Schnittstelle Sspi
- Autor:
- dblock[at]dblock.org
-
Verschachtelte Klassen - Übersicht
Modifizierer und TypSchnittstelleBeschreibungstatic class
Credentials handle.static class
Security context handle.static class
A pointer to a SecHandlestatic class
A pointer to an array of SecPkgInfo structures.static class
static class
The SecBuffer structure describes a buffer allocated by a transport application to pass to a security package.static class
The SecBufferDesc structure describes an array of SecBuffer structures to pass from a transport application to a security package.static class
Security handle.static class
static class
static class
static class
static class
The SecPkgContext_PackageInfo structure.static class
static class
The SecPkgContext_Sizes structure indicates the sizes of important structures used in the message support functions.static class
The SecPkgCredentials_Names structure holds the name of the user associated with a context.static class
The SecPkgInfo structure provides general information about a security package, such as its name and capabilities.static class
A security integer.static class
A timestamp. -
Feldübersicht
Modifizierer und TypFeldBeschreibungstatic final int
The security package allocates output buffers for you.static final int
Encrypt messages by using the EncryptMessage function.static final int
The security context will not handle formatting messages.static final int
The server can use the context to authenticate to other servers as the client.static final int
When errors occur, the remote party will be notified.static final int
Sign messages and verify signatures by using the EncryptMessage and MakeSignature functions.static final int
The mutual authentication policy of the service will be satisfied.static final int
Detect replayed messages that have been encoded by using the EncryptMessage or MakeSignature functions.static final int
Detect messages received out of sequence.static final int
Support a stream-oriented connection.static final int
Maximum size in bytes of a security token.static final int
Strings in structureSspi.SEC_WINNT_AUTH_IDENTITY
are ANSIstatic final int
String in structureSspi.SEC_WINNT_AUTH_IDENTITY
are UNICODEstatic final int
This buffer type is used for common data.static final int
This is a placeholder in the buffer array.static final int
This buffer type is used to indicate the security token portion of the message.static final int
Version of the SecBuffer struct.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_AccessToken structure.static final int
static final int
The pBuffer parameter contains a pointer to a SecPkgContext_Authority structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_ClientSpecifiedTarget structure that represents the service principal name (SPN) of the initial target supplied by the client.static final int
static final int
static final int
The pBuffer parameter contains a pointer to a SecPkgContext_DceInfo structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_Bindings structure that specifies channel binding information.static final int
The pBuffer parameter contains a pointer to aSspi.SecPkgContext_Flags
structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_KeyInfo structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_LastClientTokenStatus structure that specifies whether the token from the most recent call to the InitializeSecurityContext function is the last token from the client.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_Lifespan structure.static final int
static final int
The pBuffer parameter contains a pointer to aSspi.SecPkgCredentials_Names
structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_NativeNames structure.static final int
static final int
static final int
static final int
The pBuffer parameter contains a pointer to aSspi.SecPkgContext_NegotiationInfo
structure.static final int
The pBuffer parameter contains a pointer to aSspi.SecPkgContext_PackageInfo
structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_PasswordExpiry structure.static final int
static final int
static final int
The pBuffer parameter contains a pointer to aSspi.SecPkgContext_SessionKey
structure.static final int
The pBuffer parameter contains a pointer to aSspi.SecPkgContext_Sizes
structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_StreamSizes structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_SubjectAttributes structure.static final int
static final int
The pBuffer parameter contains a pointer to a SecPkgContext_TargetInformation structure.static final int
The pBuffer parameter contains a pointer to a SecPkgContext_Bindings structure that specifies channel binding information.static final int
static final int
static final int
Returns the name of a credential in a pbuffer of typeSspi.SecPkgCredentials_Names
.static final int
Validate an incoming server credential.static final int
Allow a local client credential to prepare an outgoing token.static final int
Accepts Win32 namesstatic final int
This package receives calls from app container apps if one of the following checks succeeds.static final int
This package receives all calls from app container apps.static final int
Token Buffers are in ASCIIstatic final int
Server side functionality not availablestatic final int
Connection oriented RPC supportstatic final int
Datagram RPC supportstatic final int
Package can delegatestatic final int
Supports extended error msgsstatic final int
Package can fragment to fitstatic final int
GSS Compatibility Availablestatic final int
Supports impersonationstatic final int
Supports integrity on messagesstatic final int
Supports common LsaLogonUserstatic final int
Full 3-leg required for re-auth.static final int
Package can perform mutual authenticationstatic final int
The security package extends the Microsoft Negotiate security package.static final int
Can be used by the negotiate packagestatic final int
This package is negotiated by the package of type SECPKG_FLAG_NEGO_EXTENDER.static final int
Supports privacy (confidentiality)static final int
Supports callers with restricted tokens.static final int
Supports stream semanticsstatic final int
Only security token neededstatic final int
Negotiation has been completed.static final int
static final int
Negotiations in progress.static final int
Negotiations not yet completed.static final int
static final int
Produce a header or trailer but do not encrypt the message.static final int
Send an Schannel alert message.static final int
Specifies Native data representation.static final int
Specifies network data representation.
