diff options
Diffstat (limited to 'epan/dissectors/packet-dcerpc-samr.c')
-rw-r--r-- | epan/dissectors/packet-dcerpc-samr.c | 3517 |
1 files changed, 1735 insertions, 1782 deletions
diff --git a/epan/dissectors/packet-dcerpc-samr.c b/epan/dissectors/packet-dcerpc-samr.c index 1713db55c1..c12d787cc3 100644 --- a/epan/dissectors/packet-dcerpc-samr.c +++ b/epan/dissectors/packet-dcerpc-samr.c @@ -1,10 +1,10 @@ /* DO NOT EDIT - This filter was automatically generated + This file was automatically generated by Pidl from samr.idl and samr.cnf. - Pidl is a perl based IDL compiler for DCE/RPC idl files. + Pidl is a perl based IDL compiler for DCE/RPC idl files. It is maintained by the Samba team, not the Wireshark team. - Instructions on how to download and install Pidl can be + Instructions on how to download and install Pidl can be found at http://wiki.wireshark.org/Pidl */ @@ -116,559 +116,559 @@ static gint ett_samr_samr_ValidatePasswordReq = -1; /* Header field declarations */ -static gint hf_samr_samr_QueryDisplayInfo2_level = -1; -static gint hf_samr_rid = -1; -static gint hf_samr_samr_Connect2_system_name = -1; -static gint hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH = -1; -static gint hf_samr_group_access_mask = -1; -static gint hf_samr_samr_DomainInfo_oem = -1; -static gint hf_samr_samr_DispInfoAscii_entries = -1; -static gint hf_samr_samr_QueryAliasInfo_level = -1; -static gint hf_samr_samr_DispEntryFullGroup_idx = -1; -static gint hf_samr_samr_QueryGroupInfo_info = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT = -1; -static gint hf_samr_samr_UserInfo21_primary_gid = -1; -static gint hf_samr_samr_DomGeneralInformation2_lockout_duration = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY = -1; -static gint hf_samr_samr_DispInfoGeneral_count = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET = -1; +static gint hf_samr_samr_UserInfo23_password = -1; +static gint hf_samr_samr_UserInfo21_description = -1; static gint hf_samr_samr_QueryDisplayInfo3_total_size = -1; -static gint hf_samr_samr_GetDomPwInfo_info = -1; -static gint hf_samr_samr_QuerySecurity_sdbuf = -1; -static gint hf_samr_samr_UserInfo3_workstations = -1; -static gint hf_samr_samr_QueryUserInfo2_info = -1; -static gint hf_samr_samr_QueryDisplayInfo3_start_idx = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS = -1; -static gint hf_samr_samr_DomGeneralInformation_num_users = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS = -1; -static gint hf_samr_samr_UserInfo21_acct_flags = -1; -static gint hf_samr_samr_UserInfo5_profile_path = -1; -static gint hf_samr_samr_AcctFlags_ACB_PW_EXPIRED = -1; -static gint hf_samr_samr_ValidatePasswordReq3_hash = -1; -static gint hf_samr_samr_QueryDomainInfo_info = -1; -static gint hf_samr_samr_UserInfo_info16 = -1; -static gint hf_samr_samr_SetBootKeyInformation_unknown1 = -1; -static gint hf_samr_samr_GroupInfo_attributes = -1; -static gint hf_samr_samr_DomInfo3_force_logoff_time = -1; -static gint hf_samr_samr_ChangePasswordUser_new_nt_crypted = -1; -static gint hf_samr_samr_ChangePasswordUser3_reject = -1; -static gint hf_samr_samr_QueryDomainInfo2_info = -1; -static gint hf_samr_samr_UserInfo1_description = -1; -static gint hf_samr_samr_SetAliasInfo_info = -1; -static gint hf_samr_samr_ChangePasswordUser_cross1_present = -1; -static gint hf_samr_samr_UserInfo5_primary_gid = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT = -1; -static gint hf_samr_samr_Connect4_system_name = -1; -static gint hf_samr_samr_QueryDisplayInfo3_buf_size = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE = -1; static gint hf_samr_samr_UserInfo20_parameters = -1; -static gint hf_samr_samr_UserInfo18_lm_pwd = -1; -static gint hf_samr_samr_UserInfo1_account_name = -1; -static gint hf_samr_samr_ChangePasswordUser2_lm_change = -1; -static gint hf_samr_samr_UserInfo21_description = -1; -static gint hf_samr_samr_UserInfo21_profile_path = -1; -static gint hf_samr_samr_ValidatePassword_req = -1; -static gint hf_samr_samr_AcctFlags_ACB_DISABLED = -1; -static gint hf_samr_samr_ChangePasswordUser_nt_cross = -1; -static gint hf_samr_samr_ChangeReject_unknown2 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME = -1; -static gint hf_samr_samr_UserInfo2_unknown = -1; -static gint hf_samr_samr_ValidatePasswordReq3_password = -1; -static gint hf_samr_samr_UserInfo5_logon_script = -1; -static gint hf_samr_samr_RidWithAttributeArray_count = -1; -static gint hf_samr_samr_ValidatePasswordInfo_pwd_history_len = -1; -static gint hf_samr_samr_DispInfoFullGroups_entries = -1; -static gint hf_samr_samr_UserInfo5_bad_password_count = -1; static gint hf_samr_samr_DomainInfo_info5 = -1; +static gint hf_samr_samr_QueryDisplayInfo_buf_size = -1; static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER = -1; -static gint hf_samr_samr_UserInfo_info6 = -1; -static gint hf_samr_samr_Connect5_info_out = -1; -static gint hf_samr_samr_UserInfo3_logon_script = -1; -static gint hf_samr_samr_SetUserInfo_level = -1; -static gint hf_samr_samr_UserInfo21_last_logon = -1; -static gint hf_samr_samr_GetBootKeyInformation_domain_handle = -1; -static gint hf_samr_samr_UserInfo21_lm_password = -1; -static gint hf_samr_samr_QueryDisplayInfo3_returned_size = -1; -static gint hf_samr_samr_ValidatePasswordReq3_account = -1; -static gint hf_samr_samr_UserInfo7_account_name = -1; -static gint hf_samr_samr_UserInfo23_info = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1 = -1; -static gint hf_samr_samr_UserInfo3_last_logon = -1; -static gint hf_samr_samr_UserInfo_info10 = -1; -static gint hf_samr_samr_EnumDomainGroups_max_size = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE = -1; -static gint hf_samr_samr_UserInfo3_full_name = -1; -static gint hf_samr_samr_DispEntryAscii_account_name = -1; -static gint hf_samr_samr_UserInfo11_logon_script = -1; -static gint hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT = -1; -static gint hf_samr_samr_ChangePasswordUser_lm_present = -1; +static gint hf_samr_samr_RemoveMemberFromForeignDomain_sid = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE = -1; +static gint hf_samr_samr_UserInfo5_full_name = -1; +static gint hf_samr_samr_QueryDisplayInfo3_max_entries = -1; +static gint hf_samr_samr_DispInfoAscii_count = -1; +static gint hf_samr_samr_ChangePasswordUser3_lm_verifier = -1; +static gint hf_samr_samr_ChangePasswordUser2_nt_password = -1; +static gint hf_samr_samr_SetDomainInfo_info = -1; static gint hf_samr_samr_AddMultipleMembersToAlias_sids = -1; -static gint hf_samr_samr_DomInfo13_sequence_num = -1; -static gint hf_samr_samr_UserInfo_info21 = -1; -static gint hf_samr_samr_ValidatePasswordReq_req1 = -1; -static gint hf_samr_samr_AcctFlags_ACB_MNS = -1; -static gint hf_samr_samr_DispEntryFullGroup_description = -1; -static gint hf_samr_samr_SetSecurity_sdbuf = -1; -static gint hf_samr_samr_ValidatePasswordReq2_account = -1; -static gint hf_samr_samr_LookupNames_names = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP = -1; -static gint hf_samr_samr_PwInfo_password_properties = -1; -static gint hf_samr_samr_ValidatePasswordReq_req2 = -1; -static gint hf_samr_samr_DomGeneralInformation2_lockout_window = -1; -static gint hf_samr_samr_QueryDisplayInfo2_returned_size = -1; -static gint hf_samr_samr_SetBootKeyInformation_unknown2 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON = -1; -static gint hf_samr_samr_Ids_count = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM = -1; +static gint hf_samr_samr_DispInfo_info3 = -1; +static gint hf_samr_samr_ValidatePasswordReq1_password_matched = -1; +static gint hf_samr_samr_DispEntryFull_acct_flags = -1; +static gint hf_samr_samr_AcctFlags_ACB_WSTRUST = -1; +static gint hf_samr_samr_UserInfo21_profile_path = -1; +static gint hf_samr_samr_UserInfo21_last_logoff = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS = -1; +static gint hf_samr_samr_PwInfo_min_password_length = -1; +static gint hf_samr_samr_QueryGroupMember_rids = -1; static gint hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED = -1; -static gint hf_samr_samr_ChangePasswordUser3_nt_verifier = -1; -static gint hf_samr_samr_UserInfo_info17 = -1; -static gint hf_samr_samr_LookupRids_types = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH = -1; -static gint hf_samr_samr_ChangePasswordUser3_lm_change = -1; -static gint hf_samr_samr_UserInfo1_primary_gid = -1; -static gint hf_samr_samr_ValidatePasswordReq1_info = -1; -static gint hf_samr_samr_UserInfo21_home_drive = -1; -static gint hf_samr_samr_AcctFlags_ACB_PWNOEXP = -1; -static gint hf_samr_samr_DomOEMInformation_oem_information = -1; -static gint hf_samr_group_handle = -1; -static gint hf_samr_samr_EnumDomainAliases_num_entries = -1; -static gint hf_samr_samr_AcctFlags_ACB_SVRTRUST = -1; -static gint hf_samr_samr_DomGeneralInformation_oem_information = -1; -static gint hf_samr_samr_UserInfo_info8 = -1; -static gint hf_samr_samr_UserInfo25_info = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP = -1; -static gint hf_samr_samr_CreateDomainGroup_name = -1; -static gint hf_samr_samr_DomGeneralInformation_num_groups = -1; -static gint hf_samr_samr_SetGroupInfo_info = -1; -static gint hf_samr_lsa_Strings_names = -1; -static gint hf_samr_samr_EnumDomainAliases_resume_handle = -1; -static gint hf_samr_samr_DomGeneralInformation_num_aliases = -1; -static gint hf_samr_samr_EnumDomainAliases_max_size = -1; -static gint hf_samr_samr_UserInfo21_full_name = -1; -static gint hf_samr_samr_GetDomPwInfo_domain_name = -1; -static gint hf_samr_samr_UserInfo3_primary_gid = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO = -1; -static gint hf_samr_samr_UserInfo_info5 = -1; -static gint hf_samr_samr_UserInfo3_home_directory = -1; -static gint hf_samr_samr_ChangePasswordUser_cross2_present = -1; -static gint hf_samr_samr_DeleteAliasMember_sid = -1; -static gint hf_samr_samr_ValidatePassword_rep = -1; -static gint hf_samr_samr_ValidatePasswordInfo_fields_present = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER = -1; -static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown1 = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex2_level = -1; -static gint hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED = -1; -static gint hf_samr_samr_AliasInfo_description = -1; -static gint hf_samr_samr_QueryDisplayInfo_info = -1; -static gint hf_samr_samr_GroupInfoAll_num_members = -1; -static gint hf_samr_status = -1; -static gint hf_samr_samr_UserInfo12_profile_path = -1; -static gint hf_samr_samr_UserInfo21_comment = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2 = -1; -static gint hf_samr_samr_UserInfo_info14 = -1; -static gint hf_samr_samr_CreateUser2_access_granted = -1; -static gint hf_samr_samr_ConnectInfo1_client_version = -1; -static gint hf_samr_samr_UserInfo5_acct_flags = -1; -static gint hf_samr_samr_UserInfo24_password_expired = -1; -static gint hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED = -1; -static gint hf_samr_samr_SetDsrmPassword_name = -1; -static gint hf_samr_samr_Connect_system_name = -1; -static gint hf_samr_samr_DomInfo1_min_password_age = -1; -static gint hf_samr_samr_LookupRids_num_rids = -1; -static gint hf_samr_samr_GroupInfoDescription_description = -1; -static gint hf_samr_samr_QueryUserInfo_level = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID = -1; -static gint hf_samr_samr_DispEntryGeneral_account_name = -1; -static gint hf_samr_samr_AcctFlags_ACB_HOMDIRREQ = -1; -static gint hf_samr_samr_CryptPasswordEx_data = -1; -static gint hf_samr_samr_ValidatePasswordInfo_bad_password_time = -1; -static gint hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY = -1; -static gint hf_samr_samr_DispInfo_info1 = -1; -static gint hf_samr_samr_SetDomainInfo_level = -1; -static gint hf_samr_samr_DispInfo_info4 = -1; -static gint hf_samr_samr_DomInfo8_domain_create_time = -1; -static gint hf_samr_samr_UserInfo21_private = -1; -static gint hf_samr_samr_ChangePasswordUser_old_nt_crypted = -1; -static gint hf_samr_samr_DomGeneralInformation_force_logoff_time = -1; -static gint hf_samr_samr_DomInfo12_lockout_threshold = -1; +static gint hf_samr_samr_UserInfo21_workstations = -1; +static gint hf_samr_samr_AcctFlags_ACB_NORMAL = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER = -1; +static gint hf_samr_samr_UserInfo_info7 = -1; static gint hf_samr_samr_GroupInfoAttributes_attributes = -1; -static gint hf_samr_samr_SamArray_entries = -1; -static gint hf_samr_samr_UserInfo_info9 = -1; -static gint hf_samr_samr_ChangePasswordUser2_lm_password = -1; -static gint hf_samr_samr_DispEntryGeneral_full_name = -1; -static gint hf_samr_domain_handle = -1; -static gint hf_samr_samr_DomGeneralInformation2_general = -1; -static gint hf_samr_samr_AliasInfoAll_num_members = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO = -1; -static gint hf_samr_samr_DispEntryFull_description = -1; -static gint hf_samr_samr_LookupDomain_domain_name = -1; -static gint hf_samr_samr_ValidatePasswordRep_ctr3 = -1; -static gint hf_samr_user_handle = -1; -static gint hf_samr_samr_QueryDisplayInfo3_max_entries = -1; +static gint hf_samr_samr_ChangePasswordUser3_server = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO = -1; +static gint hf_samr_samr_ConnectInfo1_unknown2 = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex2_idx = -1; +static gint hf_samr_samr_EnumDomainGroups_max_size = -1; +static gint hf_samr_samr_UserInfo3_acct_flags = -1; static gint hf_samr_samr_DomInfo6_primary = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX = -1; -static gint hf_samr_domain_access_mask = -1; -static gint hf_samr_samr_Connect5_system_name = -1; -static gint hf_samr_samr_UserInfo21_bad_password_count = -1; -static gint hf_samr_samr_UserInfo21_acct_expiry = -1; -static gint hf_samr_samr_EnumDomainUsers_max_size = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE = -1; -static gint hf_samr_samr_LookupNames_rids = -1; -static gint hf_samr_samr_DomInfo1_min_password_length = -1; -static gint hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex_idx = -1; -static gint hf_samr_samr_DomInfo9_domain_server_state = -1; -static gint hf_samr_samr_Connect5_level_out = -1; -static gint hf_samr_samr_UserInfo5_last_logon = -1; -static gint hf_samr_samr_ChangePasswordUser2_server = -1; -static gint hf_samr_samr_SetDomainInfo_info = -1; -static gint hf_samr_samr_SamArray_count = -1; -static gint hf_samr_samr_UserInfo24_password = -1; -static gint hf_samr_samr_DispEntryFull_idx = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER = -1; -static gint hf_samr_samr_DispEntryFull_acct_flags = -1; -static gint hf_samr_samr_DomInfo13_modified_count_at_last_promotion = -1; -static gint hf_samr_samr_GetAliasMembership_sids = -1; -static gint hf_samr_samr_UserInfo_info1 = -1; +static gint hf_samr_samr_SetUserInfo_level = -1; +static gint hf_samr_samr_SetUserInfo2_level = -1; +static gint hf_samr_samr_UserInfo5_acct_expiry = -1; static gint hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION = -1; -static gint hf_samr_samr_UserInfo18_nt_pwd = -1; -static gint hf_samr_samr_UserInfo23_password = -1; -static gint hf_samr_samr_UserInfo21_last_logoff = -1; -static gint hf_samr_samr_DispInfo_info2 = -1; -static gint hf_samr_samr_EnumDomainUsers_resume_handle = -1; -static gint hf_samr_samr_ValidatePasswordRepCtr_status = -1; -static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown2 = -1; -static gint hf_samr_samr_DomainInfo_general2 = -1; -static gint hf_samr_samr_DispInfoFull_count = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE = -1; -static gint hf_samr_samr_ValidatePasswordReq2_password = -1; -static gint hf_samr_samr_UserInfo5_logon_hours = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY = -1; -static gint hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD = -1; -static gint hf_samr_samr_QueryDomainInfo_level = -1; -static gint hf_samr_samr_UserInfo26_password = -1; -static gint hf_samr_samr_ValidatePasswordReq1_password_matched = -1; -static gint hf_samr_samr_UserInfo21_account_name = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO = -1; -static gint hf_samr_samr_UserInfo2_comment = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_RID = -1; -static gint hf_samr_samr_UserInfo_info23 = -1; -static gint hf_samr_samr_UserInfo18_password_expired = -1; +static gint hf_samr_samr_ChangePasswordUser_cross2_present = -1; +static gint hf_samr_samr_CreateUser_account_name = -1; +static gint hf_samr_samr_DomGeneralInformation_oem_information = -1; +static gint