From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Tue, 13 Jun 2023 23:28:40 +0000 (+1200)
Subject: librpc/idl: Add authentication policy event IDs
X-Git-Tag: talloc-2.4.1~387
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=359e820404ed43530aea1d94531ed0ff1d51c45b;p=thirdparty%2Fsamba.git

librpc/idl: Add authentication policy event IDs

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/librpc/idl/windows_event_ids.idl b/librpc/idl/windows_event_ids.idl
index 240ad9e56ff..f482800d897 100644
--- a/librpc/idl/windows_event_ids.idl
+++ b/librpc/idl/windows_event_ids.idl
@@ -28,6 +28,16 @@ interface windows_events
 		EVT_ID_USER_REMOVED_FROM_UNIVERSAL_GROUP		= 4762
 	} event_id_type;
 
+	/* See https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/authentication-policies-and-authentication-policy-silos#BKMK_ErrorandEvents */
+	typedef [v1_enum,public] enum {
+		AUTH_EVT_ID_NONE					=    0,
+		AUTH_EVT_ID_NTLM_DEVICE_RESTRICTION			=  101,
+		AUTH_EVT_ID_KERBEROS_DEVICE_RESTRICTION			=  105,
+		AUTH_EVT_ID_KERBEROS_DEVICE_RESTRICTION_AUDIT		=  305,
+		AUTH_EVT_ID_KERBEROS_SERVER_RESTRICTION			=  106,
+		AUTH_EVT_ID_KERBEROS_SERVER_RESTRICTION_AUDIT		=  306
+	} auth_event_id_type;
+
 	typedef [v1_enum,public] enum {
 		EVT_LOGON_INTERACTIVE		=  2,
 		EVT_LOGON_NETWORK		=  3,