ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: [Ethereal-dev] [packet-dcerpc-lsa.c] operations names

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jean-Baptiste Marchand <Jean-Baptiste.Marchand@xxxxxx>
Date: Sun, 28 Sep 2003 21:20:42 +0200
Hello,

attached patches add names for all operations of W2K3 version of LSARPC
MSRPC interface.

Jean-Baptiste Marchand
-- 
Jean-Baptiste.Marchand@xxxxxx
HSC - http://www.hsc.fr/
Index: packet-dcerpc-lsa.c
===================================================================
RCS file: /cvsroot/ethereal/packet-dcerpc-lsa.c,v
retrieving revision 1.90
diff -u -r1.90 packet-dcerpc-lsa.c
--- packet-dcerpc-lsa.c	23 Sep 2003 12:06:19 -0000	1.90
+++ packet-dcerpc-lsa.c	28 Sep 2003 19:17:46 -0000
@@ -3797,7 +3797,7 @@
 }
 
 static int
-lsa_dissect_lsafunction_38_rqst(tvbuff_t *tvb, int offset,
+lsa_dissect_lsartestcall_rqst(tvbuff_t *tvb, int offset,
 	packet_info *pinfo, proto_tree *tree, char *drep)
 {
 	/* [in] LSA_HANDLE handle */
@@ -3818,7 +3818,7 @@
 
 
 static int
-lsa_dissect_lsafunction_38_reply(tvbuff_t *tvb, int offset,
+lsa_dissect_lsartestcall_reply(tvbuff_t *tvb, int offset,
 	packet_info *pinfo, proto_tree *tree, char *drep)
 {
 	/* [out, ref] LSA_SECURITY_DESCRIPTOR **psd) */
@@ -3833,7 +3833,7 @@
 }
 
 static int
-lsa_dissect_lsafunction_3b_rqst(tvbuff_t *tvb, int offset,
+lsa_dissect_lsarcreatetrusteddomainex2_rqst(tvbuff_t *tvb, int offset,
 	packet_info *pinfo, proto_tree *tree, char *drep)
 {
 	/* [in] LSA_HANDLE hnd */
@@ -3859,7 +3859,7 @@
 