hf_samr_samr_ChangePasswordUser_lm_cross = -1; +static gint hf_samr_samr_DomOEMInformation_oem_information = -1; +static gint hf_samr_rid = -1; +static gint hf_samr_samr_UserInfo2_country_code = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO = -1; +static gint hf_samr_samr_QueryDisplayInfo2_buf_size = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER = -1; +static gint hf_samr_samr_UserInfo6_account_name = -1; +static gint hf_samr_samr_UserInfo21_home_directory = -1; +static gint hf_samr_samr_UserInfo21_logon_count = -1; +static gint hf_samr_samr_ChangePasswordUser2_lm_password = -1; static gint hf_samr_samr_QueryDisplayInfo2_total_size = -1; -static gint hf_samr_samr_UserInfo25_password = -1; -static gint hf_samr_samr_ChangePasswordUser2_lm_verifier = -1; +static gint hf_samr_samr_DomInfo1_min_password_age = -1; +static gint hf_samr_samr_RidWithAttribute_attributes = -1; +static gint hf_samr_samr_QueryDisplayInfo2_level = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT = -1; static gint hf_samr_samr_UserInfo4_logon_hours = -1; -static gint hf_samr_samr_UserInfo5_home_directory = -1; +static gint hf_samr_samr_ChangePasswordUser_lm_present = -1; +static gint hf_samr_alias_access_mask = -1; static gint hf_samr_samr_DomInfo12_lockout_duration = -1; -static gint hf_samr_samr_CreateUser_account_name = -1; -static gint hf_samr_samr_UserInfo9_primary_gid = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET = -1; -static gint hf_samr_samr_DomGeneralInformation_domain_name = -1; -static gint hf_samr_samr_CreateUser2_account_name = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN = -1; -static gint hf_samr_samr_LookupDomain_sid = -1; -static gint hf_samr_samr_AddAliasMember_sid = -1; -static gint hf_samr_samr_QueryAliasInfo_info = -1; -static gint hf_samr_samr_ValidatePasswordReq2_hash = -1; -static gint hf_samr_samr_UserInfo21_fields_present = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG = -1; -static gint hf_samr_samr_ValidatePasswordReq2_password_matched = -1; -static gint hf_samr_samr_QuerySecurity_sec_info = -1; -static gint hf_samr_samr_DomainInfo_info12 = -1; -static gint hf_samr_samr_QueryDisplayInfo_max_entries = -1; -static gint hf_samr_samr_EnumDomains_resume_handle = -1; -static gint hf_samr_samr_UserInfo_info7 = -1; -static gint hf_samr_samr_GroupInfo_all2 = -1; -static gint hf_samr_samr_UserInfo1_full_name = -1; -static gint hf_samr_samr_EnumDomainGroups_resume_handle = -1; +static gint hf_samr_samr_LookupDomain_domain_name = -1; +static gint hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED = -1; +static gint hf_samr_samr_ChangePasswordUser3_password3 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT = -1; +static gint hf_samr_samr_GroupInfoAll_attributes = -1; +static gint hf_samr_samr_QueryDisplayInfo_start_idx = -1; +static gint hf_samr_samr_DispEntryAscii_account_name = -1; +static gint hf_samr_samr_SetGroupInfo_level = -1; static gint hf_samr_samr_SetUserInfo2_info = -1; -static gint hf_samr_samr_ChangePasswordUser3_nt_password = -1; -static gint hf_samr_samr_UserInfo21_buf_count = -1; -static gint hf_samr_samr_PwInfo_min_password_length = -1; -static gint hf_samr_user_access_mask = -1; -static gint hf_samr_samr_DomGeneralInformation_sequence_num = -1; -static gint hf_samr_samr_UserInfo26_password_expired = -1; -static gint hf_samr_samr_ChangePasswordUser_old_lm_crypted = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS = -1; -static gint hf_samr_samr_AcctFlags_ACB_NORMAL = -1; -static gint hf_samr_samr_GroupInfo_all = -1; -static gint hf_samr_samr_UserInfo16_acct_flags = -1; -static gint hf_samr_samr_UserInfo2_country_code = -1; -static gint hf_samr_samr_AddGroupMember_flags = -1; -static gint hf_samr_samr_UserInfo10_home_directory = -1; +static gint hf_samr_samr_DispEntryGeneral_idx = -1; +static gint hf_samr_samr_GroupInfo_name = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex2_level = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER = -1; +static gint hf_samr_samr_UserInfo3_account_name = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS = -1; +static gint hf_samr_samr_DomainInfo_oem = -1; +static gint hf_samr_samr_DomainInfo_info8 = -1; +static gint hf_samr_samr_QueryDisplayInfo3_info = -1; +static gint hf_samr_samr_UserInfo3_force_password_change = -1; +static gint hf_samr_samr_DomInfo9_domain_server_state = -1; +static gint hf_samr_samr_UserInfo3_logon_count = -1; +static gint hf_samr_samr_AliasInfoAll_num_members = -1; +static gint hf_samr_samr_EnumDomainUsers_max_size = -1; +static gint hf_samr_samr_UserInfo2_unknown = -1; +static gint hf_samr_samr_DomainInfo_general2 = -1; +static gint hf_samr_samr_ChangePasswordUser2_server = -1; +static gint hf_samr_samr_LookupNames_types = -1; +static gint hf_samr_samr_UserInfo5_acct_flags = -1; +static gint hf_samr_samr_LookupNames_rids = -1; +static gint hf_samr_samr_QueryDisplayInfo_returned_size = -1; static gint hf_samr_samr_OemChangePasswordUser2_server = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD = -1; -static gint hf_samr_samr_AliasInfo_all = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME = -1; -static gint hf_samr_samr_ChangeReject_reason = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC = -1; -static gint hf_samr_samr_ChangePasswordUser3_password3 = -1; -static gint hf_samr_samr_UserInfo13_description = -1; -static gint hf_samr_samr_UserInfo21_lm_password_set = -1; -static gint hf_samr_samr_UserInfo_info2 = -1; -static gint hf_samr_samr_LogonHours_bits = -1; +static gint hf_samr_samr_QueryDomainInfo_info = -1; +static gint hf_samr_samr_QueryUserInfo2_level = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS = -1; +static gint hf_samr_samr_DomainInfo_info12 = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER = -1; +static gint hf_samr_samr_ValidatePasswordReq2_account = -1; static gint hf_samr_handle = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT = -1; -static gint hf_samr_samr_EnumDomainGroups_sam = -1; -static gint hf_samr_samr_GroupInfoAll_name = -1; -static gint hf_samr_samr_ValidatePasswordRep_ctr2 = -1; -static gint hf_samr_samr_UserInfo_info24 = -1; -static gint hf_samr_samr_DomainInfo_info3 = -1; -static gint hf_samr_samr_EnumDomainGroups_num_entries = -1; -static gint hf_samr_samr_AcctFlags_ACB_PWNOTREQ = -1; -static gint hf_samr_samr_UserInfo3_bad_password_count = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE = -1; -static gint hf_samr_samr_ChangePasswordUser_new_lm_crypted = -1; -static gint hf_samr_samr_LookupNames_types = -1; -static gint hf_samr_samr_SamEntry_idx = -1; -static gint hf_samr_samr_UserInfo3_logon_hours = -1; -static gint hf_samr_samr_ChangeReject_unknown1 = -1; -static gint hf_samr_samr_ChangePasswordUser3_account = -1; -static gint hf_samr_samr_DomInfo8_sequence_num = -1; -static gint hf_samr_samr_ValidatePasswordInfo_pwd_history = -1; -static gint hf_samr_samr_Connect3_unknown = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex2_idx = -1; -static gint hf_samr_samr_ConnectInfo1_unknown2 = -1; -static gint hf_samr_samr_AliasInfoAll_name = -1; -static gint hf_samr_samr_GroupInfo_description = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_OWNER = -1; -static gint hf_samr_samr_EnumDomainAliases_sam = -1; -static gint hf_samr_samr_LogonHours_units_per_week = -1; -static gint hf_samr_samr_DomGeneralInformation_role = -1; -static gint hf_samr_samr_DomainInfo_info13 = -1; -static gint hf_samr_samr_SetSecurity_sec_info = -1; -static gint hf_samr_samr_QueryDisplayInfo2_buf_size = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT = -1; -static gint hf_samr_samr_DomGeneralInformation2_lockout_threshold = -1; -static gint hf_samr_samr_UserInfo21_last_password_change = -1; -static gint hf_samr_samr_ChangePasswordUser2_account = -1; -static gint hf_samr_samr_ChangePasswordUser3_lm_password = -1; -static gint hf_samr_samr_UserInfo3_account_name = -1; -static gint hf_samr_samr_Connect3_system_name = -1; -static gint hf_samr_samr_UserInfo_info11 = -1; -static gint hf_samr_samr_DomainInfo_info9 = -1; -static gint hf_samr_samr_SamEntry_name = -1; -static gint hf_samr_lsa_Strings_count = -1; -static gint hf_samr_samr_UserInfo3_acct_flags = -1; +static gint hf_samr_samr_ValidatePasswordReq2_password = -1; +static gint hf_samr_samr_UserInfo_info5 = -1; +static gint hf_samr_samr_UserInfo5_logon_hours = -1; static gint hf_samr_samr_UserInfo3_allow_password_change = -1; -static gint hf_samr_samr_QueryDomainInfo2_level = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex_name = -1; -static gint hf_samr_samr_ValidatePasswordReq3_info = -1; -static gint hf_samr_samr_ValidatePasswordInfo_lockout_time = -1; +static gint hf_samr_samr_RidWithAttributeArray_count = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES = -1; +static gint hf_samr_samr_UserInfo_info12 = -1; +static gint hf_samr_samr_EnumDomainGroups_resume_handle = -1; static gint hf_samr_samr_UserInfo17_acct_expiry = -1; -static gint hf_samr_samr_DomInfo1_password_history_length = -1; -static gint hf_samr_samr_QueryUserInfo_info = -1; -static gint hf_samr_samr_DomGeneralInformation_primary = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT = -1; +static gint hf_samr_samr_ConnectInfo_info1 = -1; +static gint hf_samr_samr_EnumDomainAliases_num_entries = -1; +static gint hf_samr_samr_UserInfo21_lm_password_set = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME = -1; +static gint hf_samr_samr_EnumDomains_connect_handle = -1; +static gint hf_samr_samr_SetUserInfo_info = -1; +static gint hf_samr_samr_QueryDomainInfo_level = -1; +static gint hf_samr_samr_ValidatePassword_level = -1; +static gint hf_samr_samr_EnumDomainUsers_sam = -1; +static gint hf_samr_samr_UserInfo26_password_expired = -1; +static gint hf_samr_samr_ValidatePasswordReq3_password = -1; +static gint hf_samr_samr_DeleteAliasMember_sid = -1; +static gint hf_samr_samr_UserInfo26_password = -1; static gint hf_samr_samr_UserInfo5_home_drive = -1; -static gint hf_samr_samr_RemoveMemberFromForeignDomain_sid = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF = -1; -static gint hf_samr_samr_RidWithAttributeArray_rids = -1; -static gint hf_samr_samr_Password_hash = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD = -1; -static gint hf_samr_samr_UserInfo_info25 = -1; -static gint hf_samr_samr_UserInfo3_home_drive = -1; -static gint hf_samr_samr_QueryDisplayInfo_start_idx = -1; -static gint hf_samr_samr_UserInfo_info13 = -1; -static gint hf_samr_samr_ChangePasswordUser2_nt_password = -1; -static gint hf_samr_samr_ValidatePasswordInfo_bad_pwd_count = -1; -static gint hf_samr_samr_QueryGroupMember_rids = -1; +static gint hf_samr_samr_AliasInfoAll_description = -1; +static gint hf_samr_samr_ChangePasswordUser3_nt_password = -1; +static gint hf_samr_samr_OemChangePasswordUser2_account = -1; +static gint hf_samr_samr_DispInfo_info4 = -1; +static gint hf_samr_samr_GroupInfo_attributes = -1; +static gint hf_samr_samr_AcctFlags_ACB_PWNOTREQ = -1; +static gint hf_samr_samr_AliasInfo_all = -1; +static gint hf_samr_samr_DomGeneralInformation_num_aliases = -1; +static gint hf_samr_samr_ValidatePasswordRep_ctr1 = -1; static gint hf_samr_samr_UserInfo21_password_expired = -1; -static gint hf_samr_samr_EnumDomains_buf_size = -1; -static gint hf_samr_samr_DomInfo1_max_password_age = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER = -1; -static gint hf_samr_samr_GroupInfoAll_description = -1; -static gint hf_samr_samr_UserInfo3_logon_count = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY = -1; -static gint hf_samr_samr_GroupInfo_name = -1; -static gint hf_samr_samr_UserInfo3_force_password_change = -1; -static gint hf_samr_samr_ChangePasswordUser_nt_present = -1; -static gint hf_samr_samr_UserInfo21_home_directory = -1; -static gint hf_samr_samr_UserInfo_info12 = -1; -static gint hf_samr_samr_OemChangePasswordUser2_password = -1; -static gint hf_samr_samr_RidTypeArray_types = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS = -1; -static gint hf_samr_opnum = -1; -static gint hf_samr_samr_ChangePasswordUser3_server = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex2_name = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO = -1; +static gint hf_samr_samr_DispEntryFullGroup_idx = -1; +static gint hf_samr_samr_UserInfo21_country_code = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS = -1; static gint hf_samr_samr_UserInfo14_workstations = -1; -static gint hf_samr_samr_DispInfo_info3 = -1; -static gint hf_samr_samr_DomainInfo_info8 = -1; -static gint hf_samr_samr_DispInfoGeneral_entries = -1; -static gint hf_samr_samr_UserInfo8_full_name = -1; -static gint hf_samr_samr_UserInfo21_logon_count = -1; -static gint hf_samr_samr_UserInfo21_code_page = -1; -static gint hf_samr_samr_DispEntryFullGroup_acct_flags = -1; -static gint hf_samr_samr_SetUserInfo_info = -1; -static gint hf_samr_samr_OpenDomain_sid = -1; -static gint hf_samr_samr_DispEntryFull_account_name = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH = -1; +static gint hf_samr_samr_GroupInfoDescription_description = -1; +static gint hf_samr_samr_RidWithAttributeArray_rids = -1; +static gint hf_samr_samr_UserInfo21_acct_flags = -1; static gint hf_samr_samr_CreateUser2_acct_flags = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE = -1; -static gint hf_samr_samr_DomainInfo_info1 = -1; -static gint hf_samr_samr_ValidatePasswordRep_ctr1 = -1; -static gint hf_samr_samr_UserInfo18_nt_pwd_active = -1; -static gint hf_samr_samr_AcctFlags_ACB_DOMTRUST = -1; -static gint hf_samr_samr_ChangePasswordUser_lm_cross = -1; -static gint hf_samr_samr_UserInfo3_profile_path = -1; -static gint hf_samr_samr_UserInfo21_unknown4 = -1; -static gint hf_samr_samr_DomInfo13_domain_create_time = -1; -static gint hf_samr_samr_AcctFlags_ACB_WSTRUST = -1; +static gint hf_samr_samr_CryptPasswordEx_data = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC = -1; +static gint hf_samr_samr_ValidatePasswordReq3_info = -1; +static gint hf_samr_samr_DispInfoGeneral_entries = -1; +static gint hf_samr_samr_GetMembersInAlias_sids = -1; +static gint hf_samr_samr_EnumDomainGroups_num_entries = -1; +static gint hf_samr_samr_SetBootKeyInformation_unknown1 = -1; +static gint hf_samr_samr_ValidatePasswordReq2_password_matched = -1; +static gint hf_samr_samr_DispEntryFull_description = -1; +static gint hf_samr_samr_UserInfo21_parameters = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT = -1; static gint hf_samr_samr_DispEntryAscii_idx = -1; +static gint hf_samr_samr_ValidatePasswordReq3_clear_lockout = -1; +static gint hf_samr_samr_DomGeneralInformation_role = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS = -1; static gint hf_samr_samr_DomInfo5_domain_name = -1; -static gint hf_samr_samr_UserInfo5_logon_count = -1; -static gint hf_samr_samr_UserInfo5_last_logoff = -1; -static gint hf_samr_samr_ValidatePassword_level = -1; -static gint hf_samr_samr_UserInfo6_full_name = -1; -static gint hf_samr_samr_LookupRids_names = -1; -static gint hf_samr_samr_UserInfo10_home_drive = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP = -1; +static gint hf_samr_samr_EnumDomainUsers_resume_handle = -1; +static gint hf_samr_samr_UserInfo5_primary_gid = -1; +static gint hf_samr_samr_UserInfo5_workstations = -1; +static gint hf_samr_samr_Connect3_unknown = -1; static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS = -1; -static gint hf_samr_samr_RemoveMultipleMembersFromAlias_sids = -1; -static gint hf_samr_samr_OemChangePasswordUser2_account = -1; +static gint hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED = -1; +static gint hf_samr_samr_UserInfo5_last_logon = -1; +static gint hf_samr_samr_UserInfo16_acct_flags = -1; +static gint hf_samr_samr_DomInfo12_lockout_window = -1; +static gint hf_samr_samr_ValidatePasswordRep_ctr3 = -1; +static gint hf_samr_samr_GroupInfo_all2 = -1; +static gint hf_samr_samr_LookupDomain_sid = -1; +static gint hf_samr_samr_UserInfo3_home_drive = -1; +static gint hf_samr_samr_LogonHours_units_per_week = -1; +static gint hf_samr_samr_EnumDomainAliases_max_size = -1; +static gint hf_samr_samr_UserInfo21_nt_password_set = -1; +static gint hf_samr_samr_ValidatePassword_req = -1; +static gint hf_samr_samr_DomGeneralInformation_num_groups = -1; +static gint hf_samr_samr_SamArray_entries = -1; +static gint hf_samr_samr_ValidationBlob_data = -1; +static gint hf_samr_samr_UserInfo21_code_page = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO = -1; +static gint hf_samr_samr_DispInfoFullGroups_count = -1; +static