//+--------------------------------------------------------------------------- // // Microsoft Windows // Copyright (C) Microsoft Corporation, 1992-1996. // // File: sspi.h // // Contents: Security Support Provider Interface // Prototypes and structure definitions // // Functions: Security Support Provider API // // History: 11-24-93 RichardW Created // //---------------------------------------------------------------------------- #ifndef __SSPI_H__ #define __SSPI_H__ // // Determine environment: // #ifdef SECURITY_WIN32 #define ISSP_LEVEL 32 #define ISSP_MODE 1 #endif // SECURITY_WIN32 #ifdef SECURITY_WIN16 #define ISSP_LEVEL 16 #define ISSP_MODE 1 #endif // SECURITY_WIN16 #ifdef SECURITY_KERNEL #define ISSP_LEVEL 32 // // SECURITY_KERNEL trumps SECURITY_WIN32. Undefine ISSP_MODE so that // we don't get redefine errors. // #ifdef ISSP_MODE #undef ISSP_MODE #endif #define ISSP_MODE 0 #endif // SECURITY_KERNEL #ifdef SECURITY_OS212 #define ISSP_LEVEL 16 #define ISSP_MODE 1 #endif // SECURITY_OS212 #ifdef SECURITY_DOS #define ISSP_LEVEL 16 #define ISSP_MODE 1 #endif // SECURITY_DOS #ifdef SECURITY_MAC #define ISSP_LEVEL 32 #define ISSP_MODE 1 #endif // SECURITY_MAC #ifndef ISSP_LEVEL #error You must define one of SECURITY_WIN32, SECURITY_WIN16, SECURITY_KERNEL #error SECURITY_DOS, SECURITY_MAC or SECURITY_OS212 #endif // !ISSP_LEVEL // // Now, define platform specific mappings: // #if ISSP_LEVEL == 16 typedef short SECURITY_STATUS; typedef short HRESULT; typedef unsigned short SEC_WCHAR; typedef char SEC_CHAR; #define SEC_TEXT(_x_) _x_ #ifdef SECURITY_WIN16 #define SEC_FAR __far #define SEC_ENTRY __pascal __far __export #else // SECURITY_WIN16 #define SEC_FAR __far #define SEC_ENTRY __pascal __far __loadds #pragma warning(disable:4147) #endif // SECURITY_WIN16 #elif defined(SECURITY_MAC) // ISSP_LEVEL == 16 #define SEC_ENTRY #define SEC_TEXT(_X_) _X_ #define SEC_FAR typedef unsigned short SEC_WCHAR; typedef char SEC_CHAR; typedef long HRESULT; typedef HRESULT SECURITY_STATUS; // No Unicode on the Mac typedef SEC_CHAR SEC_FAR * SECURITY_PSTR; typedef SEC_CHAR SEC_FAR * SECURITY_PCSTR; #else // ISSP_LEVEL == 16 // // For NT-2 and up, wtypes will define HRESULT to be long. // typedef WCHAR SEC_WCHAR; typedef CHAR SEC_CHAR; #if !defined(__wtypes_h__) || defined(SECURITY_KERNEL) typedef long HRESULT; #endif // wtypes.h || security_kernel typedef HRESULT SECURITY_STATUS; #define SEC_TEXT TEXT #define SEC_FAR #define SEC_ENTRY __stdcall // // Decide what a string - 32 bits only since for 16 bits it is clear. // #ifdef UNICODE typedef SEC_WCHAR SEC_FAR * SECURITY_PSTR; typedef CONST SEC_WCHAR SEC_FAR * SECURITY_PCSTR; #else // UNICODE typedef SEC_CHAR SEC_FAR * SECURITY_PSTR; typedef CONST SEC_CHAR SEC_FAR * SECURITY_PCSTR; #endif // UNICODE #endif // ISSP_LEVEL == 16 // // Equivalent string for rpcrt: // #define __SEC_FAR SEC_FAR // // Okay, security specific types: // typedef struct _SecHandle { unsigned long dwLower; unsigned long dwUpper; } SecHandle, SEC_FAR * PSecHandle; typedef SecHandle CredHandle; typedef PSecHandle PCredHandle; typedef SecHandle CtxtHandle; typedef PSecHandle PCtxtHandle; #if ISSP_LEVEL == 32 # ifdef WIN32_CHICAGO typedef unsigned __int64 QWORD; typedef QWORD SECURITY_INTEGER, *PSECURITY_INTEGER; # elif defined(_NTDEF_) || defined(_WINNT_) typedef LARGE_INTEGER _SECURITY_INTEGER, SECURITY_INTEGER, *PSECURITY_INTEGER; # else // _NTDEF_ || _WINNT_ // BUGBUG: Alignment for axp typedef struct _SECURITY_INTEGER { unsigned long LowPart; long HighPart; } SECURITY_INTEGER, *PSECURITY_INTEGER; # endif // _NTDEF_ || _WINNT_ # ifndef SECURITY_MAC typedef SECURITY_INTEGER TimeStamp; typedef SECURITY_INTEGER SEC_FAR * PTimeStamp; # else // SECURITY_MAC typedef unsigned long TimeStamp; typedef unsigned long * PTimeStamp; # endif // SECUIRT_MAC #else // ISSP_LEVEL == 32 typedef unsigned long TimeStamp; typedef unsigned long SEC_FAR * PTimeStamp; #endif // ISSP_LEVEL == 32 // // If we are in 32 bit mode, define the SECURITY_STRING structure, // as a clone of the base UNICODE_STRING structure. This is used // internally in security components, an as the string interface // for kernel components (e.g. FSPs) // #if ISSP_LEVEL == 32 # ifndef _NTDEF_ typedef struct _SECURITY_STRING { unsigned short Length; unsigned short MaximumLength; # ifdef MIDL_PASS [size_is(MaximumLength / 2), length_is(Length / 2)] # endif // MIDL_PASS unsigned short * Buffer; } SECURITY_STRING, * PSECURITY_STRING; # else // _NTDEF_ typedef UNICODE_STRING SECURITY_STRING, *PSECURITY_STRING; # endif // _NTDEF_ #endif // ISSP_LEVEL == 32 // // SecPkgInfo structure // // Provides general information about a security provider // typedef struct _SecPkgInfoW { unsigned long fCapabilities; // Capability bitmask unsigned short wVersion; // Version of driver unsigned short wRPCID; // ID for RPC Runtime unsigned long cbMaxToken; // Size of authentication token (max) #ifdef MIDL_PASS [string] #endif SEC_WCHAR SEC_FAR * Name; // Text