_MAX_TABLE_ORDINAL (SP_ORDINAL_RENEWPROXY + 1)
#define SP_MAX_AUTHPKG_ORDINAL (SP_ORDINAL_LOGONUSEREX)
#define SP_ORDINAL_INSTANCEINIT 32
#define SECPKG_LSAMODEINIT_NAME "SpLsaModeInitialize"
#define SECPKG_USERMODEINIT_NAME "SpUserModeInitialize"
#define SECPKG_INTERFACE_VERSION 0x00010000
#endif // __SECPKG_H__