-
Felddetails
-
MAX_TOKEN_SIZE
static final int MAX_TOKEN_SIZEMaximum size in bytes of a security token.MAX_TOKEN_SIZE
has the following default value, depending on the version of Windows that builds the token:Windows Server 2008 R2 and earlier versions, and Windows 7 and earlier versions: 12,000 bytes. Windows Server 2012 and later versions, and Windows 8 and later versions: 48,000 bytes
- Siehe auch:
-
SECPKG_CRED_INBOUND
static final int SECPKG_CRED_INBOUNDValidate an incoming server credential. Inbound credentials might be validated by using an authenticating authority when InitializeSecurityContext or AcceptSecurityContext is called. If such an authority is not available, the function will fail and return SEC_E_NO_AUTHENTICATING_AUTHORITY. Validation is package specific.- Siehe auch:
-
SECPKG_CRED_OUTBOUND
static final int SECPKG_CRED_OUTBOUNDAllow a local client credential to prepare an outgoing token.- Siehe auch:
-
SECURITY_NATIVE_DREP
static final int SECURITY_NATIVE_DREPSpecifies Native data representation.- Siehe auch:
-
SECURITY_NETWORK_DREP
static final int SECURITY_NETWORK_DREPSpecifies network data representation.- Siehe auch:
-
ISC_REQ_ALLOCATE_MEMORY
static final int ISC_REQ_ALLOCATE_MEMORYThe security package allocates output buffers for you. When you have finished using the output buffers, free them by calling the FreeContextBuffer function.- Siehe auch:
-
ISC_REQ_CONFIDENTIALITY
static final int ISC_REQ_CONFIDENTIALITYEncrypt messages by using the EncryptMessage function.- Siehe auch:
-
ISC_REQ_CONNECTION
static final int ISC_REQ_CONNECTIONThe security context will not handle formatting messages. This value is the default.- Siehe auch:
-
ISC_REQ_DELEGATE
static final int ISC_REQ_DELEGATEThe server can use the context to authenticate to other servers as the client. The ISC_REQ_MUTUAL_AUTH flag must be set for this flag to work. Valid for Kerberos. Ignore this flag for constrained delegation.- Siehe auch:
-
ISC_REQ_EXTENDED_ERROR
static final int ISC_REQ_EXTENDED_ERRORWhen errors occur, the remote party will be notified.- Siehe auch:
-
ISC_REQ_INTEGRITY
static final int ISC_REQ_INTEGRITYSign messages and verify signatures by using the EncryptMessage and MakeSignature functions.- Siehe auch:
-
ISC_REQ_MUTUAL_AUTH
static final int ISC_REQ_MUTUAL_AUTHThe mutual authentication policy of the service will be satisfied.- Siehe auch:
-
ISC_REQ_REPLAY_DETECT
static final int ISC_REQ_REPLAY_DETECTDetect replayed messages that have been encoded by using the EncryptMessage or MakeSignature functions.- Siehe auch:
-
ISC_REQ_SEQUENCE_DETECT
static final int ISC_REQ_SEQUENCE_DETECTDetect messages received out of sequence.- Siehe auch:
-
ISC_REQ_STREAM
static final int ISC_REQ_STREAMSupport a stream-oriented connection.- Siehe auch:
-
SECBUFFER_VERSION
static final int SECBUFFER_VERSIONVersion of the SecBuffer struct.- Siehe auch:
-
SECBUFFER_EMPTY
static final int SECBUFFER_EMPTYThis is a placeholder in the buffer array.- Siehe auch:
-
SECBUFFER_DATA
static final int SECBUFFER_DATAThis buffer type is used for common data. The security package can read and write this data.- Siehe auch:
-
SECBUFFER_TOKEN
static final int SECBUFFER_TOKENThis buffer type is used to indicate the security token portion of the message. This is read-only for input parameters or read/write for output parameters.- Siehe auch:
-
SECPKG_ATTR_SIZES
static final int SECPKG_ATTR_SIZESThe pBuffer parameter contains a pointer to aSspi.SecPkgContext_Sizes
structure.Queries the sizes of the structures used in the per-message functions.