name #ifdef MIDL_PASS [string] #endif SEC_WCHAR SEC_FAR * Comment; // Comment } SecPkgInfoW, SEC_FAR * PSecPkgInfoW; typedef struct _SecPkgInfoA { unsigned long fCapabilities; // Capability bitmask unsigned short wVersion; // Version of driver unsigned short wRPCID; // ID for RPC Runtime unsigned long cbMaxToken; // Size of authentication token (max) #ifdef MIDL_PASS [string] #endif SEC_CHAR SEC_FAR * Name; // Text name #ifdef MIDL_PASS [string] #endif SEC_CHAR SEC_FAR * Comment; // Comment } SecPkgInfoA, SEC_FAR * PSecPkgInfoA; #ifdef UNICODE # define SecPkgInfo SecPkgInfoW # define PSecPkgInfo PSecPkgInfoW #else # define SecPkgInfo SecPkgInfoA # define PSecPkgInfo PSecPkgInfoA #endif // !UNICODE // // Security Package Capabilities // #define SECPKG_FLAG_INTEGRITY 0x00000001 // Supports integrity on messages #define SECPKG_FLAG_PRIVACY 0x00000002 // Supports privacy (confidentiality) #define SECPKG_FLAG_TOKEN_ONLY 0x00000004 // Only security token needed #define SECPKG_FLAG_DATAGRAM 0x00000008 // Datagram RPC support #define SECPKG_FLAG_CONNECTION 0x00000010 // Connection oriented RPC support #define SECPKG_FLAG_MULTI_REQUIRED 0x00000020 // Full 3-leg required for re-auth. #define SECPKG_FLAG_CLIENT_ONLY 0x00000040 // Server side functionality not available #define SECPKG_FLAG_EXTENDED_ERROR 0x00000080 // Supports extended error msgs #define SECPKG_FLAG_IMPERSONATION 0x00000100 // Supports impersonation #define SECPKG_FLAG_ACCEPT_WIN32_NAME 0x00000200 // Accepts Win32 names #define SECPKG_FLAG_STREAM 0x00000400 // Supports stream semantics #define SECPKG_ID_NONE 0xFFFF // // SecBuffer // // Generic memory descriptors for buffers passed in to the security // API // typedef struct _SecBuffer { unsigned long cbBuffer; // Size of the buffer, in bytes unsigned long BufferType; // Type of the buffer (below) void SEC_FAR * pvBuffer; // Pointer to the buffer } SecBuffer, SEC_FAR * PSecBuffer; typedef struct _SecBufferDesc { unsigned long ulVersion; // Version number unsigned long cBuffers; // Number of buffers #ifdef MIDL_PASS [size_is(cBuffers)] #endif PSecBuffer pBuffers; // Pointer to array of buffers } SecBufferDesc, SEC_FAR * PSecBufferDesc; #define SECBUFFER_VERSION 0 #define SECBUFFER_EMPTY 0 // Undefined, replaced by provider #define SECBUFFER_DATA 1 // Packet data #define SECBUFFER_TOKEN 2 // Security token #define SECBUFFER_PKG_PARAMS 3 // Package specific parameters #define SECBUFFER_MISSING 4 // Missing Data indicator #define SECBUFFER_EXTRA 5 // Extra data #define SECBUFFER_STREAM_TRAILER 6 // Security Trailer #define SECBUFFER_STREAM_HEADER 7 // Security Header #define SECBUFFER_ATTRMASK 0xF0000000 #define SECBUFFER_READONLY 0x80000000 // Buffer is read-only // // Data Representation Constant: // #define SECURITY_NATIVE_DREP 0x00000010 // // Credential Use Flags // #define SECPKG_CRED_INBOUND 0x00000001 #define SECPKG_CRED_OUTBOUND 0x00000002 #define SECPKG_CRED_BOTH 0x00000003 // // InitializeSecurityContext Requirement and return flags: // #define ISC_REQ_DELEGATE 0x00000001 #define ISC_REQ_MUTUAL_AUTH 0x00000002 #define ISC_REQ_REPLAY_DETECT 0x00000004 #define ISC_REQ_SEQUENCE_DETECT 0x00000008 #define ISC_REQ_CONFIDENTIALITY 0x00000010 #define ISC_REQ_USE_SESSION_KEY 0x00000020 #define ISC_REQ_PROMPT_FOR_CREDS 0x00000040 #define ISC_REQ_USE_SUPPLIED_CREDS 0x00000080 #define ISC_REQ_ALLOCATE_MEMORY 0x00000100 #define ISC_REQ_USE_DCE_STYLE 0x00000200 #define ISC_REQ_DATAGRAM 0x00000400 #define ISC_REQ_CONNECTION 0x00000800 #define ISC_REQ_CALL_LEVEL 0x00001000 #define ISC_REQ_EXTENDED_ERROR 0x00004000 #define ISC_REQ_STREAM 0x00008000 #define ISC_REQ_INTEGRITY 0x00010000 #define ISC_REQ_IDENTIFY 0x00020000 #define ISC_RET_DELEGATE 0x00000001 #define ISC_RET_MUTUAL_AUTH 0x00000002 #define ISC_RET_REPLAY_DETECT 0x00000004 #define ISC_RET_SEQUENCE_DETECT 0x00000008 #define ISC_RET_CONFIDENTIALITY 0x00000010 #define ISC_RET_USE_SESSION_KEY 0x00000020 #define ISC_RET_USED_COLLECTED_CREDS 0x00000040 #define ISC_RET_USED_SUPPLIED_CREDS 0x00000080 #define ISC_RET_ALLOCATED_MEMORY 0x00000100 #define ISC_RET_USED_DCE_STYLE 0x00000200 #define ISC_RET_DATAGRAM 0x00000400 #define ISC_RET_CONNECTION 0x00000800 #define ISC_RET_INTERMEDIATE_RETURN 0x00001000 #define ISC_RET_CALL_LEVEL 0x00002000 #define ISC_RET_EXTENDED_ERROR 0x00004000 #define ISC_RET_STREAM 0x00008000 #define ISC_RET_INTEGRITY 0x00010000 #define ISC_RET_IDENTIFY 0x00020000 #define ASC_REQ_DELEGATE 0x00000001 #define ASC_REQ_MUTUAL_AUTH 0x00000002 #define ASC_REQ_REPLAY_DETECT 0x00000004 #define ASC_REQ_SEQUENCE_DETECT 0x00000008 #define ASC_REQ_CONFIDENTIALITY 0x00000010 #define ASC_REQ_USE_SESSION_KEY 0x00000020 #define ASC_REQ_ALLOCATE_MEMORY 0x00000100 #define ASC_REQ_USE_DCE_STYLE 0x00000200 #define ASC_REQ_DATAGRAM 0x00000400 #define ASC_REQ_CONNECTION 0x00000800 #define ASC_REQ_CALL_LEVEL 0x00001000 #define ASC_REQ_EXTENDED_ERROR 0x00008000 #define ASC_REQ_STREAM 0x00010000 #define ASC_REQ_INTEGRITY 0x00020000 #define