 
 static int
-lsa_dissect_lsafunction_3b_reply(tvbuff_t *tvb, int offset,
+lsa_dissect_lsarcreatetrusteddomainex2_reply(tvbuff_t *tvb, int offset,
 	packet_info *pinfo, proto_tree *tree, char *drep)
 {
 	/* [out] LSA_HANDLE *h2) */
@@ -4009,7 +4009,7 @@
 	{ LSA_LSAROPENPOLICY2, "LsarOpenPolicy2",
 		lsa_dissect_lsaropenpolicy2_rqst,
 		lsa_dissect_lsaropenpolicy2_reply },
-	{ LSA_LSARGETUSERNAME, "LsarGetUsername",
+	{ LSA_LSARGETUSERNAME, "LsarGetUserName",
 		lsa_dissect_lsargetusername_rqst,
 		lsa_dissect_lsargetusername_reply },
 	{ LSA_LSARQUERYINFORMATIONPOLICY2, "LsarQueryInformationPolicy2",
@@ -4042,18 +4042,47 @@
 	{ LSA_LSAROPENTRUSTEDDOMAINBYNAME, "LsarOpenTrustedDomainByName",
 		lsa_dissect_lsaropentrusteddomainbyname_rqst,
 		lsa_dissect_lsaropentrusteddomainbyname_reply },
-	{ LSA_LSAFUNCTION_38, "LSAFUNCTION_38",
-		lsa_dissect_lsafunction_38_rqst,
-		lsa_dissect_lsafunction_38_reply },
+	{ LSA_LSARTESTCALL, "LsarTestCall",
+		lsa_dissect_lsartestcall_rqst,
+		lsa_dissect_lsartestcall_reply },
 	{ LSA_LSARLOOKUPSIDS2, "LsarLookupSids2",
 		lsa_dissect_lsarlookupsids2_rqst,
 		lsa_dissect_lsarlookupsids2_reply },
 	{ LSA_LSARLOOKUPNAMES2, "LsarLookupNames2",
 		lsa_dissect_lsarlookupnames2_rqst,
 		lsa_dissect_lsarlookupnames2_reply },
-	{ LSA_LSAFUNCTION_3B, "LSAFUNCTION_3B",
-		lsa_dissect_lsafunction_3b_rqst,
-		lsa_dissect_lsafunction_3b_reply },
+	{ LSA_LSARCREATETRUSTEDDOMAINEX2, "LsarCreateTrustedDomainEx2",
+		lsa_dissect_lsarcreatetrusteddomainex2_rqst,
+		lsa_dissect_lsarcreatetrusteddomainex2_reply },
+	{ LSA_CREDRWRITE, "CredrWrite", NULL, NULL },
+	{ LSA_CREDRREAD, "CredrRead", NULL, NULL },
+	{ LSA_CREDRENUMERATE, "CredrEnumerate", NULL, NULL },
+	{ LSA_CREDRWRITEDOMAINCREDENTIALS, "CredrWriteDomainCredentials", 
+	  NULL, NULL },
+	{ LSA_CREDRREADDOMAINCREDENTIALS, "CredrReadDomainCredentials", 
+	  NULL, NULL },
+	{ LSA_CREDRDELETE, "CredrDelete", NULL, NULL },
+	{ LSA_CREDRGETTARGETINFO, "CredrGetTargetInfo", NULL, NULL },
+	{ LSA_CREDRPROFILELOADED, "CredrProfileLoaded", NULL, NULL },
+	{ LSA_LSARLOOKUPNAMES3, "LsarLookupNames3", NULL, NULL },
+	{ LSA_CREDRGETSESSIONTYPES, "CredrGetSessionTypes", NULL, NULL },
+	{ LSA_LSARREGISTERAUDITEVENT, "LsarRegisterAuditEvent", NULL, NULL },
+	{ LSA_LSARGENAUDITEVENT, "LsarGenAuditEvent", NULL, NULL },
+	{ LSA_LSARUNREGISTERAUDITEVENT, "LsarUnregisterAuditEvent", NULL, NULL},
+	{ LSA_LSARQUERYFORESTTRUSTINFORMATION,
+	  "LsarQueryForestTrustInformation", NULL, NULL },
+	{ LSA_LSARSETFORESTTRUSTINFORMATION, "LsarSetForestTrustInformation",
+	  NULL, NULL },
+	{ LSA_CREDRRENAME, "CredrRename", NULL, NULL },
+	{ LSA_LSARLOOKUPSIDS3, "LsarLookupSids3", NULL, NULL },
+	{ LSA_LSARLOOKUPNAMES4, "LsarLookupNames4", NULL, NULL },
+	{ LSA_LSAROPENPOLICYSCE, "LsarOpenPolicySce", NULL, NULL },
+	{ LSA_LSARADTREGISTERSECURITYEVENTSOURCE,
+            "LsarAdtRegisterSecurityEventSource", NULL, NULL },
+	{ LSA_LSARADTUNREGISTERSECURITYEVENTSOURCE, 
+	   "LsarAdtUnregisterSecurityEventSource", NULL, NULL },
+	{ LSA_LSARADTREPORTSECURITYEVENT, "LsarAdtReportSecurityEvent",
+	  NULL, NULL },
 	{0, NULL, NULL, NULL}
 };
 
Index: packet-dcerpc-lsa.h
===================================================================
RCS file: /cvsroot/ethereal/packet-dcerpc-lsa.h,v
retrieving revision 1.11
diff -u -r1.11 packet-dcerpc-lsa.h
--- packet-dcerpc-lsa.h	23 Sep 2003 12:06:20 -0000	1.11
+++ packet-dcerpc-lsa.h	28 Sep 2003 19:17:55 -0000
@@ -26,66 +26,88 @@
 #ifndef __PACKET_DCERPC_LSA_H
 #define __PACKET_DCERPC_LSA_H
 