gint hf_samr_samr_ValidatePasswordRep_ctr2 = -1; +static gint hf_samr_samr_GetBootKeyInformation_domain_handle = -1; +static gint hf_samr_samr_UserInfo_info18 = -1; static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS = -1; -static gint hf_samr_samr_UserInfo_info4 = -1; -static gint hf_samr_samr_QueryDisplayInfo2_info = -1; -static gint hf_samr_samr_DomInfo1_password_properties = -1; -static gint hf_samr_samr_UserInfo21_logon_script = -1; -static gint hf_samr_samr_AcctFlags_ACB_AUTOLOCK = -1; -static gint hf_samr_samr_GetBootKeyInformation_unknown = -1; -static gint hf_samr_samr_RidWithAttribute_attributes = -1; -static gint hf_samr_samr_CryptPassword_data = -1; -static gint hf_samr_samr_AliasInfo_name = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT = -1; +static gint hf_samr_samr_ChangePasswordUser3_nt_verifier = -1; +static gint hf_samr_samr_UserInfo_info13 = -1; +static gint hf_samr_samr_UserInfo21_fields_present = -1; +static gint hf_samr_samr_UserInfo21_primary_gid = -1; +static gint hf_samr_samr_GroupInfo_all = -1; +static gint hf_samr_samr_Connect5_system_name = -1; +static gint hf_samr_samr_QueryDisplayInfo3_buf_size = -1; +static gint hf_samr_samr_ChangePasswordUser_old_lm_crypted = -1; +static gint hf_samr_samr_AcctFlags_ACB_DOMTRUST = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE = -1; +static gint hf_samr_samr_QueryDisplayInfo_max_entries = -1; static gint hf_samr_samr_UserInfo3_last_password_change = -1; -static gint hf_samr_samr_Shutdown_connect_handle = -1; +static gint hf_samr_samr_ValidatePasswordReq2_hash = -1; +static gint hf_samr_samr_UserInfo5_account_name = -1; +static gint hf_samr_samr_GetDomPwInfo_info = -1; +static gint hf_samr_samr_ChangeReject_unknown1 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH = -1; +static gint hf_samr_samr_UserInfo_info16 = -1; +static gint hf_samr_samr_UserInfo21_logon_script = -1; static gint hf_samr_sec_desc_buf_len = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2 = -1; -static gint hf_samr_samr_ValidationBlob_length = -1; -static gint hf_samr_samr_DispEntryGeneral_idx = -1; -static gint hf_samr_samr_QueryDisplayInfo2_start_idx = -1; +static gint hf_samr_samr_LookupNames_names = -1; +static gint hf_samr_samr_UserInfo_info14 = -1; +static gint hf_samr_samr_SetDsrmPassword_name = -1; +static gint hf_samr_samr_DispEntryGeneral_acct_flags = -1; +static gint hf_samr_samr_AcctFlags_ACB_PW_EXPIRED = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 = -1; +static gint hf_samr_samr_UserInfo3_last_logoff = -1; +static gint hf_samr_samr_QueryUserInfo2_info = -1; +static gint hf_samr_samr_ValidatePasswordRepCtr_status = -1; +static gint hf_samr_samr_DomInfo1_max_password_age = -1; +static gint hf_samr_samr_DispEntryGeneral_full_name = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex_name = -1; +static gint hf_samr_samr_DomInfo13_sequence_num = -1; +static gint hf_samr_samr_QueryDisplayInfo2_returned_size = -1; +static gint hf_samr_samr_UserInfo6_full_name = -1; +static gint hf_samr_samr_ChangePasswordUser2_lm_change = -1; +static gint hf_samr_samr_LogonHours_bits = -1; +static gint hf_samr_samr_ChangePasswordUser3_lm_change = -1; +static gint hf_samr_samr_LookupNames_num_names = -1; static gint hf_samr_samr_UserInfo21_logon_hours = -1; -static gint hf_samr_samr_UserInfo21_country_code = -1; +static gint hf_samr_lsa_Strings_count = -1; +static gint hf_samr_samr_UserInfo11_logon_script = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN = -1; +static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown1 = -1; +static gint hf_samr_lsa_Strings_names = -1; +static gint hf_samr_samr_UserInfo21_bad_password_count = -1; +static gint hf_samr_samr_EnumDomains_num_entries = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS = -1; +static gint hf_samr_samr_UserInfo5_last_password_change = -1; +static gint hf_samr_samr_AcctFlags_ACB_TEMPDUP = -1; +static gint hf_samr_samr_ChangePasswordUser_new_lm_crypted = -1; +static gint hf_samr_samr_UserInfo3_primary_gid = -1; +static gint hf_samr_samr_UserInfo_info3 = -1; +static gint hf_samr_samr_UserInfo_info23 = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY = -1; +static gint hf_samr_samr_UserInfo_info17 = -1; +static gint hf_samr_samr_UserInfo5_home_directory = -1; static gint hf_samr_samr_SetDsrmPassword_hash = -1; -static gint hf_samr_samr_DomainInfo_general = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY = -1; -static gint hf_samr_samr_UserInfo5_description = -1; -static gint hf_samr_samr_DomInfo7_role = -1; -static gint hf_samr_samr_UserInfo21_workstations = -1; -static gint hf_samr_samr_DispEntryGeneral_description = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS = -1; -static gint hf_samr_samr_ValidatePasswordReq_req3 = -1; -static gint hf_samr_alias_access_mask = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE = -1; +static gint hf_samr_samr_UserInfo21_private = -1; +static gint hf_samr_samr_QueryDisplayInfo2_info = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME = -1; +static gint hf_samr_samr_QueryAliasInfo_info = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD = -1; +static gint hf_samr_samr_DomainInfo_info1 = -1; +static gint hf_samr_samr_SetSecurity_sdbuf = -1; +static gint hf_samr_samr_ChangePasswordUser3_dominfo = -1; +static gint hf_samr_samr_CreateUser2_account_name = -1; +static gint hf_samr_connect_access_mask = -1; +static gint hf_samr_samr_CreateDomainGroup_name = -1; +static gint hf_samr_samr_DispEntryGeneral_account_name = -1; +static gint hf_samr_samr_ValidatePasswordRepCtr_info = -1; static gint hf_samr_samr_ChangePasswordUser2_nt_verifier = -1; +static gint hf_samr_samr_AddGroupMember_flags = -1; +static gint hf_samr_samr_UserInfo_info1 = -1; +static gint hf_samr_samr_UserInfo3_home_directory = -1; +static gint hf_samr_samr_QueryGroupInfo_level = -1; +static gint hf_samr_samr_ChangePasswordUser2_account = -1; static gint hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION = -1; -static gint hf_samr_samr_EnumDomains_connect_handle = -1; -static gint hf_samr_samr_UserInfo_info18 = -1; -static gint hf_samr_samr_UserInfo21_force_password_change = -1; -static gint hf_samr_samr_UserInfo21_nt_password = -1; -static gint hf_samr_samr_DomGeneralInformation_domain_server_state = -1; -static gint hf_samr_samr_SetBootKeyInformation_unknown3 = -1; -static gint hf_samr_samr_EnumDomainUsers_num_entries = -1; -static gint hf_samr_samr_ValidatePasswordReq2_info = -1; -static gint hf_samr_samr_LookupNames_num_names = -1; -static gint hf_samr_samr_QueryDisplayInfo3_level = -1; -static gint hf_samr_samr_RidTypeArray_count = -1; -static gint hf_samr_samr_QueryDisplayInfo2_max_entries = -1; -static gint hf_samr_samr_ValidatePasswordInfo_last_password_change = -1; +static gint hf_samr_samr_DomInfo1_password_properties = -1; +static gint hf_samr_samr_ChangePasswordUser3_lm_password = -1; +static gint hf_samr_samr_DispInfo_info1 = -1; +static gint hf_samr_samr_Connect_system_name = -1; +static gint hf_samr_samr_DomInfo8_sequence_num = -1; +static gint hf_samr_samr_UserInfo1_account_name = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_RID = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE = -1; +static gint hf_samr_samr_UserInfo24_password = -1; +static gint hf_samr_samr_DomInfo12_lockout_threshold = -1; +static gint hf_samr_samr_DomGeneralInformation2_lockout_window = -1; static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS = -1; -static gint hf_samr_samr_ChangePasswordUser3_dominfo = -1; -static gint hf_samr_samr_ValidationBlob_data = -1; -static gint hf_samr_samr_UserInfo18_lm_pwd_active = -1; -static gint hf_samr_samr_UserInfo_info26 = -1; -static gint hf_samr_samr_GroupInfoAll_attributes = -1; -static gint hf_samr_samr_DomainInfo_info7 = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER = -1; -static gint hf_samr_samr_EnumDomains_num_entries = -1; -static gint hf_samr_samr_UserInfo21_parameters = -1; -static gint hf_samr_samr_DispEntryGeneral_acct_flags = -1; -static gint hf_samr_connect_handle = -1; -static gint hf_samr_samr_AcctFlags_ACB_TEMPDUP = -1; -static gint hf_samr_samr_DispInfoFullGroups_count = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 = -1; -static gint hf_samr_samr_GetAliasMembership_rids = -1; -static gint hf_samr_samr_UserInfo6_account_name = -1; -static gint hf_samr_connect_access_mask = -1; -static gint hf_samr_samr_UserInfo_info3 = -1; -static gint hf_samr_samr_Connect5_level_in = -1; -static gint hf_samr_samr_DomInfo12_lockout_window = -1; -static gint hf_samr_samr_RidToSid_sid = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC = -1; -static gint hf_samr_samr_GetUserPwInfo_info = -1; -static gint hf_samr_samr_EnumDomainUsers_acct_flags = -1; -static gint hf_samr_samr_DomainInfo_info6 = -1; -static gint hf_samr_samr_CreateDomAlias_alias_name = -1; -static gint hf_samr_samr_EnumDomainUsers_sam = -1; -static gint hf_samr_samr_DispInfo_info5 = -1; +static gint hf_samr_alias_handle = -1; +static gint hf_samr_samr_DispInfoGeneral_count = -1; +static gint hf_samr_samr_UserInfo3_profile_path = -1; +static gint hf_samr_samr_AcctFlags_ACB_HOMDIRREQ = -1; +static gint hf_samr_samr_Ids_count = -1; +static gint hf_samr_samr_ChangePasswordUser3_reject = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY = -1; static gint hf_samr_samr_GetGroupsForUser_rids = -1; -static gint hf_samr_samr_UserInfo3_last_logoff = -1; -static gint hf_samr_samr_ValidatePasswordRepCtr_info = -1; -static gint hf_samr_samr_SetGroupInfo_level = -1; +static gint hf_samr_samr_UserInfo23_info = -1; +static gint hf_samr_samr_UserInfo18_password_expired = -1; +static gint hf_samr_samr_UserInfo25_info = -1; +static gint hf_samr_samr_OpenDomain_sid = -1; +static gint hf_samr_samr_GetAliasMembership_sids = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE = -1; +static gint hf_samr_samr_DispEntryFullGroup_account_name = -1; static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT = -1; +static gint hf_samr_samr_AddAliasMember_sid = -1; static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD = -1; -static gint hf_samr_samr_SetUserInfo2_level = -1; -static gint hf_samr_samr_UserInfo5_acct_expiry = -1; +static gint hf_samr_samr_GetBootKeyInformation_unknown = -1; +static gint hf_samr_samr_Connect2_system_name = -1; +static gint hf_samr_samr_DomInfo1_password_history_length = -1; +static gint hf_samr_samr_UserInfo25_password = -1; +static gint hf_samr_samr_ValidatePasswordInfo_fields_present = -1; +static gint hf_samr_samr_ValidatePasswordReq_req3 = -1; +static gint hf_samr_samr_UserInfo7_account_name = -1; +static gint hf_samr_samr_UserInfo9_primary_gid = -1; +static gint hf_samr_samr_DomainInfo_info3 = -1; +static gint hf_samr_samr_UserInfo3_logon_hours = -1; +static gint hf_samr_samr_UserInfo21_acct_expiry = -1; +static gint hf_samr_samr_ChangePasswordUser_new_nt_crypted = -1; +static gint hf_samr_samr_DomainInfo_info6 = -1; +static gint hf_samr_samr_ChangePasswordUser_nt_present = -1; +static gint hf_samr_samr_ValidatePasswordReq_req2 = -1; +static gint hf_samr_samr_SetDomainInfo_level = -1; +static gint hf_samr_samr_UserInfo21_lm_password = -1; +static gint hf_samr_samr_GroupInfo_description = -1; +static gint hf_samr_samr_DispEntryFull_idx = -1; +static gint hf_samr_samr_EnumDomains_resume_handle = -1; +static gint hf_samr_samr_DomGeneralInformation_num_users = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY = -1; +static gint hf_samr_samr_QueryDisplayInfo3_level = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED = -1; +static gint hf_samr_samr_AcctFlags_ACB_SVRTRUST = -1; +static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown2 = -1; +static gint hf_samr_samr_UserInfo1_comment = -1; +static gint hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY = -1; +static gint hf_samr_samr_RemoveMultipleMembersFromAlias_sids = -1; +static gint hf_samr_samr_DomainInfo_info7 = -1; +static gint hf_samr_samr_DomGeneralInformation2_lockout_duration = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS = -1; +static gint hf_samr_samr_ValidatePasswordReq2_info = -1; +static gint hf_samr_samr_EnumDomains_buf_size = -1; +static gint hf_samr_samr_DomGeneralInformation2_lockout_threshold = -1; +static gint hf_samr_samr_EnumDomainGroups_sam = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD = -1; +static gint hf_samr_samr_UserInfo21_unknown4 = -1; +static gint hf_samr_samr_AcctFlags_ACB_PWNOEXP = -1; +static gint hf_samr_samr_CreateDomAlias_alias_name = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2 = -1; +static gint hf_samr_samr_UserInfo_info25 = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT = -1; +static gint hf_samr_samr_Connect3_system_name = -1; +static gint hf_samr_samr_DomInfo3_force_logoff_time = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME = -1; +static gint hf_samr_samr_DomInfo13_modified_count_at_last_promotion = -1; +static gint hf_samr_samr_RidTypeArray_types = -1; +static gint hf_samr_samr_QueryDisplayInfo2_max_entries = -1; +static gint hf_samr_samr_DomGeneralInformation_force_logoff_time = -1; +static gint hf_samr_samr_DispInfoFull_entries = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS = -1; +static gint hf_samr_samr_ChangeReject_reason = -1; +static gint hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon = -1; +static gint hf_samr_samr_ChangePasswordUser_nt_cross = -1; +static gint hf_samr_samr_ChangePasswordUser_cross1_present = -1; +static gint hf_samr_samr_UserInfo8_full_name = -1; +static gint hf_samr_samr_DispInfo_info2 = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID = -1; +static gint hf_samr_samr_SetBootKeyInformation_unknown2 = -1; +static gint hf_samr_samr_DomGeneralInformation2_general = -1; +static gint hf_samr_samr_EnumDomainAliases_sam = -1; +static gint hf_samr_samr_DomGeneralInformation_sequence_num = -1; +static gint hf_samr_samr_UserInfo21_account_name = -1; +static gint hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD = -1; static gint hf_samr_samr_Connect5_info_in = -1; -static gint hf_samr_samr_UserInfo21_nt_password_set = -1; +static gint hf_samr_samr_Connect5_level_in = -1; +static gint hf_samr_samr_UserInfo13_description = -1; +static gint hf_samr_samr_UserInfo18_nt_pwd_active = -1; +static gint hf_samr_samr_UserInfo_info2 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF = -1; +static gint hf_samr_samr_EnumDomainAliases_resume_handle = -1; +static gint hf_samr_samr_SetBootKeyInformation_unknown3 = -1; +static gint hf_samr_samr_DispInfoAscii_entries = -1; +static gint hf_samr_samr_CreateUser2_access_granted = -1; +static gint hf_samr_samr_GroupInfoAll_num_members = -1; +static gint hf_samr_samr_UserInfo12_profile_path = -1; +static gint hf_samr_samr_AcctFlags_ACB_MNS = -1; +static gint hf_samr_samr_UserInfo1_description = -1; +static gint hf_samr_samr_UserInfo21_nt_password = -1; +static gint hf_samr_samr_UserInfo_info8 = -1; static gint hf_samr_samr_UserInfo_info20 = -1; -static gint hf_samr_alias_handle = -1; -static gint hf_samr_samr_UserInfo5_account_name = -1; -static gint hf_samr_samr_DispInfoFull_entries = -1; -static gint hf_samr_samr_UserInfo5_full_name = -1; -static gint hf_samr_samr_ChangePasswordUser3_lm_verifier = -1; +static gint hf_samr_samr_UserInfo21_buffer = -1; +static gint hf_samr_status = -1; +static gint hf_samr_samr_ValidatePasswordInfo_pwd_history_len = -1; +static gint hf_samr_samr_UserInfo5_logon_count = -1; +static gint hf_samr_samr_UserInfo21_last_password_change = -1; +static gint hf_samr_samr_EnumDomains_sam = -1; +static gint hf_samr_samr_ValidatePasswordReq_req1 = -1; +static gint hf_samr_group_handle = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS = -1; +static gint hf_samr_samr_DispEntryFullGroup_acct_flags = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA = -1; +static gint hf_samr_samr_UserInfo5_description = -1; static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3 = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY = -1; -static gint hf_samr_samr_DispInfoAscii_count = -1; -static gint hf_samr_samr_GetMembersInAlias_sids = -1; -static gint hf_samr_samr_QueryDisplayInfo3_info = -1; -static gint hf_samr_samr_OemChangePasswordUser2_hash = -1; -static gint hf_samr_samr_QueryUserInfo2_level = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT = -1; -static gint hf_samr_samr_ValidatePasswordReq3_clear_lockout = -1; +static gint hf_samr_samr_DispInfoFullGroups_entries = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE = -1; +static gint hf_samr_samr_ValidatePasswordInfo_pwd_history = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex2_name = -1; +static gint hf_samr_samr_OemChangePasswordUser2_password = -1; +static gint hf_samr_samr_QueryDisplayInfo_info = -1; +static gint hf_samr_samr_UserInfo_info9 = -1; +static gint hf_samr_samr_UserInfo_info26 = -1; +static gint hf_samr_samr_ChangePasswordUser2_lm_verifier = -1; +static gint hf_samr_samr_UserInfo10_home_directory = -1; +static gint hf_samr_samr_CryptPassword_data = -1; +static gint hf_samr_samr_SetGroupInfo_info = -1; +static gint hf_samr_samr_UserInfo2_code_page = -1; +static gint hf_samr_samr_UserInfo5_profile_path = -1; +static gint hf_samr_samr_AliasInfoAll_name = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex_idx = -1; +static gint hf_samr_samr_RidToSid_sid = -1; +static gint hf_samr_samr_DomInfo1_min_password_length = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO = -1; +static gint hf_samr_samr_UserInfo5_last_logoff = -1; +static gint hf_samr_samr_UserInfo18_lm_pwd_active = -1; +static gint hf_samr_samr_EnumDomainUsers_num_entries = -1; static gint hf_samr_samr_Connect4_client_version = -1; +static gint hf_samr_samr_UserInfo18_lm_pwd = -1; +static gint hf_samr_samr_UserInfo5_bad_password_count = -1; +static gint hf_samr_samr_RidTypeArray_count = -1; +static gint hf_samr_samr_AliasInfo_name = -1; +static gint hf_samr_samr_UserInfo18_nt_pwd = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO = -1; +static gint hf_samr_connect_handle = -1; +static gint hf_samr_samr_DomainInfo_info9 = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_OWNER = -1; static gint hf_samr_samr_GetDisplayEnumerationIndex_level = -1; -static gint hf_samr_samr_UserInfo5_workstations = -1; -static gint hf_samr_samr_DispEntryFullGroup_account_name = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME = -1; -static gint hf_samr_samr_UserInfo1_comment = -1; -static gint hf_samr_samr_QueryDisplayInfo_total_size = -1; -static gint hf_samr_samr_EnumDomains_sam = -1; -static gint hf_samr_samr_UserInfo2_code_page = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS = -1; +static gint hf_samr_samr_Connect5_level_out = -1; +static gint hf_samr_samr_UserInfo21_comment = -1; +static gint hf_samr_samr_DispInfo_info5 = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER = -1; +static gint hf_samr_samr_QueryDomainInfo2_info = -1; +static gint hf_samr_samr_UserInfo5_logon_script = -1; +static gint hf_samr_samr_DomainInfo_general = -1; +static gint hf_samr_samr_UserInfo_info11 = -1; +static gint hf_samr_samr_DomGeneralInformation_primary = -1; +static gint hf_samr_samr_UserInfo21_last_logon = -1; +static gint hf_samr_samr_DomInfo13_domain_create_time = -1; +static gint hf_samr_samr_UserInfo24_password_expired = -1; +static gint hf_samr_samr_UserInfo3_full_name = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION = -1; +static gint hf_samr_samr_GetAliasMembership_rids = -1; +static gint hf_samr_samr_ValidationBlob_length = -1; +static gint hf_samr_samr_Connect4_system_name = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG = -1; +static gint hf_samr_samr_DomainInfo_info13 = -1; +static gint hf_samr_samr_ValidatePasswordInfo_last_password_change = -1; +static gint hf_samr_samr_DomInfo8_domain_create_time = -1; +static gint hf_samr_samr_Connect5_info_out = -1; +static gint hf_samr_samr_DispEntryGeneral_description = -1; +static gint hf_samr_samr_QueryDisplayInfo2_start_idx = -1; +static gint hf_samr_samr_GroupInfoAll_name = -1; +static gint hf_samr_samr_UserInfo_info24 = -1; +static gint hf_samr_samr_QueryDisplayInfo3_start_idx = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON = -1; +static gint hf_samr_samr_UserInfo3_workstations = -1; +static gint hf_samr_samr_ChangePasswordUser_old_nt_crypted = -1; +static gint hf_samr_samr_QueryDisplayInfo3_returned_size = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3 = -1; +static gint hf_samr_samr_QueryAliasInfo_level = -1; +static gint hf_samr_samr_SamArray_count = -1; +static gint hf_samr_samr_QuerySecurity_sdbuf = -1; +static gint hf_samr_samr_DispEntryFullGroup_description = -1; +static gint hf_samr_samr_ConnectInfo1_client_version = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES = -1; +static gint hf_samr_samr_Shutdown_connect_handle = -1; +static gint hf_samr_samr_UserInfo10_home_drive = -1; +static gint hf_samr_samr_QueryUserInfo_level = -1; +static gint hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT = -1; +static gint hf_samr_samr_DomInfo7_role = -1; +static gint hf_samr_samr_DomGeneralInformation_domain_server_state = -1; +static gint hf_samr_samr_OemChangePasswordUser2_hash = -1; +static gint hf_samr_samr_UserInfo1_full_name = -1; +static gint hf_samr_samr_AcctFlags_ACB_AUTOLOCK = -1; +static gint hf_samr_opnum = -1; +static gint hf_samr_samr_UserInfo3_logon_script = -1; +static gint hf_samr_samr_ValidatePasswordReq3_hash = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT = -1; +static gint hf_samr_samr_EnumDomainUsers_acct_flags = -1; +static gint hf_samr_samr_SetAliasInfo_info = -1; +static gint hf_samr_domain_access_mask = -1; +static gint hf_samr_samr_LookupRids_names = -1; +static gint hf_samr_user_access_mask = -1; static gint hf_samr_samr_DomGeneralInformation_unknown3 = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES = -1; -static gint hf_samr_samr_QueryDisplayInfo_buf_size = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER = -1; -static gint hf_samr_samr_QueryGroupInfo_level = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME = -1; +static gint hf_samr_samr_DomGeneralInformation_domain_name = -1; +static gint hf_samr_samr_SamEntry_idx = -1; +static gint hf_samr_samr_UserInfo21_buf_count = -1; +static gint hf_samr_samr_ChangeReject_unknown2 = -1; +static gint hf_samr_samr_UserInfo21_full_name = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH = -1; +static gint hf_samr_samr_UserInfo21_allow_password_change = -1; +static gint hf_samr_samr_GetUserPwInfo_info = -1; +static gint hf_samr_samr_SetSecurity_sec_info = -1; +static gint hf_samr_samr_UserInfo3_last_logon = -1; +static gint hf_samr_samr_UserInfo3_bad_password_count = -1; +static gint hf_samr_samr_ChangePasswordUser3_account = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP = -1; +static gint hf_samr_samr_ValidatePasswordInfo_lockout_time = -1; +static gint hf_samr_samr_ValidatePasswordInfo_bad_pwd_count = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE = -1; +static gint hf_samr_samr_DispInfoFull_count = -1; +static gint hf_samr_samr_ValidatePasswordReq1_info = -1; +static gint hf_samr_samr_UserInfo_info4 = -1; +static gint hf_samr_samr_AcctFlags_ACB_DISABLED = -1; +static gint hf_samr_samr_SetDsrmPassword_unknown = -1; +static gint hf_samr_samr_UserInfo_info6 = -1; +static gint hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH = -1; +static gint hf_samr_samr_UserInfo_info21 = -1; +static gint hf_samr_samr_LookupRids_types = -1; +static gint hf_samr_group_access_mask = -1; +static gint hf_samr_samr_UserInfo_info10 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY = -1; +static gint hf_samr_samr_ValidatePasswordInfo_bad_password_time = -1; static gint hf_samr_samr_SetAliasInfo_level = -1; -static gint hf_samr_samr_UserInfo21_buffer = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP = -1; +static gint hf_samr_samr_UserInfo21_force_password_change = -1; +static gint hf_samr_samr_PwInfo_password_properties = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE = -1; +static gint hf_samr_samr_UserInfo1_primary_gid = -1; +static gint hf_samr_samr_GroupInfoAll_description = -1; +static gint hf_samr_samr_LookupRids_num_rids = -1; +static gint hf_samr_samr_AliasInfo_description = -1; +static gint hf_samr_domain_handle = -1; +static gint hf_samr_samr_QueryUserInfo_info = -1; +static gint hf_samr_samr_SamEntry_name = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN = -1; +static gint hf_samr_samr_QueryDisplayInfo_total_size = -1; +static gint hf_samr_samr_QueryDomainInfo2_level = -1; +static gint hf_samr_samr_ValidatePassword_rep = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE = -1; +static gint hf_samr_samr_DispEntryFull_account_name = -1; +static gint