ASC_REQ_LICENSING 0x00040000 #define ASC_RET_DELEGATE 0x00000001 #define ASC_RET_MUTUAL_AUTH 0x00000002 #define ASC_RET_REPLAY_DETECT 0x00000004 #define ASC_RET_SEQUENCE_DETECT 0x00000008 #define ASC_RET_CONFIDENTIALITY 0x00000010 #define ASC_RET_USE_SESSION_KEY 0x00000020 #define ASC_RET_ALLOCATED_MEMORY 0x00000100 #define ASC_RET_USED_DCE_STYLE 0x00000200 #define ASC_RET_DATAGRAM 0x00000400 #define ASC_RET_CONNECTION 0x00000800 #define ASC_RET_CALL_LEVEL 0x00002000 // skipped 1000 to be like ISC_ #define ASC_RET_THIRD_LEG_FAILED 0x00004000 #define ASC_RET_EXTENDED_ERROR 0x00008000 #define ASC_RET_STREAM 0x00010000 #define ASC_RET_INTEGRITY 0x00020000 #define ASC_RET_LICENSING 0x00040000 // // Security Credentials Attributes: // #define SECPKG_CRED_ATTR_NAMES 1 typedef struct _SecPkgCredentials_NamesW { SEC_WCHAR SEC_FAR * sUserName; } SecPkgCredentials_NamesW, SEC_FAR * PSecPkgCredentials_NamesW; typedef struct _SecPkgCredentials_NamesA { SEC_CHAR SEC_FAR * sUserName; } SecPkgCredentials_NamesA, SEC_FAR * PSecPkgCredentials_NamesA; #ifdef UNICODE # define SecPkgCredentials_Names SecPkgCredentials_NamesW # define PSecPkgCredentials_Names PSecPkgCredentials_NamesW #else # define SecPkgCredentials_Names SecPkgCredentials_NamesA # define PSecPkgCredentials_Names PSecPkgCredentials_NamesA #endif // !UNICODE // // Security Context Attributes: // #define SECPKG_ATTR_SIZES 0 #define SECPKG_ATTR_NAMES 1 #define SECPKG_ATTR_LIFESPAN 2 #define SECPKG_ATTR_DCE_INFO 3 #define SECPKG_ATTR_STREAM_SIZES 4 #define SECPKG_ATTR_KEY_INFO 5 #define SECPKG_ATTR_AUTHORITY 6 #define SECPKG_ATTR_PROTO_INFO 7 #define SECPKG_ATTR_PASSWORD_EXPIRY 8 typedef struct _SecPkgContext_Sizes { unsigned long cbMaxToken; unsigned long cbMaxSignature; unsigned long cbBlockSize; unsigned long cbSecurityTrailer; } SecPkgContext_Sizes, SEC_FAR * PSecPkgContext_Sizes; typedef struct _SecPkgContext_StreamSizes { unsigned long cbHeader; unsigned long cbTrailer; unsigned long cbMaximumMessage; unsigned long cBuffers; unsigned long cbBlockSize; } SecPkgContext_StreamSizes, * PSecPkgContext_StreamSizes; typedef struct _SecPkgContext_NamesW { SEC_WCHAR SEC_FAR * sUserName; } SecPkgContext_NamesW, SEC_FAR * PSecPkgContext_NamesW; typedef struct _SecPkgContext_NamesA { SEC_CHAR SEC_FAR * sUserName; } SecPkgContext_NamesA, SEC_FAR * PSecPkgContext_NamesA; #ifdef UNICODE # define SecPkgContext_Names SecPkgContext_NamesW # define PSecPkgContext_Names PSecPkgContext_NamesW #else # define SecPkgContext_Names SecPkgContext_NamesA # define PSecPkgContext_Names PSecPkgContext_NamesA #endif // !UNICODE typedef struct _SecPkgContext_Lifespan { TimeStamp tsStart; TimeStamp tsExpiry; } SecPkgContext_Lifespan, SEC_FAR * PSecPkgContext_Lifespan; typedef struct _SecPkgContext_DceInfo { unsigned long AuthzSvc; void SEC_FAR * pPac; } SecPkgContext_DceInfo, SEC_FAR * PSecPkgContext_DceInfo; typedef struct _SecPkgContext_KeyInfoA { SEC_CHAR SEC_FAR * sSignatureAlgorithmName; SEC_CHAR SEC_FAR * sEncryptAlgorithmName; unsigned long KeySize; unsigned long SignatureAlgorithm; unsigned long EncryptAlgorithm; } SecPkgContext_KeyInfoA, SEC_FAR * PSecPkgContext_KeyInfoA; typedef struct _SecPkgContext_KeyInfoW { SEC_WCHAR SEC_FAR * sSignatureAlgorithmName; SEC_WCHAR SEC_FAR * sEncryptAlgorithmName; unsigned long KeySize; unsigned long SignatureAlgorithm; unsigned long EncryptAlgorithm; } SecPkgContext_KeyInfoW, SEC_FAR * PSecPkgContext_KeyInfoW; #ifdef UNICODE #define SecPkgContext_KeyInfo SecPkgContext_KeyInfoW #define PSecPkgContext_KeyInfo PSecPkgContext_KeyInfoW #else #define SecPkgContext_KeyInfo SecPkgContext_KeyInfoA #define PSecPkgContext_KeyInfo PSecPkgContext_KeyInfoA #endif typedef struct _SecPkgContext_AuthorityA { SEC_CHAR SEC_FAR * sAuthorityName; } SecPkgContext_AuthorityA, * PSecPkgContext_AuthorityA; typedef struct _SecPkgContext_AuthorityW { SEC_WCHAR SEC_FAR * sAuthorityName; } SecPkgContext_AuthorityW, * PSecPkgContext_AuthorityW; #ifdef UNICODE #define SecPkgContext_Authority SecPkgContext_AuthorityW #define PSecPkgContext_Authority PSecPkgContext_AuthorityW #else #define SecPkgContext_Authority SecPkgContext_AuthorityA #define PSecPkgContext_Authority PSecPkgContext_AuthorityA #endif typedef struct _SecPkgContext_ProtoInfoA { SEC_CHAR SEC_FAR * sProtocolName; unsigned long majorVersion; unsigned long minorVersion; } SecPkgContext_ProtoInfoA, SEC_FAR * PSecPkgContext_ProtoInfoA; typedef struct _SecPkgContext_ProtoInfoW { SEC_WCHAR SEC_FAR * sProtocolName; unsigned long majorVersion; unsigned long minorVersion; } SecPkgContext_ProtoInfoW, SEC_FAR * PSecPkgContext_ProtoInfoW; #ifdef UNICODE #define SecPkgContext_ProtoInfo SecPkgContext_ProtoInfoW #define PSecPkgContext_ProtoInfo PSecPkgContext_ProtoInfoW #else #define SecPkgContext_ProtoInfo SecPkgContext_ProtoInfoA #define PSecPkgContext_ProtoInfo PSecPkgContext_ProtoInfoA #endif typedef struct _SecPkgContext_PasswordExpiry { TimeStamp tsPasswordExpires; } SecPkgContext_PasswordExpiry, SEC_FAR * PSecPkgContext_PasswordExpiry; typedef void (SEC_ENTRY SEC_FAR * SEC_GET_KEY_FN) ( void SEC_FAR * Arg, // Argument passed in void SEC_FAR * Principal, // Principal ID unsigned long KeyVer, // Key Version void SEC_FAR * SEC_FAR * Key, // Returned ptr to key SECURITY_STATUS SEC_FAR * Status // returned status ); SECURITY_STATUS SEC_ENTRY AcquireCredentialsHandleW( #if ISSP_MODE == 0 // For Kernel mode PSECURITY_STRING pPrincipal, PSECURITY_STRING pPackage, #else SEC_WCHAR SEC_FAR * pszPrincipal, // Name of principal SEC_WCHAR SEC_FAR * pszPackage, // Name of package #endif unsigned long fCredentialUse, // Flags indicating use void SEC_FAR * pvLogonId, // Pointer to logon ID void SEC_FAR * pAuthData, // Package specific data SEC_GET_KEY_FN pGetKeyFn, // Pointer to GetKey() func void SEC_FAR * pvGetKeyArgument, // Value to pass to GetKey() PCredHandle phCredential, // (out) Cred Handle PTimeStamp ptsExpiry // (out) Lifetime (optional) ); typedef SECURITY_STATUS (SEC_ENTRY * ACQUIRE_CREDENTIALS_HANDLE_FN_W)( #if ISSP_MODE == 0 PSECURITY_STRING, PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, SEC_WCHAR SEC_FAR *, #endif unsigned long, void SEC_FAR *, void SEC_FAR *, SEC_GET_KEY_FN, void SEC_FAR *, PCredHandle, PTimeStamp); SECURITY_STATUS SEC_ENTRY AcquireCredentialsHandleA( SEC_CHAR SEC_FAR * pszPrincipal, // Name of principal SEC_CHAR SEC_FAR * pszPackage, // Name of package unsigned long fCredentialUse, // Flags indicating use void SEC_FAR * pvLogonId, // Pointer to logon ID void SEC_FAR * pAuthData, // Package specific data SEC_GET_KEY_FN pGetKeyFn, // Pointer to GetKey() func void SEC_FAR * pvGetKeyArgument, // Value to pass to GetKey() PCredHandle phCredential, // (out) Cred Handle PTimeStamp ptsExpiry // (out) Lifetime (optional) ); typedef SECURITY_STATUS (SEC_ENTRY * ACQUIRE_CREDENTIALS_HANDLE_FN_A)( SEC_CHAR SEC_FAR *, SEC_CHAR SEC_FAR *, unsigned long, void SEC_FAR *, void SEC_FAR *, SEC_GET_KEY_FN, void SEC_FAR *, PCredHandle, PTimeStamp); #ifdef UNICODE # define AcquireCredentialsHandle AcquireCredentialsHandleW # define ACQUIRE_CREDENTIALS_HANDLE_FN ACQUIRE_CREDENTIALS_HANDLE_FN_W #else # define AcquireCredentialsHandle AcquireCredentialsHandleA # define ACQUIRE_CREDENTIALS_HANDLE_FN ACQUIRE_CREDENTIALS_HANDLE_FN_A #endif // !UNICODE SECURITY_STATUS SEC_ENTRY FreeCredentialsHandle( PCredHandle phCredential // Handle to free ); typedef SECURITY_STATUS (SEC_ENTRY * FREE_CREDENTIALS_HANDLE_FN)( PCredHandle ); //////////////////////////////////////////////////////////////////////// /// /// Context Management Functions /// //////////////////////////////////////////////////////////////////////// SECURITY_STATUS SEC_ENTRY InitializeSecurityContextW( PCredHandle phCredential, // Cred to base context PCtxtHandle phContext, // Existing context (OPT) #if ISSP_MODE == 0 PSECURITY_STRING pTargetName, #else SEC_WCHAR SEC_FAR * pszTargetName, // Name of target #endif unsigned long fContextReq, // Context Requirements unsigned long Reserved1, // Reserved, MBZ unsigned long TargetDataRep, // Data rep of target PSecBufferDesc pInput, // Input Buffers unsigned long Reserved2, // Reserved, MBZ PCtxtHandle phNewContext, // (out) New Context handle PSecBufferDesc pOutput, // (inout) Output Buffers unsigned long SEC_FAR * pfContextAttr, // (out) Context attrs PTimeStamp ptsExpiry // (out) Life span (OPT) ); typedef SECURITY_STATUS (SEC_ENTRY * INITIALIZE_SECURITY_CONTEXT_FN_W)( PCredHandle, PCtxtHandle, #if ISSP_MODE == 0 PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, #endif unsigned long, unsigned long, unsigned long, PSecBufferDesc, unsigned long, PCtxtHandle, PSecBufferDesc, unsigned long SEC_FAR *, PTimeStamp); SECURITY_STATUS SEC_ENTRY InitializeSecurityContextA( PCredHandle phCredential, // Cred to base context PCtxtHandle phContext, // Existing context (OPT) SEC_CHAR SEC_FAR * pszTargetName, // Name of target unsigned long fContextReq, // Context Requirements unsigned long Reserved1, // Reserved, MBZ unsigned long TargetDataRep, // Data rep of target PSecBufferDesc pInput, // Input Buffers unsigned long Reserved2, // Reserved, MBZ PCtxtHandle phNewContext, // (out) New Context handle PSecBufferDesc pOutput, // (inout) Output Buffers unsigned long SEC_FAR * pfContextAttr, // (out) Context attrs PTimeStamp ptsExpiry // (out) Life span (OPT) ); typedef SECURITY_STATUS (SEC_ENTRY * INITIALIZE_SECURITY_CONTEXT_FN_A)( PCredHandle, PCtxtHandle, SEC_CHAR SEC_FAR *, unsigned long, unsigned long, unsigned long, PSecBufferDesc, unsigned long, PCtxtHandle, PSecBufferDesc, unsigned long SEC_FAR *, PTimeStamp); #ifdef UNICODE # define InitializeSecurityContext InitializeSecurityContextW # define INITIALIZE_SECURITY_CONTEXT_FN INITIALIZE_SECURITY_CONTEXT_FN_W #else # define InitializeSecurityContext InitializeSecurityContextA # define INITIALIZE_SECURITY_CONTEXT_FN INITIALIZE_SECURITY_CONTEXT_FN_A #endif // !UNICODE SECURITY_STATUS SEC_ENTRY AcceptSecurityContext( PCredHandle phCredential, // Cred