251 lines
6.4 KiB
C
251 lines
6.4 KiB
C
#ifndef _LMAUDIT_H
|
|
#define _LMAUDIT_H
|
|
#if __GNUC__ >=3
|
|
#pragma GCC system_header
|
|
#endif
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
#define REVISED_AUDIT_ENTRY_STRUCT
|
|
#define LOGFLAGS_FORWARD 0
|
|
#define LOGFLAGS_BACKWARD 1
|
|
#define LOGFLAGS_SEEK 2
|
|
#define ACTION_LOCKOUT 0
|
|
#define ACTION_ADMINUNLOCK 1
|
|
#define AE_GUEST 0
|
|
#define AE_USER 1
|
|
#define AE_ADMIN 2
|
|
#define AE_NORMAL 0
|
|
#define AE_USERLIMIT 0
|
|
#define AE_GENERAL 0
|
|
#define AE_ERROR 1
|
|
#define AE_SESSDIS 1
|
|
#define AE_BADPW 1
|
|
#define AE_AUTODIS 2
|
|
#define AE_UNSHARE 2
|
|
#define AE_ADMINPRIVREQD 2
|
|
#define AE_ADMINDIS 3
|
|
#define AE_NOACCESSPERM 3
|
|
#define AE_ACCRESTRICT 4
|
|
#define AE_NORMAL_CLOSE 0
|
|
#define AE_SES_CLOSE 1
|
|
#define AE_ADMIN_CLOSE 2
|
|
#define AE_LIM_UNKNOWN 0
|
|
#define AE_LIM_LOGONHOURS 1
|
|
#define AE_LIM_EXPIRED 2
|
|
#define AE_LIM_INVAL_WKSTA 3
|
|
#define AE_LIM_DISABLED 4
|
|
#define AE_LIM_DELETED 5
|
|
#define AE_MOD 0
|
|
#define AE_DELETE 1
|
|
#define AE_ADD 2
|
|
#define AE_UAS_USER 0
|
|
#define AE_UAS_GROUP 1
|
|
#define AE_UAS_MODALS 2
|
|
#define SVAUD_SERVICE 1
|
|
#define SVAUD_GOODSESSLOGON 6
|
|
#define SVAUD_BADSESSLOGON 24
|
|
#define SVAUD_SESSLOGON (SVAUD_GOODSESSLOGON|SVAUD_BADSESSLOGON)
|
|
#define SVAUD_GOODNETLOGON 96
|
|
#define SVAUD_BADNETLOGON 384
|
|
#define SVAUD_NETLOGON (SVAUD_GOODNETLOGON|SVAUD_BADNETLOGON)
|
|
#define SVAUD_LOGON (SVAUD_NETLOGON|SVAUD_SESSLOGON)
|
|
#define SVAUD_GOODUSE 0x600
|
|
#define SVAUD_BADUSE 0x1800
|
|
#define SVAUD_USE (SVAUD_GOODUSE|SVAUD_BADUSE)
|
|
#define SVAUD_USERLIST 8192
|
|
#define SVAUD_PERMISSIONS 16384
|
|
#define SVAUD_RESOURCE 32768
|
|
#define SVAUD_LOGONLIM 65536
|
|
#define AA_AUDIT_ALL 1
|
|
#define AA_A_OWNER 4
|
|
#define AA_CLOSE 8
|
|
#define AA_S_OPEN 16
|
|
#define AA_S_WRITE 32
|
|
#define AA_S_CREATE 32
|
|
#define AA_S_DELETE 64
|
|
#define AA_S_ACL 128
|
|
#define AA_S_ALL 253
|
|
#define AA_F_OPEN 256
|
|
#define AA_F_WRITE 512
|
|
#define AA_F_CREATE 512
|
|
#define AA_F_DELETE 1024
|
|
#define AA_F_ACL 2048
|
|
#define AA_F_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL)
|
|
#define AA_A_OPEN 2048
|
|
#define AA_A_WRITE 4096
|
|
#define AA_A_CREATE 8192
|
|
#define AA_A_DELETE 16384
|
|
#define AA_A_ACL 32768
|
|
#define AA_A_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL)
|
|
typedef struct _AUDIT_ENTRY {
|
|
DWORD ae_len;
|
|
