winsup/w32api/include/ntsecpkg.h

   1 #ifndef _NTSECPKG_H
   2 #define _NTSECPKG_H
   3 #if __GNUC__ >=3
   4 #pragma GCC system_header
   5 #endif
   6
   7 #include "windef.h"
   8 #include "ntsecapi.h"
   9 #include "security.h"
  10
  11 #ifdef __cplusplus
  12 extern "C" {
  13 #endif
  14
  15 #define ISC_REQ_DELEGATE 1
  16 #define ISC_REQ_MUTUAL_AUTH 2
  17 #define ISC_REQ_REPLAY_DETECT 4
  18 #define ISC_REQ_SEQUENCE_DETECT 8
  19 #define ISC_REQ_CONFIDENTIALITY  16
  20 #define ISC_REQ_USE_SESSION_KEY 32
  21 #define ISC_REQ_PROMPT_FOR_CREDS 64
  22 #define ISC_REQ_USE_SUPPLIED_CREDS  128
  23 #define ISC_REQ_ALLOCATE_MEMORY 256
  24 #define ISC_REQ_USE_DCE_STYLE 512
  25 #define ISC_REQ_DATAGRAM 1024
  26 #define ISC_REQ_CONNECTION 2048
  27 #define ISC_REQ_EXTENDED_ERROR 16384
  28 #define ISC_REQ_STREAM 32768
  29 #define ISC_REQ_INTEGRITY 65536
  30 #define ISC_REQ_MANUAL_CRED_VALIDATION 524288
  31 #define ISC_REQ_HTTP  268435456
  32
  33 #define ISC_RET_EXTENDED_ERROR 16384
  34
  35 #define ASC_REQ_DELEGATE 1
  36 #define ASC_REQ_MUTUAL_AUTH 2
  37 #define ASC_REQ_REPLAY_DETECT 4
  38 #define ASC_REQ_SEQUENCE_DETECT 8
  39 #define ASC_REQ_CONFIDENTIALITY 16
  40 #define ASC_REQ_USE_SESSION_KEY 32
  41 #define ASC_REQ_ALLOCATE_MEMORY 256
  42 #define ASC_REQ_USE_DCE_STYLE 512
  43 #define ASC_REQ_DATAGRAM 1024
  44 #define ASC_REQ_CONNECTION 2048
  45 #define ASC_REQ_EXTENDED_ERROR 32768
  46 #define ASC_REQ_STREAM 65536
  47 #define ASC_REQ_INTEGRITY 131072
  48
  49 #define SECURITY_NATIVE_DREP  16
  50 #define SECURITY_NETWORK_DREP 0
  51
  52 #define SECPKG_STATE_ENCRYPTION_PERMITTED               0x01
  53 #define SECPKG_STATE_STRONG_ENCRYPTION_PERMITTED        0x02
  54 #define SECPKG_STATE_DOMAIN_CONTROLLER                  0x04
  55 #define SECPKG_STATE_WORKSTATION                        0x08
  56 #define SECPKG_STATE_STANDALONE                         0x10
  57
  58 /* enum definitions for Secure Service Provider/Authentication Packages */
  59 typedef enum _LSA_TOKEN_INFORMATION_TYPE {
  60         LsaTokenInformationNull,
  61         LsaTokenInformationV1
  62 } LSA_TOKEN_INFORMATION_TYPE, *PLSA_TOKEN_INFORMATION_TYPE;
  63 typedef enum _SECPKG_EXTENDED_INFORMATION_CLASS
  64 {
  65         SecpkgGssInfo = 1,
  66         SecpkgContextThunks,
  67         SecpkgMutualAuthLevel,
  68         SecpkgMaxInfo
  69 } SECPKG_EXTENDED_INFORMATION_CLASS;
  70 typedef enum _SECPKG_NAME_TYPE {
  71         SecNameSamCompatible,
  72         SecNameAlternateId,
  73         SecNameFlat,
  74         SecNameDN
  75 } SECPKG_NAME_TYPE;
  76
  77 /* struct definitions for SSP/AP */
