From 6b80e9be6425e342b73859dd68655444dc49c56c Mon Sep 17 00:00:00 2001
From: Günther Deschner <gd@samba.org>
Date: Mon, 12 Jan 2009 13:45:38 +0100
Subject: eventlog: some fixes for eventlog_Record struct.

* make reserved field always have value 0x654c664C ("eLfL").
* add missing sid entry
* add padding and 2nd size counter.
* use time_t in eventlog_Record.

Guenther
---
 librpc/idl/eventlog.idl | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

(limited to 'librpc')

diff --git a/librpc/idl/eventlog.idl b/librpc/idl/eventlog.idl
index b6bc92a016..584d6717a0 100644
--- a/librpc/idl/eventlog.idl
+++ b/librpc/idl/eventlog.idl
@@ -34,10 +34,10 @@ import "lsa.idl", "security.idl";
 	
 	typedef [public] struct { 
 		uint32 size;
-		uint32 reserved;
+		[value(0x654c664C)] uint32 reserved; /* "eLfL" */
 		uint32 record_number;
-		uint32 time_generated;
-		uint32 time_written;
+		time_t time_generated;
+		time_t time_written;
 		uint32 event_id;
 		uint16 event_type;
 		uint16 num_of_strings;
@@ -45,14 +45,17 @@ import "lsa.idl", "security.idl";
 		uint16 reserved_flags;
 		uint32 closing_record_number;
 		uint32 stringoffset;
-		uint32 sid_length;
+		[value(ndr_size_dom_sid0(&sid, ndr->flags))] uint32 sid_size;
 		uint32 sid_offset;
 		uint32 data_length;
 		uint32 data_offset;
 		nstring source_name;
 		nstring computer_name;
+		[subcontext(0),subcontext_size(sid_size)] dom_sid0 sid;
 		nstring strings[num_of_strings];
 		astring raw_data;
+		[flag(NDR_ALIGN4)] DATA_BLOB _padding;
+		[value(size)] uint32 size2;
 	} eventlog_Record;
 
 	/******************/
-- 
cgit