to base context PCtxtHandle phContext, // Existing context (OPT) PSecBufferDesc pInput, // Input buffer unsigned long fContextReq, // Context Requirements unsigned long TargetDataRep, // Target Data Rep PCtxtHandle phNewContext, // (out) New context handle PSecBufferDesc pOutput, // (inout) Output buffers unsigned long SEC_FAR * pfContextAttr, // (out) Context attributes PTimeStamp ptsExpiry // (out) Life span (OPT) ); typedef SECURITY_STATUS (SEC_ENTRY * ACCEPT_SECURITY_CONTEXT_FN)( PCredHandle, PCtxtHandle, PSecBufferDesc, unsigned long, unsigned long, PCtxtHandle, PSecBufferDesc, unsigned long SEC_FAR *, PTimeStamp); SECURITY_STATUS SEC_ENTRY CompleteAuthToken( PCtxtHandle phContext, // Context to complete PSecBufferDesc pToken // Token to complete ); typedef SECURITY_STATUS (SEC_ENTRY * COMPLETE_AUTH_TOKEN_FN)( PCtxtHandle, PSecBufferDesc); SECURITY_STATUS SEC_ENTRY ImpersonateSecurityContext( PCtxtHandle phContext // Context to impersonate ); typedef SECURITY_STATUS (SEC_ENTRY * IMPERSONATE_SECURITY_CONTEXT_FN)( PCtxtHandle); SECURITY_STATUS SEC_ENTRY RevertSecurityContext( PCtxtHandle phContext // Context from which to re ); typedef SECURITY_STATUS (SEC_ENTRY * REVERT_SECURITY_CONTEXT_FN)( PCtxtHandle); SECURITY_STATUS SEC_ENTRY QuerySecurityContextToken( PCtxtHandle phContext, void SEC_FAR * Token ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_SECURITY_CONTEXT_TOKEN_FN)( PCtxtHandle, void SEC_FAR *); SECURITY_STATUS SEC_ENTRY DeleteSecurityContext( PCtxtHandle phContext // Context to delete ); typedef SECURITY_STATUS (SEC_ENTRY * DELETE_SECURITY_CONTEXT_FN)( PCtxtHandle); SECURITY_STATUS SEC_ENTRY ApplyControlToken( PCtxtHandle phContext, // Context to modify PSecBufferDesc pInput // Input token to apply ); typedef SECURITY_STATUS (SEC_ENTRY * APPLY_CONTROL_TOKEN_FN)( PCtxtHandle, PSecBufferDesc); SECURITY_STATUS SEC_ENTRY QueryContextAttributesW( PCtxtHandle phContext, // Context to query unsigned long ulAttribute, // Attribute to query void SEC_FAR * pBuffer // Buffer for attributes ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_CONTEXT_ATTRIBUTES_FN_W)( PCtxtHandle, unsigned long, void SEC_FAR *); SECURITY_STATUS SEC_ENTRY QueryContextAttributesA( PCtxtHandle phContext, // Context to query unsigned long ulAttribute, // Attribute to query void SEC_FAR * pBuffer // Buffer for attributes ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_CONTEXT_ATTRIBUTES_FN_A)( PCtxtHandle, unsigned long, void SEC_FAR *); #ifdef UNICODE # define QueryContextAttributes QueryContextAttributesW # define QUERY_CONTEXT_ATTRIBUTES_FN QUERY_CONTEXT_ATTRIBUTES_FN_W #else # define QueryContextAttributes QueryContextAttributesA # define QUERY_CONTEXT_ATTRIBUTES_FN QUERY_CONTEXT_ATTRIBUTES_FN_A #endif // !UNICODE SECURITY_STATUS SEC_ENTRY QueryCredentialsAttributesW( PCredHandle phCredential, // Credential to query unsigned long ulAttribute, // Attribute to query void SEC_FAR * pBuffer // Buffer for attributes ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_CREDENTIALS_ATTRIBUTES_FN_W)( PCredHandle, unsigned long, void SEC_FAR *); SECURITY_STATUS SEC_ENTRY QueryCredentialsAttributesA( PCredHandle phCredential, // Credential to query unsigned long ulAttribute, // Attribute to query void SEC_FAR * pBuffer // Buffer for attributes ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_CREDENTIALS_ATTRIBUTES_FN_A)( PCredHandle, unsigned long, void SEC_FAR *); #ifdef UNICODE # define QueryCredentialsAttributes QueryCredentialsAttributesW # define QUERY_CREDENTIALS_ATTRIBUTES_FN QUERY_CREDENTIALS_ATTRIBUTES_FN_W #else # define QueryCredentialsAttributes QueryCredentialsAttributesA # define QUERY_CREDENTIALS_ATTRIBUTES_FN QUERY_CREDENTIALS_ATTRIBUTES_FN_A #endif // !UNICODE SECURITY_STATUS SEC_ENTRY FreeContextBuffer( void SEC_FAR * pvContextBuffer // buffer to free ); typedef SECURITY_STATUS (SEC_ENTRY * FREE_CONTEXT_BUFFER_FN)( void SEC_FAR *); /////////////////////////////////////////////////////////////////// //// //// Message Support API //// ////////////////////////////////////////////////////////////////// SECURITY_STATUS SEC_ENTRY MakeSignature( PCtxtHandle phContext, // Context to use unsigned long fQOP, // Quality of Protection PSecBufferDesc pMessage, // Message to sign unsigned long MessageSeqNo // Message Sequence Num. ); typedef SECURITY_STATUS (SEC_ENTRY * MAKE_SIGNATURE_FN)( PCtxtHandle, unsigned long, PSecBufferDesc, unsigned long); SECURITY_STATUS SEC_ENTRY VerifySignature( PCtxtHandle phContext, // Context to use PSecBufferDesc pMessage, // Message to verify unsigned long MessageSeqNo, // Sequence Num. unsigned long SEC_FAR * pfQOP // QOP used ); typedef SECURITY_STATUS (SEC_ENTRY * VERIFY_SIGNATURE_FN)( PCtxtHandle, PSecBufferDesc, unsigned long, unsigned long SEC_FAR *); /////////////////////////////////////////////////////////////////////////// //// //// Misc. //// /////////////////////////////////////////////////////////////////////////// SECURITY_STATUS SEC_ENTRY