  78 typedef struct _SECPKG_PRIMARY_CRED {
  79         LUID LogonId;
  80         UNICODE_STRING DownlevelName;
  81         UNICODE_STRING DomainName;
  82         UNICODE_STRING Password;
  83         UNICODE_STRING OldPassword;
  84         PSID UserSid;
  85         ULONG Flags;
  86         UNICODE_STRING DnsDomainName;
  87         UNICODE_STRING Upn;
  88         UNICODE_STRING LogonServer;
  89         UNICODE_STRING Spare1;
  90         UNICODE_STRING Spare2;
  91         UNICODE_STRING Spare3;
  92         UNICODE_STRING Spare4;
  93 } SECPKG_PRIMARY_CRED, *PSECPKG_PRIMARY_CRED;
  94 typedef struct _SECPKG_SUPPLEMENTAL_CRED {
  95         UNICODE_STRING PackageName;
  96         ULONG CredentialSize;
  97         PUCHAR Credentials;
  98 } SECPKG_SUPPLEMENTAL_CRED, *PSECPKG_SUPPLEMENTAL_CRED;
  99 typedef struct _SECPKG_SUPPLEMENTAL_CRED_ARRAY {
 100         ULONG CredentialCount;
 101         SECPKG_SUPPLEMENTAL_CRED Credentials[1];
 102 } SECPKG_SUPPLEMENTAL_CRED_ARRAY, *PSECPKG_SUPPLEMENTAL_CRED_ARRAY;
 103 typedef struct _SECPKG_PARAMETERS {
 104         ULONG Version;
 105         ULONG MachineState;
 106         ULONG SetupMode;
 107         PSID DomainSid;
 108         UNICODE_STRING DomainName;
 109         UNICODE_STRING DnsDomainName;
 110         GUID DomainGuid;
 111 } SECPKG_PARAMETERS, *PSECPKG_PARAMETERS,
 112   SECPKG_EVENT_DOMAIN_CHANGE, *PSECPKG_EVENT_DOMAIN_CHANGE;
 113 typedef struct _SECPKG_CLIENT_INFO {
 114   LUID LogonId;
 115   ULONG ProcessID;
 116   ULONG ThreadID;
 117   BOOLEAN HasTcbPrivilege;
 118   BOOLEAN Impersonating;
 119   BOOLEAN Restricted;
 120 } SECPKG_CLIENT_INFO,
 121  *PSECPKG_CLIENT_INFO;
 122 typedef struct _SECURITY_USER_DATA {
 123         SECURITY_STRING UserName;
 124         SECURITY_STRING LogonDomainName;
 125         SECURITY_STRING LogonServer;
 126         PSID pSid;
 127 } SECURITY_USER_DATA, *PSECURITY_USER_DATA,
 128   SecurityUserData, *PSecurityUserData;
 129 typedef struct _SECPKG_GSS_INFO {
 130         ULONG EncodedIdLength;
 131         UCHAR EncodedId[4];
 132 } SECPKG_GSS_INFO, *PSECPKG_GSS_INFO;
 133 typedef struct _SECPKG_CONTEXT_THUNKS {
 134         ULONG InfoLevelCount;
 135         ULONG Levels[1];
 136 } SECPKG_CONTEXT_THUNKS, *PSECPKG_CONTEXT_THUNKS;
 137 typedef struct _SECPKG_MUTUAL_AUTH_LEVEL {
 138         ULONG MutualAuthLevel;
 139 } SECPKG_MUTUAL_AUTH_LEVEL, *PSECPKG_MUTUAL_AUTH_LEVEL;
 140 typedef struct _SECPKG_CALL_INFO {
 141         ULONG ProcessId;
 142         ULONG ThreadId;
 143         ULONG Attributes;
 144         ULONG CallCount;
 145 } SECPKG_CALL_INFO, *PSECPKG_CALL_INFO;
 146 typedef struct _SECPKG_EXTENDED_INFORMATION {