- Siehe auch:
-
SECPKG_ATTR_NAMES
static final int SECPKG_ATTR_NAMESThe pBuffer parameter contains a pointer to aSspi.SecPkgCredentials_Names
structure.Queries the name associated with the context.
- Siehe auch:
-
SECPKG_ATTR_LIFESPAN
static final int SECPKG_ATTR_LIFESPANThe pBuffer parameter contains a pointer to a SecPkgContext_Lifespan structure.Queries the life span of the context.
- Siehe auch:
-
SECPKG_ATTR_DCE_INFO
static final int SECPKG_ATTR_DCE_INFOThe pBuffer parameter contains a pointer to a SecPkgContext_DceInfo structure.Queries for authorization data used by DCE services.
- Siehe auch:
-
SECPKG_ATTR_STREAM_SIZES
static final int SECPKG_ATTR_STREAM_SIZESThe pBuffer parameter contains a pointer to a SecPkgContext_StreamSizes structure.Queries the sizes of the various parts of a stream used in the per-message functions.
This attribute is supported only by the Schannel security package.
- Siehe auch:
-
SECPKG_ATTR_KEY_INFO
static final int SECPKG_ATTR_KEY_INFOThe pBuffer parameter contains a pointer to a SecPkgContext_KeyInfo structure.Queries information about the keys used in a security context.
- Siehe auch:
-
SECPKG_ATTR_AUTHORITY
static final int SECPKG_ATTR_AUTHORITYThe pBuffer parameter contains a pointer to a SecPkgContext_Authority structure.Queries the name of the authenticating authority.
- Siehe auch:
-
SECPKG_ATTR_PROTO_INFO
static final int SECPKG_ATTR_PROTO_INFO- Siehe auch:
-
SECPKG_ATTR_PASSWORD_EXPIRY
static final int SECPKG_ATTR_PASSWORD_EXPIRYThe pBuffer parameter contains a pointer to a SecPkgContext_PasswordExpiry structure.Returns password expiration information.
- Siehe auch:
-
SECPKG_ATTR_SESSION_KEY
static final int SECPKG_ATTR_SESSION_KEYThe pBuffer parameter contains a pointer to aSspi.SecPkgContext_SessionKey
structure. Returns information about the session keys.- Siehe auch:
-
SECPKG_ATTR_PACKAGE_INFO
static final int SECPKG_ATTR_PACKAGE_INFOThe pBuffer parameter contains a pointer to aSspi.SecPkgContext_PackageInfo
structure. Returns information on the SSP in use.- Siehe auch:
-
SECPKG_ATTR_USER_FLAGS
static final int SECPKG_ATTR_USER_FLAGS- Siehe auch:
-
SECPKG_ATTR_NEGOTIATION_INFO
static final int SECPKG_ATTR_NEGOTIATION_INFOThe pBuffer parameter contains a pointer to aSspi.SecPkgContext_NegotiationInfo
structure.Returns information about the security package to be used with the negotiation process and the current state of the negotiation for the use of that package.
- Siehe auch:
-
SECPKG_ATTR_NATIVE_NAMES
static final int SECPKG_ATTR_NATIVE_NAMESThe pBuffer parameter contains a pointer to a SecPkgContext_NativeNames structure.Returns the principal name (CNAME) from the outbound ticket.
- Siehe auch:
-
SECPKG_ATTR_FLAGS
static final int SECPKG_ATTR_FLAGSThe pBuffer parameter contains a pointer to aSspi.SecPkgContext_Flags
structure.Returns information about the negotiated context flags.
- Siehe auch:
-
SECPKG_ATTR_USE_VALIDATED
static final int SECPKG_ATTR_USE_VALIDATED- Siehe auch:
-
SECPKG_ATTR_CREDENTIAL_NAME
static final int SECPKG_ATTR_CREDENTIAL_NAME- Siehe auch:
-
SECPKG_ATTR_TARGET_INFORMATION
static final int SECPKG_ATTR_TARGET_INFORMATIONThe pBuffer parameter contains a pointer to a SecPkgContext_TargetInformation structure.Returns information about the name of the remote server.
- Siehe auch:
-
SECPKG_ATTR_ACCESS_TOKEN
static final int SECPKG_ATTR_ACCESS_TOKENThe pBuffer parameter contains a pointer to a SecPkgContext_AccessToken structure.Returns a handle to the access token.