EnumerateSecurityPackagesW( unsigned long SEC_FAR * pcPackages, // Receives num. packages PSecPkgInfoW SEC_FAR * ppPackageInfo // Receives array of info ); typedef SECURITY_STATUS (SEC_ENTRY * ENUMERATE_SECURITY_PACKAGES_FN_W)( unsigned long SEC_FAR *, PSecPkgInfoW SEC_FAR *); SECURITY_STATUS SEC_ENTRY EnumerateSecurityPackagesA( unsigned long SEC_FAR * pcPackages, // Receives num. packages PSecPkgInfoA SEC_FAR * ppPackageInfo // Receives array of info ); typedef SECURITY_STATUS (SEC_ENTRY * ENUMERATE_SECURITY_PACKAGES_FN_A)( unsigned long SEC_FAR *, PSecPkgInfoA SEC_FAR *); #ifdef UNICODE # define EnumerateSecurityPackages EnumerateSecurityPackagesW # define ENUMERATE_SECURITY_PACKAGES_FN ENUMERATE_SECURITY_PACKAGES_FN_W #else # define EnumerateSecurityPackages EnumerateSecurityPackagesA # define ENUMERATE_SECURITY_PACKAGES_FN ENUMERATE_SECURITY_PACKAGES_FN_A #endif // !UNICODE SECURITY_STATUS SEC_ENTRY QuerySecurityPackageInfoW( #if ISSP_MODE == 0 PSECURITY_STRING pPackageName, #else SEC_WCHAR SEC_FAR * pszPackageName, // Name of package #endif PSecPkgInfoW SEC_FAR *ppPackageInfo // Receives package info ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_SECURITY_PACKAGE_INFO_FN_W)( #if ISSP_MODE == 0 PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, #endif PSecPkgInfoW SEC_FAR *); SECURITY_STATUS SEC_ENTRY QuerySecurityPackageInfoA( SEC_CHAR SEC_FAR * pszPackageName, // Name of package PSecPkgInfoA SEC_FAR *ppPackageInfo // Receives package info ); typedef SECURITY_STATUS (SEC_ENTRY * QUERY_SECURITY_PACKAGE_INFO_FN_A)( SEC_CHAR SEC_FAR *, PSecPkgInfoA SEC_FAR *); #ifdef UNICODE # define QuerySecurityPackageInfo QuerySecurityPackageInfoW # define QUERY_SECURITY_PACKAGE_INFO_FN QUERY_SECURITY_PACKAGE_INFO_FN_W #else # define QuerySecurityPackageInfo QuerySecurityPackageInfoA # define QUERY_SECURITY_PACKAGE_INFO_FN QUERY_SECURITY_PACKAGE_INFO_FN_A #endif // !UNICODE #if ISSP_MODE == 0 // // Deferred mode calls for rdr // SECURITY_STATUS SEC_ENTRY DeleteSecurityContextDefer( PCtxtHandle phContext); SECURITY_STATUS SEC_ENTRY FreeCredentialsHandleDefer( PCredHandle phCreds); #endif typedef enum _SecDelegationType { SecFull, SecService, SecTree, SecDirectory, SecObject } SecDelegationType, * PSecDelegationType; SECURITY_STATUS SEC_ENTRY DelegateSecurityContext( PCtxtHandle phContext, // IN Active context to delegate #if ISSP_MODE == 0 PSECURITY_STRING pTarget, // IN Target path #else SEC_CHAR SEC_FAR * pszTarget, #endif SecDelegationType DelegationType, // IN Type of delegation PTimeStamp pExpiry, // IN OPTIONAL time limit PSecBuffer pPackageParameters, // IN OPTIONAL package specific PSecBufferDesc pOutput); // OUT Token for applycontroltoken. /////////////////////////////////////////////////////////////////////////// //// //// Proxies //// /////////////////////////////////////////////////////////////////////////// // // Proxies are only available on NT platforms // #ifdef NT_INCLUDED typedef enum _SSPI_PROXY_CLASS_TAG { SspiProxyFull, SspiProxyService, SspiProxyTree, SspiProxyDirectory } _SSPI_PROXY_CLASS; #ifndef SSPI_PROXY_CLASS #define SSPI_PROXY_CLASS _SSPI_PROXY_CLASS #endif #ifndef _DWORD_DEFINED #define _DWORD_DEFINED typedef unsigned long DWORD; #endif // !_DWORD_DEFINED // // proxy access rights // #define PROXY_READ 0x01 // reading of proxy data #define PROXY_WRITE 0x02 // writing of proxy data #define PROXY_INVOKE 0x04 // invoking an existing proxy #define PROXY_ALL_ACCESS ( READ_CONTROL | WRITE_DAC | DELETE | 0x07 ) #define PROXY_GENERIC_READ PROXY_READ #define PROXY_GENERIC_WRITE PROXY_WRITE #define PROXY_GENERIC_EXECUTE PROXY_INVOKE #define PROXY_GENERIC_ALL ( PROXY_READ | \ PROXY_WRITE | \ PROXY_INVOKE | \ WRITE_DAC | \ READ_CONTROL | \ DELETE ) #define GRANTOR_DEFAULT_ACCESS ( WRITE_DAC | \ READ_CONTROL | \ DELETE | \ PROXY_READ | \ PROXY_WRITE ) #define GRANTEE_DEFAULT_ACCESS ( PROXY_INVOKE ) #define ADMIN_DEFAULT_ACCESS ( WRITE_DAC | \ READ_CONTROL | \ DELETE | \ PROXY_READ ) // // Types available for use with proxy APIs // typedef enum _SECURITY_INFORMATION_TYPE { GranteeList, // simple list of grantees' DN ExplicitAccess, // list of EXPLICIT_ACCESSes SecurityDescriptor // SECURITY_DESCRIPTOR } SECURITY_INFORMATION_TYPE; typedef struct _SECURITY_ACCESS_INFO { SECURITY_INFORMATION_TYPE ulType; VOID SEC_FAR * pvData; } SECURITY_ACCESS_INFO, SEC_FAR * PSECURITY_ACCESS_INFO; #if 0 #include typedef struct _PROXY_ACCESS_LIST { ULONG cAccesses; EXPLICIT_ACCESS SEC_FAR * pAccesses; } PROXY_ACCESS_LIST, SEC_FAR * PPROXY_ACCESS_LIST; #endif typedef struct _PROXY_GRANTEE_LIST { ULONG cGrantees; #if ISSP_MODE == 0 PSECURITY_STRING * ppssGrantees; #else SEC_WCHAR SEC_FAR * SEC_FAR * ppwszGrantees; #endif } PROXY_GRANTEE_LIST, SEC_FAR * PPROXY_GRANTEE_LIST; typedef struct _PROXY_REFERENCE { GUID gIssuingDomain; GUID gProxyId; } PROXY_REFERENCE, SEC_FAR * PPROXY_REFERENCE; // // GrantProxy API // SECURITY_STATUS SEC_ENTRY GrantProxyW( PCredHandle phCredential, // (in) Handle