 147         SECPKG_EXTENDED_INFORMATION_CLASS Class;
 148         union {
 149                 SECPKG_GSS_INFO GssInfo;
 150                 SECPKG_CONTEXT_THUNKS ContextThunks;
 151                 SECPKG_MUTUAL_AUTH_LEVEL MutualAuthLevel;
 152         } Info;
 153 } SECPKG_EXTENDED_INFORMATION, *PSECPKG_EXTENDED_INFORMATION;
 154
 155 /* callbacks implemented by SSP/AP dlls and called by the LSA */
 156 typedef VOID (NTAPI *PLSA_CALLBACK_FUNCTION)(ULONG_PTR, ULONG_PTR, PSecBuffer,
 157  PSecBuffer);
 158
 159 /* misc typedefs used in the below prototypes */
 160 typedef PVOID *PLSA_CLIENT_REQUEST;
 161 typedef ULONG LSA_SEC_HANDLE, *PLSA_SEC_HANDLE;
 162 typedef LPTHREAD_START_ROUTINE SEC_THREAD_START;
 163 typedef PSECURITY_ATTRIBUTES SEC_ATTRS;
 164
 165 /* functions used by SSP/AP obtainable by dispatch tables */
 166 typedef NTSTATUS (NTAPI *PLSA_REGISTER_CALLBACK)(ULONG, PLSA_CALLBACK_FUNCTION);
 167 typedef NTSTATUS (NTAPI *PLSA_CREATE_LOGON_SESSION)(PLUID);
 168 typedef NTSTATUS (NTAPI *PLSA_DELETE_LOGON_SESSION)(PLUID);
 169 typedef NTSTATUS (NTAPI *PLSA_ADD_CREDENTIAL)(PLUID, ULONG, PLSA_STRING,
 170  PLSA_STRING);
 171 typedef NTSTATUS (NTAPI *PLSA_GET_CREDENTIALS)(PLUID, ULONG, PULONG, BOOLEAN,
 172  PLSA_STRING, PULONG, PLSA_STRING);
 173 typedef NTSTATUS (NTAPI *PLSA_DELETE_CREDENTIAL)(PLUID, ULONG, PLSA_STRING);
 174 typedef PVOID (NTAPI *PLSA_ALLOCATE_LSA_HEAP)(ULONG);
 175 typedef VOID (NTAPI *PLSA_FREE_LSA_HEAP)(PVOID);
 176 typedef NTSTATUS (NTAPI *PLSA_ALLOCATE_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST,
 177  ULONG, PVOID*);
 178 typedef NTSTATUS (NTAPI *PLSA_FREE_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST, PVOID);
 179 typedef NTSTATUS (NTAPI *PLSA_COPY_TO_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST, ULONG,
 180  PVOID, PVOID);
 181 typedef NTSTATUS (NTAPI *PLSA_COPY_FROM_CLIENT_BUFFER)(PLSA_CLIENT_REQUEST,
 182  ULONG, PVOID, PVOID);
 183 typedef NTSTATUS (NTAPI *PLSA_IMPERSONATE_CLIENT)(void);
 184 typedef NTSTATUS (NTAPI *PLSA_UNLOAD_PACKAGE)(void);
 185 typedef NTSTATUS (NTAPI *PLSA_DUPLICATE_HANDLE)(HANDLE, PHANDLE);
 186 typedef NTSTATUS (NTAPI *PLSA_SAVE_SUPPLEMENTAL_CREDENTIALS)(PLUID, ULONG,
 187  PVOID, BOOLEAN);
 188 typedef HANDLE (NTAPI *PLSA_CREATE_THREAD)(SEC_ATTRS, ULONG, SEC_THREAD_START,
 189  PVOID, ULONG, PULONG);
 190 typedef NTSTATUS (NTAPI *PLSA_GET_CLIENT_INFO)(PSECPKG_CLIENT_INFO);
 191 typedef HANDLE (NTAPI *PLSA_REGISTER_NOTIFICATION)(SEC_THREAD_START, PVOID,
 192  ULONG, ULONG, ULONG, ULONG, HANDLE);
 193 typedef NTSTATUS (NTAPI *PLSA_CANCEL_NOTIFICATION)(HANDLE);
 194 typedef NTSTATUS (NTAPI *PLSA_MAP_BUFFER)(PSecBuffer, PSecBuffer);