DWORD ae_reserved;
|
|
DWORD ae_time;
|
|
DWORD ae_type;
|
|
DWORD ae_data_offset;
|
|
DWORD ae_data_size;
|
|
} AUDIT_ENTRY,*PAUDIT_ENTRY,*LPAUDIT_ENTRY;
|
|
typedef struct _HLOG {
|
|
DWORD time;
|
|
DWORD last_flags;
|
|
DWORD offset;
|
|
DWORD rec_offset;
|
|
} HLOG,*PHLOG,*LPHLOG;
|
|
typedef struct _AE_SRVSTATUS {
|
|
DWORD ae_sv_status;
|
|
} AE_SRVSTATUS,*PAE_SRVSTATUS,*LPAE_SRVSTATUS;
|
|
typedef struct _AE_SESSLOGON {
|
|
DWORD ae_so_compname;
|
|
DWORD ae_so_username;
|
|
DWORD ae_so_privilege;
|
|
} AE_SESSLOGON,*PAE_SESSLOGON,*LPAE_SESSLOGON;
|
|
typedef struct _AE_SESSLOGOFF {
|
|
DWORD ae_sf_compname;
|
|
DWORD ae_sf_username;
|
|
DWORD ae_sf_reason;
|
|
} AE_SESSLOGOFF,*PAE_SESSLOGOFF,*LPAE_SESSLOGOFF;
|
|
typedef struct _AE_SESSPWERR {
|
|
DWORD ae_sp_compname;
|
|
DWORD ae_sp_username;
|
|
} AE_SESSPWERR,*PAE_SESSPWERR,*LPAE_SESSPWERR;
|
|
typedef struct _AE_CONNSTART {
|
|
DWORD ae_ct_compname;
|
|
DWORD ae_ct_username;
|
|
DWORD ae_ct_netname;
|
|
DWORD ae_ct_connid;
|
|
} AE_CONNSTART,*PAE_CONNSTART,*LPAE_CONNSTART;
|
|
typedef struct _AE_CONNSTOP {
|
|
DWORD ae_cp_compname;
|
|
DWORD ae_cp_username;
|
|
DWORD ae_cp_netname;
|
|
DWORD ae_cp_connid;
|
|
DWORD ae_cp_reason;
|
|
} AE_CONNSTOP,*PAE_CONNSTOP,*LPAE_CONNSTOP;
|
|
typedef struct _AE_CONNREJ {
|
|
DWORD ae_cr_compname;
|
|
DWORD ae_cr_username;
|
|
DWORD ae_cr_netname;
|
|
DWORD ae_cr_reason;
|
|
} AE_CONNREJ,*PAE_CONNREJ,*LPAE_CONNREJ;
|
|
typedef struct _AE_RESACCESS {
|
|
DWORD ae_ra_compname;
|
|
DWORD ae_ra_username;
|
|
DWORD ae_ra_resname;
|
|
DWORD ae_ra_operation;
|
|
DWORD ae_ra_returncode;
|
|
DWORD ae_ra_restype;
|
|
DWORD ae_ra_fileid;
|
|
} AE_RESACCESS,*PAE_RESACCESS,*LPAE_RESACCESS;
|
|
typedef struct _AE_RESACCESSREJ {
|
|
DWORD ae_rr_compname;
|
|
DWORD ae_rr_username;
|
|
DWORD ae_rr_resname;
|
|
DWORD ae_rr_operation;
|
|
} AE_RESACCESSREJ,*PAE_RESACCESSREJ,*LPAE_RESACCESSREJ;
|
|
typedef struct _AE_CLOSEFILE {
|
|
DWORD ae_cf_compname;
|
|
DWORD ae_cf_username;
|
|
DWORD ae_cf_resname;
|
|
DWORD ae_cf_fileid;
|
|
DWORD ae_cf_duration;
|
|
DWORD ae_cf_reason;
|
|
} AE_CLOSEFILE,*PAE_CLOSEFILE,*LPAE_CLOSEFILE;
|
|
typedef struct _AE_SERVICESTAT {
|
|
DWORD ae_ss_compname;
|
|
DWORD ae_ss_username;
|
|
DWORD ae_ss_svcname;
|
|
DWORD ae_ss_status;
|
|
DWORD ae_ss_code;
|
|
DWORD ae_ss_text;
|
|
DWORD ae_ss_returnval;
|
|
} AE_SERVICESTAT,*PAE_SERVICESTAT,*LPAE_SERVICESTAT;
|
|
typedef struct _AE_ACLMOD {
|
|
DWORD ae_am_compname;
|
|
DWORD ae_am_username;
|
|
