r3686: The results of some work on the NETLOGON pipe:

Break out the samsync tests from RPC-NETLOGON into a new RPC-SAMSYNC,
that will cross-verify all the values.

Add support for the way netlogon credentials are shared between the
pipe that sets up schannel and the pipe that is encrypted with it.

Test this support, by calling both NETLOGON and SAMR operations in the
RPC-SCHANNEL test.

Move some of the Netlogon NEG flags into the .idl, now we have an idea
what a few of them really are.

Rename the sam_pwd_hash into a name that has meaning (all other crypto
functions were renamed in Samba4 ages ago).

Break out NTLMv2 functionality for operation on the NT hash - I intend
to do NTLMv2 logins in the samsync test in future, and naturally I
only have the hash.

Andrew Bartlett
(This used to be commit 6e6cc6fb9842113a1b0c7f6904dac709b320a6e5)

1 files changed, 22 insertions, 10 deletions

diff --git a/source4/librpc/idl/netlogon.idl b/source4/librpc/idl/netlogon.idl
index f6677d9621..f55049d30e 100644
--- a/source4/librpc/idl/netlogon.idl
+++ b/source4/librpc/idl/netlogon.idl
@@ -285,6 +285,11 @@ interface netlogon
 	/*****************/
 	/* Function 0x07 */
 
+	/* SAM database types */
+	const int SAM_DATABASE_DOMAIN  = 0x00; /* Domain users and groups */
+	const int SAM_DATABASE_BUILTIN = 0x01; /* BUILTIN users and groups */
+	const int SAM_DATABASE_PRIVS   = 0x02; /* Privileges */
+
 	typedef struct {
 		unistr *account_name;
 		netr_String unknown1;
@@ -313,19 +318,19 @@ interface netlogon
 		netr_String logon_script;
 		netr_String description;
 		netr_String workstations;
-		NTTIME LastLogon;
-		NTTIME LastLogoff;
+		NTTIME last_logon;
+		NTTIME last_logoff;
 		samr_LogonHours logon_hours;
 		uint16 bad_pw_count;
 		uint16 logon_count;
-		NTTIME PwLastSet;
-		NTTIME AccountExpires;
-		uint32 AccountControl;
-		samr_Password lmpw;
-		samr_Password ntpw;
-		bool8 NTPwPresent;
-		bool8 LMPwPresent;
-		bool8 PwExpired;
+		NTTIME last_password_change;
+		NTTIME acct_expiry;
+		uint32 acct_flags;
+		samr_Password lmpassword;
+		samr_Password ntpassword;
+		bool8 ntpassword_present;
+		bool8 lmpassword_present;
+		bool8 password_expired;
 		netr_String UserComment;
 		netr_String Parameters;
 		uint16 CountryCode;
@@ -778,6 +783,13 @@ interface netlogon
 		);
 
 
+	/* If this flag is not set, then the passwords and LM session keys are
+	 * encrypted with DES calls.  (And the user session key is
+	 * unencrypted) */ 
+	const int NETLOGON_NEG_ARCFOUR  = 0x00000004;
+	const int NETLOGON_NEG_128BIT   = 0x00004000;
+	const int NETLOGON_NEG_SCHANNEL = 0x40000000;
+
 	/*****************/
 	/* Function 0x0F */