 195 typedef NTSTATUS (NTAPI *PLSA_CREATE_TOKEN)(PLUID, PTOKEN_SOURCE,
 196  SECURITY_LOGON_TYPE, SECURITY_IMPERSONATION_LEVEL, LSA_TOKEN_INFORMATION_TYPE,
 197  PVOID, PTOKEN_GROUPS, PUNICODE_STRING, PUNICODE_STRING, PUNICODE_STRING,
 198  PUNICODE_STRING, PHANDLE, PNTSTATUS);
 199 typedef VOID (NTAPI *PLSA_AUDIT_LOGON)(NTSTATUS, NTSTATUS, PUNICODE_STRING,
 200  PUNICODE_STRING, PUNICODE_STRING, OPTIONAL PSID, SECURITY_LOGON_TYPE,
 201  PTOKEN_SOURCE, PLUID);
 202 typedef NTSTATUS (NTAPI *PLSA_CALL_PACKAGE)(PUNICODE_STRING, PVOID, ULONG,
 203  PVOID*, PULONG, PNTSTATUS);
 204 typedef VOID (NTAPI *PLSA_FREE_LSA_HEAP)(PVOID);
 205 typedef BOOLEAN (NTAPI *PLSA_GET_CALL_INFO)(PSECPKG_CALL_INFO);
 206 typedef NTSTATUS (NTAPI *PLSA_CALL_PACKAGEEX)(PUNICODE_STRING, PVOID, PVOID,
 207  ULONG, PVOID*, PULONG, PNTSTATUS);
 208 typedef PVOID (NTAPI *PLSA_CREATE_SHARED_MEMORY)(ULONG, ULONG);
 209 typedef PVOID (NTAPI *PLSA_ALLOCATE_SHARED_MEMORY)(PVOID, ULONG);
 210 typedef VOID (NTAPI *PLSA_FREE_SHARED_MEMORY)(PVOID, PVOID);
 211 typedef BOOLEAN (NTAPI *PLSA_DELETE_SHARED_MEMORY)(PVOID);
 212 typedef NTSTATUS (NTAPI *PLSA_OPEN_SAM_USER)(PSECURITY_STRING, SECPKG_NAME_TYPE,
 213  PSECURITY_STRING, BOOLEAN, ULONG, PVOID*);
 214 typedef NTSTATUS (NTAPI *PLSA_GET_USER_CREDENTIALS)(PVOID, PVOID *, PULONG,
 215  PVOID *, PULONG);
 216 typedef NTSTATUS (NTAPI *PLSA_GET_USER_AUTH_DATA)(PVOID, PUCHAR *, PULONG);
 217 typedef NTSTATUS (NTAPI *PLSA_CLOSE_SAM_USER)(PVOID);
 218 typedef NTSTATUS (NTAPI *PLSA_CONVERT_AUTH_DATA_TO_TOKEN)(PVOID, ULONG,
 219  SECURITY_IMPERSONATION_LEVEL, PTOKEN_SOURCE, SECURITY_LOGON_TYPE,
 220  PUNICODE_STRING, PHANDLE, PLUID, PUNICODE_STRING, PNTSTATUS);
 221 typedef NTSTATUS (NTAPI *PLSA_CLIENT_CALLBACK)(PCHAR, ULONG_PTR, ULONG_PTR,
 222  PSecBuffer, PSecBuffer);
 223 typedef NTSTATUS (NTAPI *PLSA_UPDATE_PRIMARY_CREDENTIALS)(PSECPKG_PRIMARY_CRED, PSECPKG_SUPPLEMENTAL_CRED_ARRAY);
 224 typedef NTSTATUS (NTAPI *PLSA_GET_AUTH_DATA_FOR_USER)(PSECURITY_STRING,
 225  SECPKG_NAME_TYPE, PSECURITY_STRING, PUCHAR *, PULONG, PUNICODE_STRING);
 226 typedef NTSTATUS (NTAPI *PLSA_CRACK_SINGLE_NAME)(ULONG, BOOLEAN,
 227  PUNICODE_STRING, PUNICODE_STRING, ULONG, PUNICODE_STRING, PUNICODE_STRING,
 228  PULONG);
 229 typedef NTSTATUS (NTAPI *PLSA_AUDIT_ACCOUNT_LOGON)(ULONG, BOOLEAN,
 230  PUNICODE_STRING, PUNICODE_STRING, PUNICODE_STRING, NTSTATUS);
 231 typedef NTSTATUS (NTAPI *PLSA_CALL_PACKAGE_PASSTHROUGH)(PUNICODE_STRING, PVOID,
 232  PVOID, ULONG, PVOID*, PULONG, PNTSTATUS);
 233
 234 /* Dispatch tables of functions used by SSP/AP */
 235 typedef struct SECPKG_DLL_FUNCTIONS {
 236         PLSA_ALLOCATE_LSA_HEAP AllocateHeap;