-#define LSA_LSARCLOSE	0x00
-#define LSA_LSARDELETE	0x01
-#define LSA_LSARENUMERATEPRIVILEGES	0x02
-#define LSA_LSARQUERYSECURITYOBJECT	0x03
-#define LSA_LSARSETSECURITYOBJECT	0x04
-#define LSA_LSARCHANGEPASSWORD	0x05
-#define LSA_LSAROPENPOLICY	0x06
-#define LSA_LSARQUERYINFORMATIONPOLICY	0x07
-#define LSA_LSARSETINFORMATIONPOLICY	0x08
-#define LSA_LSARCLEARAUDITLOG	0x09
-#define LSA_LSARCREATEACCOUNT	0x0a
-#define LSA_LSARENUMERATEACCOUNTS	0x0b
-#define LSA_LSARCREATETRUSTEDDOMAIN	0x0c
-#define LSA_LSARENUMERATETRUSTEDDOMAINS	0x0d
-#define LSA_LSARLOOKUPNAMES	0x0e
-#define LSA_LSARLOOKUPSIDS	0x0f
-#define LSA_LSARCREATESECRET	0x10
-#define LSA_LSAROPENACCOUNT	0x11
+#define LSA_LSARCLOSE				0x00
+#define LSA_LSARDELETE				0x01
+#define LSA_LSARENUMERATEPRIVILEGES		0x02
+#define LSA_LSARQUERYSECURITYOBJECT		0x03
+#define LSA_LSARSETSECURITYOBJECT		0x04
+#define LSA_LSARCHANGEPASSWORD			0x05
+#define LSA_LSAROPENPOLICY			0x06
+#define LSA_LSARQUERYINFORMATIONPOLICY		0x07
+#define LSA_LSARSETINFORMATIONPOLICY		0x08
+#define LSA_LSARCLEARAUDITLOG			0x09
+#define LSA_LSARCREATEACCOUNT			0x0a
+#define LSA_LSARENUMERATEACCOUNTS		0x0b
+#define LSA_LSARCREATETRUSTEDDOMAIN		0x0c
+#define LSA_LSARENUMERATETRUSTEDDOMAINS		0x0d
+#define LSA_LSARLOOKUPNAMES			0x0e
+#define LSA_LSARLOOKUPSIDS			0x0f
+#define LSA_LSARCREATESECRET			0x10
+#define LSA_LSAROPENACCOUNT			0x11
 #define LSA_LSARENUMERATEPRIVILEGESACCOUNT	0x12
-#define LSA_LSARADDPRIVILEGESTOACCOUNT	0x13
+#define LSA_LSARADDPRIVILEGESTOACCOUNT		0x13
 #define LSA_LSARREMOVEPRIVILEGESFROMACCOUNT	0x14
-#define LSA_LSARGETQUOTASFORACCOUNT	0x15
-#define LSA_LSARSETQUOTASFORACCOUNT	0x16
-#define LSA_LSARGETSYSTEMACCESSACCOUNT	0x17
-#define LSA_LSARSETSYSTEMACCESSACCOUNT	0x18
-#define LSA_LSAROPENTRUSTEDDOMAIN	0x19
-#define LSA_LSARQUERYINFOTRUSTEDDOMAIN	0x1a
+#define LSA_LSARGETQUOTASFORACCOUNT		0x15
+#define LSA_LSARSETQUOTASFORACCOUNT		0x16
+#define LSA_LSARGETSYSTEMACCESSACCOUNT		0x17
+#define LSA_LSARSETSYSTEMACCESSACCOUNT		0x18
+#define LSA_LSAROPENTRUSTEDDOMAIN		0x19
+#define LSA_LSARQUERYINFOTRUSTEDDOMAIN		0x1a
 #define LSA_LSARSETINFORMATIONTRUSTEDDOMAIN	0x1b
-#define LSA_LSAROPENSECRET	0x1c
-#define LSA_LSARSETSECRET	0x1d
-#define LSA_LSARQUERYSECRET	0x1e
-#define LSA_LSARLOOKUPPRIVILEGEVALUE	0x1f
-#define LSA_LSARLOOKUPPRIVILEGENAME	0x20
+#define LSA_LSAROPENSECRET			0x1c
+#define LSA_LSARSETSECRET			0x1d
+#define LSA_LSARQUERYSECRET			0x1e
+#define LSA_LSARLOOKUPPRIVILEGEVALUE		0x1f
+#define LSA_LSARLOOKUPPRIVILEGENAME		0x20
 #define LSA_LSARLOOKUPPRIVILEGEDISPLAYNAME	0x21
-#define LSA_LSARDELETEOBJECT	0x22
+#define LSA_LSARDELETEOBJECT			0x22
 #define LSA_LSARENUMERATEACCOUNTSWITHUSERRIGHT	0x23
-#define LSA_LSARENUMERATEACCOUNTRIGHTS	0x24