- Siehe auch:
-
SECPKG_ATTR_TARGET
static final int SECPKG_ATTR_TARGET- Siehe auch:
-
SECPKG_ATTR_AUTHENTICATION_ID
static final int SECPKG_ATTR_AUTHENTICATION_ID- Siehe auch:
-
SECPKG_ATTR_LOGOFF_TIME
static final int SECPKG_ATTR_LOGOFF_TIME- Siehe auch:
-
SECPKG_ATTR_NEGO_KEYS
static final int SECPKG_ATTR_NEGO_KEYS- Siehe auch:
-
SECPKG_ATTR_PROMPTING_NEEDED
static final int SECPKG_ATTR_PROMPTING_NEEDED- Siehe auch:
-
SECPKG_ATTR_UNIQUE_BINDINGS
static final int SECPKG_ATTR_UNIQUE_BINDINGSThe pBuffer parameter contains a pointer to a SecPkgContext_Bindings structure that specifies channel binding information.This value is supported only by the Schannel security package.
Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP: This value is not supported.
- Siehe auch:
-
SECPKG_ATTR_ENDPOINT_BINDINGS
static final int SECPKG_ATTR_ENDPOINT_BINDINGSThe pBuffer parameter contains a pointer to a SecPkgContext_Bindings structure that specifies channel binding information.This attribute is supported only by the Schannel security package.
Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP: This value is not supported.
- Siehe auch:
-
SECPKG_ATTR_CLIENT_SPECIFIED_TARGET
static final int SECPKG_ATTR_CLIENT_SPECIFIED_TARGETThe pBuffer parameter contains a pointer to a SecPkgContext_ClientSpecifiedTarget structure that represents the service principal name (SPN) of the initial target supplied by the client.Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP: This value is not supported.
- Siehe auch:
-
SECPKG_ATTR_LAST_CLIENT_TOKEN_STATUS
static final int SECPKG_ATTR_LAST_CLIENT_TOKEN_STATUSThe pBuffer parameter contains a pointer to a SecPkgContext_LastClientTokenStatus structure that specifies whether the token from the most recent call to the InitializeSecurityContext function is the last token from the client.This value is supported only by the Negotiate, Kerberos, and NTLM security packages.
Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP: This value is not supported.
- Siehe auch:
-
SECPKG_ATTR_NEGO_PKG_INFO
static final int SECPKG_ATTR_NEGO_PKG_INFO- Siehe auch:
-
SECPKG_ATTR_NEGO_STATUS
static final int SECPKG_ATTR_NEGO_STATUS- Siehe auch:
-
SECPKG_ATTR_CONTEXT_DELETED
static final int SECPKG_ATTR_CONTEXT_DELETED- Siehe auch:
-
SECPKG_ATTR_SUBJECT_SECURITY_ATTRIBUTES
static final int SECPKG_ATTR_SUBJECT_SECURITY_ATTRIBUTESThe pBuffer parameter contains a pointer to a SecPkgContext_SubjectAttributes structure.This value returns information about the security attributes for the connection.
This value is supported only on the CredSSP server.
Windows Server 2008, Windows Vista, Windows Server 2003 and Windows XP: This value is not supported.
- Siehe auch:
-
SECPKG_NEGOTIATION_COMPLETE
static final int SECPKG_NEGOTIATION_COMPLETENegotiation has been completed.- Siehe auch:
-
SECPKG_NEGOTIATION_OPTIMISTIC
static final int SECPKG_NEGOTIATION_OPTIMISTICNegotiations not yet completed.- Siehe auch:
-
SECPKG_NEGOTIATION_IN_PROGRESS
static final int SECPKG_NEGOTIATION_IN_PROGRESSNegotiations in progress.- Siehe auch:
-
SECPKG_NEGOTIATION_DIRECT
static final int SECPKG_NEGOTIATION_DIRECT- Siehe auch:
-
SECPKG_NEGOTIATION_TRY_MULTICRED
static final int SECPKG_NEGOTIATION_TRY_MULTICRED- Siehe auch:
-
SECPKG_FLAG_INTEGRITY
static final int SECPKG_FLAG_INTEGRITYSupports integrity on messages- Siehe auch:
-
SECPKG_FLAG_PRIVACY
static final int SECPKG_FLAG_PRIVACYSupports privacy (confidentiality)- Siehe auch:
-