 237         PLSA_FREE_LSA_HEAP FreeHeap;
 238         PLSA_REGISTER_CALLBACK RegisterCallback;
 239 } SECPKG_DLL_FUNCTIONS,
 240  *PSECPKG_DLL_FUNCTIONS;
 241 typedef struct LSA_DISPATCH_TABLE {
 242         PLSA_CREATE_LOGON_SESSION CreateLogonSession;
 243         PLSA_DELETE_LOGON_SESSION DeleteLogonSession;
 244         PLSA_ADD_CREDENTIAL AddCredential;
 245         PLSA_GET_CREDENTIALS GetCredentials;
 246         PLSA_DELETE_CREDENTIAL DeleteCredential;
 247         PLSA_ALLOCATE_LSA_HEAP AllocateLsaHeap;
 248         PLSA_FREE_LSA_HEAP FreeLsaHeap;
 249         PLSA_ALLOCATE_CLIENT_BUFFER AllocateClientBuffer;
 250         PLSA_FREE_CLIENT_BUFFER FreeClientBuffer;
 251         PLSA_COPY_TO_CLIENT_BUFFER CopyToClientBuffer;
 252         PLSA_COPY_FROM_CLIENT_BUFFER CopyFromClientBuffer;
 253 } LSA_DISPATCH_TABLE,
 254  *PLSA_DISPATCH_TABLE;
 255 typedef struct _LSA_SECPKG_FUNCTION_TABLE {
 256         PLSA_CREATE_LOGON_SESSION CreateLogonSession;
 257         PLSA_DELETE_LOGON_SESSION DeleteLogonSession;
 258         PLSA_ADD_CREDENTIAL AddCredential;
 259         PLSA_GET_CREDENTIALS GetCredentials;
 260         PLSA_DELETE_CREDENTIAL DeleteCredential;
 261         PLSA_ALLOCATE_LSA_HEAP AllocateLsaHeap;
 262         PLSA_FREE_LSA_HEAP FreeLsaHeap;
 263         PLSA_ALLOCATE_CLIENT_BUFFER AllocateClientBuffer;
 264         PLSA_FREE_CLIENT_BUFFER FreeClientBuffer;
 265         PLSA_COPY_TO_CLIENT_BUFFER CopyToClientBuffer;
 266         PLSA_COPY_FROM_CLIENT_BUFFER CopyFromClientBuffer;
 267         PLSA_IMPERSONATE_CLIENT ImpersonateClient;
 268         PLSA_UNLOAD_PACKAGE UnloadPackage;
 269         PLSA_DUPLICATE_HANDLE DuplicateHandle;
 270         PLSA_SAVE_SUPPLEMENTAL_CREDENTIALS SaveSupplementalCredentials;
 271         PLSA_CREATE_THREAD CreateThread;
 272         PLSA_GET_CLIENT_INFO GetClientInfo;
 273         PLSA_REGISTER_NOTIFICATION RegisterNotification;
 274         PLSA_CANCEL_NOTIFICATION CancelNotification;
 275         PLSA_MAP_BUFFER MapBuffer;
 276         PLSA_CREATE_TOKEN CreateToken;
 277         PLSA_AUDIT_LOGON AuditLogon;
 278         PLSA_CALL_PACKAGE CallPackage;
 279         PLSA_FREE_LSA_HEAP FreeReturnBuffer;
 280         PLSA_GET_CALL_INFO GetCallInfo;
 281         PLSA_CALL_PACKAGEEX CallPackageEx;
 282         PLSA_CREATE_SHARED_MEMORY CreateSharedMemory;
 283         PLSA_ALLOCATE_SHARED_MEMORY AllocateSharedMemory;
 284         PLSA_FREE_SHARED_MEMORY FreeSharedMemory;
 285         PLSA_DELETE_SHARED_MEMORY DeleteSharedMemory;
 286         PLSA_OPEN_SAM_USER OpenSamUser;
 287         PLSA_GET_USER_CREDENTIALS GetUserCredentials;
 288         PLSA_GET_USER_AUTH_DATA GetUserAuthData;