DWORD ae_am_resname;
|
|
DWORD ae_am_action;
|
|
DWORD ae_am_datalen;
|
|
} AE_ACLMOD,*PAE_ACLMOD,*LPAE_ACLMOD;
|
|
typedef struct _AE_UASMOD {
|
|
DWORD ae_um_compname;
|
|
DWORD ae_um_username;
|
|
DWORD ae_um_resname;
|
|
DWORD ae_um_rectype;
|
|
DWORD ae_um_action;
|
|
DWORD ae_um_datalen;
|
|
} AE_UASMOD,*PAE_UASMOD,*LPAE_UASMOD;
|
|
typedef struct _AE_NETLOGON {
|
|
DWORD ae_no_compname;
|
|
DWORD ae_no_username;
|
|
DWORD ae_no_privilege;
|
|
DWORD ae_no_authflags;
|
|
} AE_NETLOGON,*PAE_NETLOGON,*LPAE_NETLOGON;
|
|
typedef struct _AE_NETLOGOFF {
|
|
DWORD ae_nf_compname;
|
|
DWORD ae_nf_username;
|
|
DWORD ae_nf_reserved1;
|
|
DWORD ae_nf_reserved2;
|
|
} AE_NETLOGOFF,*PAE_NETLOGOFF,*LPAE_NETLOGOFF;
|
|
typedef struct _AE_ACCLIM {
|
|
DWORD ae_al_compname;
|
|
DWORD ae_al_username;
|
|
DWORD ae_al_resname;
|
|
DWORD ae_al_limit;
|
|
} AE_ACCLIM,*PAE_ACCLIM,*LPAE_ACCLIM;
|
|
typedef struct _AE_LOCKOUT {
|
|
DWORD ae_lk_compname;
|
|
DWORD ae_lk_username;
|
|
DWORD ae_lk_action;
|
|
DWORD ae_lk_bad_pw_count;
|
|
} AE_LOCKOUT,*PAE_LOCKOUT,*LPAE_LOCKOUT;
|
|
typedef struct _AE_GENERIC {
|
|
DWORD ae_ge_msgfile;
|
|
DWORD ae_ge_msgnum;
|
|
DWORD ae_ge_params;
|
|
DWORD ae_ge_param1;
|
|
DWORD ae_ge_param2;
|
|
DWORD ae_ge_param3;
|
|
DWORD ae_ge_param4;
|
|
DWORD ae_ge_param5;
|
|
DWORD ae_ge_param6;
|
|
DWORD ae_ge_param7;
|
|
DWORD ae_ge_param8;
|
|
DWORD ae_ge_param9;
|
|
} AE_GENERIC,*PAE_GENERIC,*LPAE_GENERIC;
|
|
NET_API_STATUS WINAPI NetAuditClear(LPCWSTR,LPCWSTR,LPCWSTR);
|
|
NET_API_STATUS WINAPI NetAuditRead(LPTSTR,LPTSTR,LPHLOG,DWORD,PDWORD,DWORD,DWORD,PBYTE*,DWORD,PDWORD,PDWORD);
|
|
NET_API_STATUS WINAPI NetAuditWrite(DWORD,PBYTE,DWORD,LPTSTR,PBYTE);
|
|
|
|
/* These conflict with struct typedefs, why? */
|
|
#define AE_SRVSTATUS 0
|
|
#define AE_SESSLOGON 1
|
|
#define AE_SESSLOGOFF 2
|
|
#define AE_SESSPWERR 3
|
|
#define AE_CONNSTART 4
|
|
#define AE_CONNSTOP 5
|
|
#define AE_CONNREJ 6
|
|
#define AE_RESACCESS 7
|
|
#define AE_RESACCESSREJ 8
|
|
#define AE_CLOSEFILE 9
|
|
#define AE_SERVICESTAT 11
|
|
#define AE_ACLMOD 12
|
|
#define AE_UASMOD 13
|
|
#define AE_NETLOGON 14
|
|
#define AE_NETLOGOFF 15
|
|
#define AE_NETLOGDENIED 16
|
|
#define AE_ACCLIMITEXCD 17
|
|
#define AE_RESACCESS2 18
|
|
#define AE_ACLMODFAIL 19
|
|
#define AE_LOCKOUT 20
|
|
#define AE_GENERIC_TYPE 21
|
|
#define AE_SRVSTART 0
|
|
#define AE_SRVPAUSED 1
|
|
#define AE_SRVCONT 2
|
|
#define AE_SRVSTOP 3
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
#endif
|