SECPKG_FLAG_TOKEN_ONLY
static final int SECPKG_FLAG_TOKEN_ONLYOnly security token needed- Siehe auch:
-
SECPKG_FLAG_DATAGRAM
static final int SECPKG_FLAG_DATAGRAMDatagram RPC support- Siehe auch:
-
SECPKG_FLAG_CONNECTION
static final int SECPKG_FLAG_CONNECTIONConnection oriented RPC support- Siehe auch:
-
SECPKG_FLAG_MULTI_REQUIRED
static final int SECPKG_FLAG_MULTI_REQUIREDFull 3-leg required for re-auth.- Siehe auch:
-
SECPKG_FLAG_CLIENT_ONLY
static final int SECPKG_FLAG_CLIENT_ONLYServer side functionality not available- Siehe auch:
-
SECPKG_FLAG_EXTENDED_ERROR
static final int SECPKG_FLAG_EXTENDED_ERRORSupports extended error msgs- Siehe auch:
-
SECPKG_FLAG_IMPERSONATION
static final int SECPKG_FLAG_IMPERSONATIONSupports impersonation- Siehe auch:
-
SECPKG_FLAG_ACCEPT_WIN32_NAME
static final int SECPKG_FLAG_ACCEPT_WIN32_NAMEAccepts Win32 names- Siehe auch:
-
SECPKG_FLAG_STREAM
static final int SECPKG_FLAG_STREAMSupports stream semantics- Siehe auch:
-
SECPKG_FLAG_NEGOTIABLE
static final int SECPKG_FLAG_NEGOTIABLECan be used by the negotiate package- Siehe auch:
-
SECPKG_FLAG_GSS_COMPATIBLE
static final int SECPKG_FLAG_GSS_COMPATIBLEGSS Compatibility Available- Siehe auch:
-
SECPKG_FLAG_LOGON
static final int SECPKG_FLAG_LOGONSupports common LsaLogonUser- Siehe auch:
-
SECPKG_FLAG_ASCII_BUFFERS
static final int SECPKG_FLAG_ASCII_BUFFERSToken Buffers are in ASCII- Siehe auch:
-
SECPKG_FLAG_FRAGMENT
static final int SECPKG_FLAG_FRAGMENTPackage can fragment to fit- Siehe auch:
-
SECPKG_FLAG_MUTUAL_AUTH
static final int SECPKG_FLAG_MUTUAL_AUTHPackage can perform mutual authentication- Siehe auch:
-
SECPKG_FLAG_DELEGATION
static final int SECPKG_FLAG_DELEGATIONPackage can delegate- Siehe auch:
-
SECPKG_FLAG_RESTRICTED_TOKENS
static final int SECPKG_FLAG_RESTRICTED_TOKENSSupports callers with restricted tokens.- Siehe auch:
-
SECPKG_FLAG_NEGO_EXTENDER
static final int SECPKG_FLAG_NEGO_EXTENDERThe security package extends the Microsoft Negotiate security package.- Siehe auch:
-
SECPKG_FLAG_NEGOTIABLE2
static final int SECPKG_FLAG_NEGOTIABLE2This package is negotiated by the package of type SECPKG_FLAG_NEGO_EXTENDER.- Siehe auch:
-
SECPKG_FLAG_APPCONTAINER_PASSTHROUGH
static final int SECPKG_FLAG_APPCONTAINER_PASSTHROUGHThis package receives all calls from app container apps.- Siehe auch:
-
SECPKG_FLAG_APPCONTAINER_CHECKS
static final int SECPKG_FLAG_APPCONTAINER_CHECKSThis package receives calls from app container apps if one of the following checks succeeds.- Caller has default credentials capability.
- The target is a proxy server.
- The caller has supplied credentials.
- Siehe auch:
-
SECPKG_CRED_ATTR_NAMES
static final int SECPKG_CRED_ATTR_NAMESReturns the name of a credential in a pbuffer of typeSspi.SecPkgCredentials_Names
.- Siehe auch:
-
SECQOP_WRAP_NO_ENCRYPT
static final int SECQOP_WRAP_NO_ENCRYPTProduce a header or trailer but do not encrypt the message.- Siehe auch:
-
SECQOP_WRAP_OOB_DATA
static final int SECQOP_WRAP_OOB_DATASend an Schannel alert message. In this case, the pMessage parameter must contain a standard two-byte SSL/TLS event code. This value is supported only by the Schannel SSP.- Siehe auch:
-
SEC_WINNT_AUTH_IDENTITY_ANSI
static final int SEC_WINNT_AUTH_IDENTITY_ANSIStrings in structureSspi.SEC_WINNT_AUTH_IDENTITY
are ANSI- Siehe auch:
-
SEC_WINNT_AUTH_IDENTITY_UNICODE
static final int SEC_WINNT_AUTH_IDENTITY_UNICODEString in structureSspi.SEC_WINNT_AUTH_IDENTITY
are UNICODE- Siehe auch:
-