 289         PLSA_CLOSE_SAM_USER CloseSamUser;
 290         PLSA_CONVERT_AUTH_DATA_TO_TOKEN ConvertAuthDataToToken;
 291         PLSA_CLIENT_CALLBACK ClientCallback;
 292         PLSA_UPDATE_PRIMARY_CREDENTIALS UpdateCredentials;
 293         PLSA_GET_AUTH_DATA_FOR_USER GetAuthDataForUser;
 294         PLSA_CRACK_SINGLE_NAME CrackSingleName;
 295         PLSA_AUDIT_ACCOUNT_LOGON AuditAccountLogon;
 296         PLSA_CALL_PACKAGE_PASSTHROUGH CallPackagePassthrough;
 297 } LSA_SECPKG_FUNCTION_TABLE,
 298  *PLSA_SECPKG_FUNCTION_TABLE;
 299
 300 /* functions implemented by SSP/AP obtainable by dispatch tables */
 301 typedef NTSTATUS (NTAPI *PLSA_AP_INITIALIZE_PACKAGE)(ULONG, PLSA_DISPATCH_TABLE,
 302  PLSA_STRING, PLSA_STRING, PLSA_STRING *);
 303 typedef NTSTATUS (NTAPI *PLSA_AP_LOGON_USER)(LPWSTR, LPWSTR, LPWSTR, LPWSTR,
 304  DWORD, DWORD, PHANDLE);
 305 typedef NTSTATUS (NTAPI *PLSA_AP_CALL_PACKAGE)(PUNICODE_STRING, PVOID, ULONG,
 306  PVOID *, PULONG, PNTSTATUS);
 307 typedef VOID (NTAPI *PLSA_AP_LOGON_TERMINATED)(PLUID);
 308 typedef NTSTATUS (NTAPI *PLSA_AP_CALL_PACKAGE_UNTRUSTED)(PLSA_CLIENT_REQUEST,
 309  PVOID, PVOID, ULONG, PVOID *, PULONG, PNTSTATUS);
 310 typedef NTSTATUS (NTAPI *PLSA_AP_CALL_PACKAGE_PASSTHROUGH)(PUNICODE_STRING,
 311  PVOID, PVOID, ULONG, PVOID *, PULONG, PNTSTATUS);
 312 typedef NTSTATUS (NTAPI *PLSA_AP_LOGON_USER_EX)(PLSA_CLIENT_REQUEST,
 313  SECURITY_LOGON_TYPE, PVOID, PVOID, ULONG, PVOID *, PULONG, PLUID, PNTSTATUS,
 314  PLSA_TOKEN_INFORMATION_TYPE, PVOID *, PUNICODE_STRING *, PUNICODE_STRING *,
 315  PUNICODE_STRING *);
 316 typedef NTSTATUS (NTAPI *PLSA_AP_LOGON_USER_EX2)(PLSA_CLIENT_REQUEST,
 317  SECURITY_LOGON_TYPE, PVOID, PVOID, ULONG, PVOID *, PULONG, PLUID, PNTSTATUS,
 318  PLSA_TOKEN_INFORMATION_TYPE, PVOID *, PUNICODE_STRING *, PUNICODE_STRING *,
 319  PUNICODE_STRING *, PSECPKG_PRIMARY_CRED, PSECPKG_SUPPLEMENTAL_CRED_ARRAY *);
 320 typedef NTSTATUS (SpInitializeFn)(ULONG_PTR, PSECPKG_PARAMETERS,
 321  PLSA_SECPKG_FUNCTION_TABLE);
 322 typedef NTSTATUS (NTAPI SpShutDownFn)(void);
 323 typedef NTSTATUS (NTAPI SpGetInfoFn)(PSecPkgInfoW);
 324 typedef NTSTATUS (NTAPI SpAcceptCredentialsFn)(SECURITY_LOGON_TYPE,
 325  PUNICODE_STRING, PSECPKG_PRIMARY_CRED, PSECPKG_SUPPLEMENTAL_CRED);
 326 typedef NTSTATUS (NTAPI SpAcquireCredentialsHandleFn)(PUNICODE_STRING, ULONG,
 327  PLUID, PVOID, PVOID, PVOID, PLSA_SEC_HANDLE, PTimeStamp);
 328 typedef NTSTATUS (NTAPI SpQueryCredentialsAttributesFn)(LSA_SEC_HANDLE, ULONG,
 329  PVOID);
 330 typedef NTSTATUS (NTAPI SpFreeCredentialsHandleFn)(LSA_SEC_HANDLE);
 331 typedef NTSTATUS (NTAPI SpSaveCredentialsFn)(LSA_SEC_HANDLE, PSecBuffer);