to base proxy on #if ISSP_MODE == 0 PSECURITY_STRING pssProxyName, // (in optional) proxy name #else SEC_WCHAR SEC_FAR * pwszProxyName, #endif SSPI_PROXY_CLASS ProxyClass, // (in) class requested #if ISSP_MODE == 0 PSECURITY_STRING pssTarget, #else SEC_WCHAR SEC_FAR * pwszTarget, // (in) Target of proxy #endif unsigned long ContainerMask, // (in) Access mask unsigned long ObjectMask, // (in) Access mask PTimeStamp tsExpiry, // (in) time proxy expires PSECURITY_ACCESS_INFO pAccessInfo, // (in) grantees and accesses PPROXY_REFERENCE phProxy // (out) proxy handle ); typedef SECURITY_STATUS (SEC_ENTRY * GRANT_PROXY_FN_W)( PCredHandle, #if ISSP_MODE == 0 PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, #endif SSPI_PROXY_CLASS, #if ISSP_MODE == 0 PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, #endif unsigned long, unsigned long, PTimeStamp, PSECURITY_ACCESS_INFO, PPROXY_REFERENCE ); SECURITY_STATUS SEC_ENTRY GrantProxyA( PCredHandle phCredential, // (in) Handle to base proxy on SEC_CHAR SEC_FAR * pszProxyName, // (in optional) proxy name SSPI_PROXY_CLASS ProxyClass, // (in) class requested SEC_CHAR SEC_FAR * pszTarget, // (in) Target of proxy unsigned long ContainerMask, // (in) Access mask unsigned long ObjectMask, // (in) Access mask PTimeStamp ptsExpiry, // (in) time proxy expires PSECURITY_ACCESS_INFO pAccessInfo, // (in) grantees and accesses PPROXY_REFERENCE phProxy // (out) proxy handle ); typedef SECURITY_STATUS (SEC_ENTRY * GRANT_PROXY_FN_A)( PCredHandle, SEC_CHAR SEC_FAR *, SSPI_PROXY_CLASS, SEC_CHAR SEC_FAR *, unsigned long, unsigned long, PTimeStamp, PSECURITY_ACCESS_INFO, PPROXY_REFERENCE ); #ifdef UNICODE # define GrantProxy GrantProxyW # define GRANT_PROXY_FN GRANT_PROXY_FN_W #else # define GrantProxy GrantProxyA # define GRANT_PROXY_FN GRANT_PROXY_FN_A #endif // !UNICODE // // RevokeProxy API // SECURITY_STATUS SEC_ENTRY RevokeProxyW( PCredHandle phCredential, // (in) credentials PPROXY_REFERENCE phProxy, // (in) proxy handle #if ISSP_MODE == 0 PSECURITY_STRING pssProxyName #else SEC_WCHAR SEC_FAR * pwszProxyName // (in optional) Proxy name #endif ); typedef SECURITY_STATUS (SEC_ENTRY * REVOKE_PROXY_FN_W)( PCredHandle, PPROXY_REFERENCE, #if ISSP_MODE == 0 PSECURITY_STRING #else SEC_WCHAR SEC_FAR * #endif ); SECURITY_STATUS SEC_ENTRY RevokeProxyA( PCredHandle phCredential, // (in) credentials PPROXY_REFERENCE phProxy, // (in) proxy handle SEC_CHAR SEC_FAR * pszProxyName // (in) proxy name ); typedef SECURITY_STATUS (SEC_ENTRY * REVOKE_PROXY_FN_A)( PCredHandle, PPROXY_REFERENCE, SEC_CHAR SEC_FAR * ); #ifdef UNICODE # define RevokeProxy RevokeProxyW # define REVOKE_PROXY_FN REVOKE_PROXY_FN_W #else # define RevokeProxy RevokeProxyA # define REVOKE_PROXY_FN REVOKE_PROXY_FN_A #endif // !UNICODE // // InvokeProxy API // SECURITY_STATUS SEC_ENTRY InvokeProxyW( PCredHandle phCredential, // (in) handle to base proxy on PPROXY_REFERENCE phProxy, // (in) proxy handle #if ISSP_MODE == 0 PSECURITY_STRING pssProxyName, #else SEC_WCHAR SEC_FAR * pwszProxyName, // (in optional) Proxy name #endif PCtxtHandle phContext // (out) security context ); typedef SECURITY_STATUS (SEC_ENTRY * INVOKE_PROXY_FN_W)( PCredHandle, PPROXY_REFERENCE, #if ISSP_MODE == 0 PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, #endif PCtxtHandle ); SECURITY_STATUS SEC_ENTRY InvokeProxyA( PCredHandle phCredential, // (in) handle to base proxy on PPROXY_REFERENCE phProxy, // (in) proxy handle SEC_CHAR SEC_FAR * pszProxyName, // (in optional) Proxy name PCtxtHandle phContext // (out) security context ); typedef SECURITY_STATUS (SEC_ENTRY * INVOKE_PROXY_FN_A)( PCredHandle, PPROXY_REFERENCE, SEC_CHAR SEC_FAR *, PCtxtHandle ); #ifdef UNICODE # define InvokeProxy InvokeProxyW # define INVOKE_PROXY_FN INVOKE_PROXY_FN_W #else # define InvokeProxy InvokeProxyA # define INVOKE_PROXY_FN INVOKE_PROXY_FN_A #endif // !UNICODE // // RenewProxy API // SECURITY_STATUS SEC_ENTRY RenewProxyW( PCredHandle phCredential, // (in) credentials PPROXY_REFERENCE phProxy, // (in) proxy handle #if ISSP_MODE == 0 PSECURITY_STRING pssProxyName, #else SEC_WCHAR SEC_FAR * pwszProxyName, // (in) proxy name #endif PTimeStamp ptsExpiry // (in) new absolute expiry ); typedef SECURITY_STATUS (SEC_ENTRY * RENEW_PROXY_FN_W)( PCredHandle, PPROXY_REFERENCE, #if ISSP_MODE == 0 PSECURITY_STRING, #else SEC_WCHAR SEC_FAR *, #endif PTimeStamp ); SECURITY_STATUS SEC_ENTRY RenewProxyA( PCredHandle phCredential, // (in) credentials PPROXY_REFERENCE phProxy, // (in) proxy handle SEC_CHAR SEC_FAR * pszProxyName, // (in) proxy name PTimeStamp ptsExpiry // (in) new expiry time ); typedef SECURITY_STATUS (SEC_ENTRY * RENEW_PROXY_FN_A)( PCredHandle, PPROXY_REFERENCE, SEC_CHAR SEC_FAR *, PTimeStamp ); #ifdef UNICODE # define RenewProxy RenewProxyW # define RENEW_PROXY_FN RENEW_PROXY_FN_W #else # define RenewProxy RenewProxyA # define RENEW_PROXY_FN RENEW_PROXY_FN_A #endif // !UNICODE #endif // NT_INCLUDED /////////////////////////////////////////////////////////////////////////////// //// //// Fast