-#define LSA_LSARADDACCOUNTRIGHTS	0x25
-#define LSA_LSARREMOVEACCOUNTRIGHTS	0x26
-#define LSA_LSARQUERYTRUSTEDDOMAININFO	0x27
-#define LSA_LSARSETTRUSTEDDOMAININFO	0x28
-#define LSA_LSARDELETETRUSTEDDOMAIN	0x29
-#define LSA_LSARSTOREPRIVATEDATA	0x2a
-#define LSA_LSARRETRIEVEPRIVATEDATA	0x2b
-#define LSA_LSAROPENPOLICY2	0x2c
-#define LSA_LSARGETUSERNAME	0x2d
-#define LSA_LSARQUERYINFORMATIONPOLICY2	0x2e
-#define LSA_LSARSETINFORMATIONPOLICY2	0x2f
+#define LSA_LSARENUMERATEACCOUNTRIGHTS		0x24
+#define LSA_LSARADDACCOUNTRIGHTS		0x25
+#define LSA_LSARREMOVEACCOUNTRIGHTS		0x26
+#define LSA_LSARQUERYTRUSTEDDOMAININFO		0x27
+#define LSA_LSARSETTRUSTEDDOMAININFO		0x28
+#define LSA_LSARDELETETRUSTEDDOMAIN		0x29
+#define LSA_LSARSTOREPRIVATEDATA		0x2a
+#define LSA_LSARRETRIEVEPRIVATEDATA		0x2b
+#define LSA_LSAROPENPOLICY2			0x2c
+#define LSA_LSARGETUSERNAME			0x2d
+#define LSA_LSARQUERYINFORMATIONPOLICY2		0x2e
+#define LSA_LSARSETINFORMATIONPOLICY2		0x2f
 #define LSA_LSARQUERYTRUSTEDDOMAININFOBYNAME	0x30
 #define LSA_LSARSETTRUSTEDDOMAININFOBYNAME	0x31
 #define LSA_LSARENUMERATETRUSTEDDOMAINSEX	0x32
-#define LSA_LSARCREATETRUSTEDDOMAINEX	0x33
-#define LSA_LSARCLOSETRUSTEDDOMAINEX	0x34
+#define LSA_LSARCREATETRUSTEDDOMAINEX		0x33
+#define LSA_LSARCLOSETRUSTEDDOMAINEX		0x34
 #define LSA_LSARQUERYDOMAININFORMATIONPOLICY	0x35
 #define LSA_LSARSETDOMAININFORMATIONPOLICY	0x36
-#define LSA_LSAROPENTRUSTEDDOMAINBYNAME	0x37
-#define LSA_LSAFUNCTION_38	0x38
-#define LSA_LSARLOOKUPSIDS2	0x39
-#define LSA_LSARLOOKUPNAMES2	0x3a
-#define LSA_LSAFUNCTION_3B	0x3b
+#define LSA_LSAROPENTRUSTEDDOMAINBYNAME		0x37
+#define LSA_LSARTESTCALL			0x38
+#define LSA_LSARLOOKUPSIDS2			0x39
+#define LSA_LSARLOOKUPNAMES2			0x3a
+#define LSA_LSARCREATETRUSTEDDOMAINEX2		0x3b
+#define LSA_CREDRWRITE 				0x3c
+#define LSA_CREDRREAD				0x3d
+#define LSA_CREDRENUMERATE			0x3e
+#define LSA_CREDRWRITEDOMAINCREDENTIALS		0x3f
+#define LSA_CREDRREADDOMAINCREDENTIALS		0x40
+#define LSA_CREDRDELETE				0x41
+#define LSA_CREDRGETTARGETINFO			0x42
+#define LSA_CREDRPROFILELOADED			0x43
+#define LSA_LSARLOOKUPNAMES3			0x44
+#define LSA_CREDRGETSESSIONTYPES 		0x45
+#define LSA_LSARREGISTERAUDITEVENT		0x46
+#define LSA_LSARGENAUDITEVENT			0x47
+#define LSA_LSARUNREGISTERAUDITEVENT		0x48
+#define LSA_LSARQUERYFORESTTRUSTINFORMATION	0x49
+#define LSA_LSARSETFORESTTRUSTINFORMATION	0x4a
+#define LSA_CREDRRENAME				0x4b
+#define LSA_LSARLOOKUPSIDS3			0x4c
+#define LSA_LSARLOOKUPNAMES4			0x4d
+#define LSA_LSAROPENPOLICYSCE			0x4e
+#define LSA_LSARADTREGISTERSECURITYEVENTSOURCE	0x4f
+#define LSA_LSARADTUNREGISTERSECURITYEVENTSOURCE 0x50
+#define LSA_LSARADTREPORTSECURITYEVENT		0x51
 
 int
 lsa_dissect_LSA_SECURITY_DESCRIPTOR(tvbuff_t *tvb, int offset,