 332 typedef NTSTATUS (NTAPI SpGetCredentialsFn)(LSA_SEC_HANDLE, PSecBuffer);
 333 typedef NTSTATUS (NTAPI SpDeleteCredentialsFn)(LSA_SEC_HANDLE, PSecBuffer);
 334 typedef NTSTATUS (NTAPI SpInitLsaModeContextFn)(LSA_SEC_HANDLE, LSA_SEC_HANDLE,
 335  PUNICODE_STRING, ULONG, ULONG, PSecBufferDesc, PLSA_SEC_HANDLE, PSecBufferDesc,
 336  PULONG, PTimeStamp, PBOOLEAN, PSecBuffer);
 337 typedef NTSTATUS (NTAPI SpAcceptLsaModeContextFn)(LSA_SEC_HANDLE,
 338  LSA_SEC_HANDLE, PSecBufferDesc, ULONG, ULONG, PLSA_SEC_HANDLE, PSecBufferDesc,
 339  PULONG, PTimeStamp, PBOOLEAN, PSecBuffer);
 340 typedef NTSTATUS (NTAPI SpDeleteContextFn)(LSA_SEC_HANDLE);
 341 typedef NTSTATUS (NTAPI SpApplyControlTokenFn)(LSA_SEC_HANDLE, PSecBufferDesc);
 342 typedef NTSTATUS (NTAPI SpGetUserInfoFn)(PLUID, ULONG, PSecurityUserData *);
 343 typedef NTSTATUS (NTAPI SpGetExtendedInformationFn)(
 344  SECPKG_EXTENDED_INFORMATION_CLASS, PSECPKG_EXTENDED_INFORMATION *);
 345 typedef NTSTATUS (NTAPI SpQueryContextAttributesFn)(LSA_SEC_HANDLE, ULONG,
 346  PVOID);
 347 typedef NTSTATUS (NTAPI SpAddCredentialsFn)(LSA_SEC_HANDLE, PUNICODE_STRING,
 348  PUNICODE_STRING, ULONG, PVOID, PVOID, PVOID, PTimeStamp);
 349 typedef NTSTATUS (NTAPI SpSetExtendedInformationFn)(
 350  SECPKG_EXTENDED_INFORMATION_CLASS, PSECPKG_EXTENDED_INFORMATION);
 351 typedef NTSTATUS (NTAPI SpInstanceInitFn)(ULONG, PSECPKG_DLL_FUNCTIONS,
 352  PVOID *);
 353 typedef NTSTATUS (NTAPI SpInitUserModeContextFn)(LSA_SEC_HANDLE, PSecBuffer);
 354 typedef NTSTATUS (NTAPI SpMakeSignatureFn)(LSA_SEC_HANDLE, ULONG,
 355  PSecBufferDesc, ULONG);
 356 typedef NTSTATUS (NTAPI SpVerifySignatureFn)(LSA_SEC_HANDLE, PSecBufferDesc,
 357  ULONG, PULONG);
 358 typedef NTSTATUS (NTAPI SpSealMessageFn)(LSA_SEC_HANDLE, ULONG, PSecBufferDesc,
 359  ULONG);
 360 typedef NTSTATUS (NTAPI SpUnsealMessageFn)(LSA_SEC_HANDLE, PSecBufferDesc,
 361  ULONG, PULONG);
 362 typedef NTSTATUS (NTAPI SpGetContextTokenFn)(LSA_SEC_HANDLE, PHANDLE);
 363 typedef NTSTATUS (NTAPI SpCompleteAuthTokenFn)(LSA_SEC_HANDLE, PSecBufferDesc);
 364 typedef NTSTATUS (NTAPI SpFormatCredentialsFn)(PSecBuffer, PSecBuffer);
 365 typedef NTSTATUS (NTAPI SpMarshallSupplementalCredsFn)(ULONG, PUCHAR, PULONG,
 366  PVOID *);
 367 typedef NTSTATUS (NTAPI SpExportSecurityContextFn)(LSA_SEC_HANDLE, ULONG,
 368  PSecBuffer, PHANDLE);
 369 typedef NTSTATUS (NTAPI SpImportSecurityContextFn)(PSecBuffer, HANDLE,
 370  PLSA_SEC_HANDLE);
 371
 372 /* Dispatch tables of functions implemented by SSP/AP */
 373 typedef struct SECPKG_FUNCTION_TABLE {
 374         PLSA_AP_INITIALIZE_PACKAGE InitializePackage;
 375         PLSA_AP_LOGON_USER LogonUser;