access for RPC: //// /////////////////////////////////////////////////////////////////////////////// #define SECURITY_ENTRYPOINTW SEC_TEXT("InitSecurityInterfaceW") #define SECURITY_ENTRYPOINTA SEC_TEXT("InitSecurityInterfaceA") #define SECURITY_ENTRYPOINT16 "INITSECURITYINTERFACEA" #ifdef SECURITY_WIN32 # ifdef UNICODE # define SECURITY_ENTRYPOINT SECURITY_ENTRYPOINTW # else // UNICODE # define SECURITY_ENTRYPOINT SECURITY_ENTRYPOINTA # endif // UNICODE #else // SECURITY_WIN32 # define SECURITY_ENTRYPOINT SECURITY_ENTRYPOINT16 #endif // SECURITY_WIN32 typedef struct _SECURITY_FUNCTION_TABLE_W { unsigned long dwVersion; ENUMERATE_SECURITY_PACKAGES_FN_W EnumerateSecurityPackagesW; void SEC_FAR * Reserved1; // QUERY_CREDENTIALS_ATTRIBUTES_FN_W QueryCredentialsAttributesW; ACQUIRE_CREDENTIALS_HANDLE_FN_W AcquireCredentialsHandleW; FREE_CREDENTIALS_HANDLE_FN FreeCredentialHandle; void SEC_FAR * Reserved2; INITIALIZE_SECURITY_CONTEXT_FN_W InitializeSecurityContextW; ACCEPT_SECURITY_CONTEXT_FN AcceptSecurityContext; COMPLETE_AUTH_TOKEN_FN CompleteAuthToken; DELETE_SECURITY_CONTEXT_FN DeleteSecurityContext; APPLY_CONTROL_TOKEN_FN ApplyControlToken; QUERY_CONTEXT_ATTRIBUTES_FN_W QueryContextAttributesW; IMPERSONATE_SECURITY_CONTEXT_FN ImpersonateSecurityContext; REVERT_SECURITY_CONTEXT_FN RevertSecurityContext; MAKE_SIGNATURE_FN MakeSignature; VERIFY_SIGNATURE_FN VerifySignature; FREE_CONTEXT_BUFFER_FN FreeContextBuffer; QUERY_SECURITY_PACKAGE_INFO_FN_W QuerySecurityPackageInfoW; void SEC_FAR * Reserved3; void SEC_FAR * Reserved4; #ifdef NT_INCLUDED GRANT_PROXY_FN_W GrantProxyW; REVOKE_PROXY_FN_W RevokeProxy; INVOKE_PROXY_FN_W InvokeProxy; RENEW_PROXY_FN_W RenewProxy; #else void SEC_FAR * GrantProxyW; void SEC_FAR * RevokeProxy; void SEC_FAR * InvokeProxy; void SEC_FAR * RenewProxy; #endif QUERY_SECURITY_CONTEXT_TOKEN_FN QuerySecurityContextToken; } SecurityFunctionTableW, SEC_FAR * PSecurityFunctionTableW; typedef struct _SECURITY_FUNCTION_TABLE_A { unsigned long dwVersion; ENUMERATE_SECURITY_PACKAGES_FN_A EnumerateSecurityPackagesA; void SEC_FAR * Reserved1; // QUERY_CREDENTIALS_ATTRIBUTES_FN_A QueryCredentialsAttributesA; ACQUIRE_CREDENTIALS_HANDLE_FN_A AcquireCredentialsHandleA; FREE_CREDENTIALS_HANDLE_FN FreeCredentialHandle; void SEC_FAR * Reserved2; INITIALIZE_SECURITY_CONTEXT_FN_A InitializeSecurityContextA; ACCEPT_SECURITY_CONTEXT_FN AcceptSecurityContext; COMPLETE_AUTH_TOKEN_FN CompleteAuthToken; DELETE_SECURITY_CONTEXT_FN DeleteSecurityContext; APPLY_CONTROL_TOKEN_FN ApplyControlToken; QUERY_CONTEXT_ATTRIBUTES_FN_A QueryContextAttributesA; IMPERSONATE_SECURITY_CONTEXT_FN ImpersonateSecurityContext; REVERT_SECURITY_CONTEXT_FN RevertSecurityContext; MAKE_SIGNATURE_FN MakeSignature; VERIFY_SIGNATURE_FN VerifySignature; FREE_CONTEXT_BUFFER_FN FreeContextBuffer; QUERY_SECURITY_PACKAGE_INFO_FN_A QuerySecurityPackageInfoA; void SEC_FAR * Reserved3; void SEC_FAR * Reserved4; #ifdef NT_INCLUDED GRANT_PROXY_FN_A GrantProxyA; REVOKE_PROXY_FN_A RevokeProxy; INVOKE_PROXY_FN_A InvokeProxy; RENEW_PROXY_FN_A RenewProxy; #else void SEC_FAR * GrantProxyA; void SEC_FAR * RevokeProxy; void SEC_FAR * InvokeProxy; void SEC_FAR * RenewProxy; #endif QUERY_SECURITY_CONTEXT_TOKEN_FN QuerySecurityContextToken; } SecurityFunctionTableA, SEC_FAR * PSecurityFunctionTableA; #ifdef UNICODE # define SecurityFunctionTable SecurityFunctionTableW # define PSecurityFunctionTable PSecurityFunctionTableW #else # define SecurityFunctionTable SecurityFunctionTableA # define PSecurityFunctionTable PSecurityFunctionTableA #endif // !UNICODE #define SECURITY_ #define SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION 1 PSecurityFunctionTableA SEC_ENTRY InitSecurityInterfaceA( void ); typedef PSecurityFunctionTableA (SEC_ENTRY * INIT_SECURITY_INTERFACE_A)(void); PSecurityFunctionTableW SEC_ENTRY InitSecurityInterfaceW( void ); typedef PSecurityFunctionTableW (SEC_ENTRY * INIT_SECURITY_INTERFACE_W)(void); #ifdef UNICODE # define InitSecurityInterface InitSecurityInterfaceW # define INIT_SECURITY_INTERFACE INIT_SECURITY_INTERFACE_W #else # define InitSecurityInterface InitSecurityInterfaceA # define INIT_SECURITY_INTERFACE INIT_SECURITY_INTERFACE_A #endif // !UNICODE SECURITY_STATUS SEC_ENTRY AddSecurityPackageA( SEC_CHAR SEC_FAR * pszPackageName, void SEC_FAR * Reserved ); SECURITY_STATUS SEC_ENTRY AddSecurityPackageW( SEC_WCHAR SEC_FAR * pszPackageName, void SEC_FAR * Reserved ); #ifdef UNICODE #define AddSecurityPackage AddSecurityPackageW #else #define AddSecurityPackage AddSecurityPackageA #endif SECURITY_STATUS SEC_ENTRY DeleteSecurityPackageA( SEC_CHAR SEC_FAR * pszPackageName ); SECURITY_STATUS SEC_ENTRY DeleteSecurityPackageW( SEC_WCHAR SEC_FAR * pszPackageName ); #ifdef UNICODE #define DeleteSecurityPackage DeleteSecurityPackageW #else #define DeleteSecurityPackage DeleteSecurityPackageA #endif #ifdef SECURITY_DOS #pragma warning(default:4147) #endif #endif // __SSPI_H__