 376         PLSA_AP_CALL_PACKAGE CallPackage;
 377         PLSA_AP_LOGON_TERMINATED LogonTerminated;
 378         PLSA_AP_CALL_PACKAGE_UNTRUSTED CallPackageUntrusted;
 379         PLSA_AP_CALL_PACKAGE_PASSTHROUGH CallPackagePassthrough;
 380         PLSA_AP_LOGON_USER_EX LogonUserEx;
 381         PLSA_AP_LOGON_USER_EX2 LogonUserEx2;
 382         SpInitializeFn *Initialize;
 383         SpShutDownFn *Shutdown;
 384         SpGetInfoFn *GetInfo;
 385         SpAcceptCredentialsFn *AcceptCredentials;
 386         SpAcquireCredentialsHandleFn *AcquireCredentialsHandle;
 387         SpQueryCredentialsAttributesFn *QueryCredentialsAttributes;
 388         SpFreeCredentialsHandleFn *FreeCredentialsHandle;
 389         SpSaveCredentialsFn *SaveCredentials;
 390         SpGetCredentialsFn *GetCredentials;
 391         SpDeleteCredentialsFn *DeleteCredentials;
 392         SpInitLsaModeContextFn *InitLsaModeContext;
 393         SpAcceptLsaModeContextFn *AcceptLsaModeContext;
 394         SpDeleteContextFn *DeleteContext;
 395         SpApplyControlTokenFn *ApplyControlToken;
 396         SpGetUserInfoFn *GetUserInfo;
 397         SpGetExtendedInformationFn *GetExtendedInformation;
 398         SpQueryContextAttributesFn *QueryContextAttributes;
 399         SpAddCredentialsFn *AddCredentials;
 400         SpSetExtendedInformationFn *SetExtendedInformation;
 401 } SECPKG_FUNCTION_TABLE,
 402  *PSECPKG_FUNCTION_TABLE;
 403
 404 typedef struct SECPKG_USER_FUNCTION_TABLE {
 405         SpInstanceInitFn *InstanceInit;
 406         SpInitUserModeContextFn *InitUserModeContext;
 407         SpMakeSignatureFn *MakeSignature;
 408         SpVerifySignatureFn *VerifySignature;
 409         SpSealMessageFn *SealMessage;
 410         SpUnsealMessageFn *UnsealMessage;
 411         SpGetContextTokenFn *GetContextToken;
 412         SpQueryContextAttributesFn *QueryContextAttributes;
 413         SpCompleteAuthTokenFn *CompleteAuthToken;
 414         SpDeleteContextFn *DeleteUserModeContext;
 415         SpFormatCredentialsFn *FormatCredentials;
 416         SpMarshallSupplementalCredsFn *MarshallSupplementalCreds;
 417         SpExportSecurityContextFn *ExportContext;
 418         SpImportSecurityContextFn *ImportContext;
 419 } SECPKG_USER_FUNCTION_TABLE,
 420  *PSECPKG_USER_FUNCTION_TABLE;
 421
 422 /* Entry points to SSP/AP */
 423 typedef NTSTATUS (NTAPI *SpLsaModeInitializeFn)(ULONG, PULONG,
 424  PSECPKG_FUNCTION_TABLE *, PULONG);
 425 typedef NTSTATUS (WINAPI *SpUserModeInitializeFn)(ULONG, PULONG,
 426  PSECPKG_USER_FUNCTION_TABLE *, PULONG);
 427
 428 #ifdef __cplusplus
 429 }
 430 #endif
 431 #endif /* _NTSECPKG_H */