hf_samr_samr_QuerySecurity_sec_info = -1; +static gint hf_samr_samr_QueryGroupInfo_info = -1; +static gint hf_samr_samr_ValidatePasswordReq3_account = -1; +static gint hf_samr_user_handle = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC = -1; +static gint hf_samr_samr_Password_hash = -1; +static gint hf_samr_samr_GetDomPwInfo_domain_name = -1; static gint hf_samr_samr_QueryDisplayInfo_level = -1; -static gint hf_samr_samr_SetDsrmPassword_unknown = -1; -static gint hf_samr_samr_UserInfo5_last_password_change = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP = -1; -static gint hf_samr_samr_QueryDisplayInfo_returned_size = -1; -static gint hf_samr_samr_UserInfo21_allow_password_change = -1; -static gint hf_samr_samr_ConnectInfo_info1 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME = -1; -static gint hf_samr_samr_AliasInfoAll_description = -1; +static gint hf_samr_samr_UserInfo2_comment = -1; +static gint hf_samr_samr_UserInfo21_home_drive = -1; static gint proto_dcerpc_samr = -1; /* Version information */ @@ -2006,7 +2006,7 @@ struct access_mask_info samr_connect_access_mask_info = { NULL /* Standard mapping table */ }; int -samr_dissect_bitmap_ConnectAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_ConnectAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, int hf_index _U_, guint32 param _U_) { offset = dissect_nt_access_mask( tvb, offset, pinfo, tree, di, drep, hf_samr_connect_access_mask, @@ -2029,7 +2029,7 @@ struct access_mask_info samr_alias_access_mask_info = { NULL /* Standard mapping table */ }; int -samr_dissect_bitmap_AliasAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_AliasAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, int hf_index _U_, guint32 param _U_) { offset = dissect_nt_access_mask( tvb, offset, pinfo, tree, di, drep, hf_samr_alias_access_mask, @@ -2052,7 +2052,7 @@ struct access_mask_info samr_group_access_mask_info = { NULL /* Standard mapping table */ }; int -samr_dissect_bitmap_GroupAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_GroupAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, int hf_index _U_, guint32 param _U_) { offset = dissect_nt_access_mask( tvb, offset, pinfo, tree, di, drep, hf_samr_group_access_mask, @@ -2081,7 +2081,7 @@ struct access_mask_info samr_domain_access_mask_info = { NULL /* Standard mapping table */ }; int -samr_dissect_bitmap_DomainAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_DomainAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, int hf_index _U_, guint32 param _U_) { offset = dissect_nt_access_mask( tvb, offset, pinfo, tree, di, drep, hf_samr_domain_access_mask, @@ -2110,7 +2110,7 @@ struct access_mask_info samr_user_access_mask_info = { NULL /* Standard mapping table */ }; int -samr_dissect_bitmap_UserAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_UserAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, int hf_index _U_, guint32 param _U_) { offset = dissect_nt_access_mask( tvb, offset, pinfo, tree, di, drep, hf_samr_user_access_mask, @@ -2118,20 +2118,20 @@ samr_dissect_bitmap_UserAccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo return offset; } static int -cnf_dissect_lsa_AsciiString(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, guint32 param _U_, int hfindex) +cnf_dissect_lsa_AsciiString(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, guint32 param _U_, int hfindex) { offset = dissect_ndr_counted_ascii_string(tvb, offset, pinfo, tree, di, drep, hfindex, 0); return offset; } static int -cnf_dissect_hyper(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, guint32 param _U_, int hfindex) +cnf_dissect_hyper(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, guint32 param _U_, int hfindex) { offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, di, drep, hfindex, NULL); return offset; } static int -cnf_dissect_sec_desc_buf_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep) +cnf_dissect_sec_desc_buf_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep) { guint64 len; e_ctx_hnd *polhnd = NULL; @@ -2174,7 +2174,7 @@ cnf_dissect_sec_desc_buf_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_t return offset; } static int -cnf_dissect_sec_desc_buf(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep) +cnf_dissect_sec_desc_buf(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep) { guint64 len; if(di->conformant_run){ @@ -2189,13 +2189,13 @@ cnf_dissect_sec_desc_buf(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tr return offset; } static int -cnf_dissect_dom_sid2(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep) +cnf_dissect_dom_sid2(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep) { offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, di, drep); return offset; } static int -cnf_dissect_lsa_SidArray(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep) +cnf_dissect_lsa_SidArray(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep) { offset = dissect_ndr_nt_PSID_ARRAY(tvb, offset, pinfo, tree, di, drep); return offset; @@ -2210,11 +2210,11 @@ cnf_dissect_samr_security_secinfo(tvbuff_t *tvb, int offset, packet_info *pinfo /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] lsa_String *names; */ +/* IDL: [size_is(count)] [unique(1)] lsa_String *names; */ /* IDL: } */ static int -samr_dissect_element_lsa_Strings_count(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_lsa_Strings_count(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_samr_lsa_Strings_count, 0); @@ -2222,7 +2222,7 @@ samr_dissect_element_lsa_Strings_count(tvbuff_t *tvb _U_, int offset _U_, packet } static int -samr_dissect_element_lsa_Strings_names(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_lsa_Strings_names(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, samr_dissect_element_lsa_Strings_names_, NDR_POINTER_UNIQUE, "Pointer to Names (lsa_String)",hf_samr_lsa_Strings_names); @@ -2230,7 +2230,7 @@ samr_dissect_element_lsa_Strings_names(tvbuff_t *tvb _U_, int offset _U_, packet } static int -samr_dissect_element_lsa_Strings_names_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_lsa_Strings_names_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = dissect_ndr_ucarray(tvb, offset, pinfo, tree, di, drep, samr_dissect_element_lsa_Strings_names__); @@ -2238,7 +2238,7 @@ samr_dissect_element_lsa_Strings_names_(tvbuff_t *tvb _U_, int offset _U_, packe } static int -samr_dissect_element_lsa_Strings_names__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_lsa_Strings_names__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset=dissect_ndr_lsa_String(tvb, offset, pinfo, tree, di, drep, 0, hf_samr_lsa_Strings_names); @@ -2246,7 +2246,7 @@ samr_dissect_element_lsa_Strings_names__(tvbuff_t *tvb _U_, int offset _U_, pack } int -samr_dissect_struct_lsa_Strings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) +samr_dissect_struct_lsa_Strings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) { proto_item *item = NULL; proto_tree *tree = NULL; @@ -2291,7 +2291,7 @@ samr_dissect_struct_lsa_Strings(tvbuff_t *tvb _U_, int offset _U_, packet_info * /* IDL: } */ int -samr_dissect_enum_lsa_SidType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_lsa_SidType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) { guint32 parameter=0; if(param){ @@ -2313,7 +2313,7 @@ samr_dissect_enum_lsa_SidType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi /* IDL: } */ int -samr_dissect_enum_RejectReason(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_RejectReason(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) { guint32 parameter=0; if(param){ @@ -2351,7 +2351,7 @@ samr_dissect_enum_RejectReason(tvbuff_t *tvb _U_, int offset _U_, packet_info *p /* IDL: } */ int -samr_dissect_bitmap_AcctFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_AcctFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) { proto_item *item = NULL; proto_tree *tree = NULL; @@ -2602,7 +2602,7 @@ samr_dissect_bitmap_AcctFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi /* IDL: } */ static int -samr_dissect_element_SamEntry_idx(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_SamEntry_idx(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_samr_samr_SamEntry_idx, 0); @@ -2610,7 +2610,7 @@ samr_dissect_element_SamEntry_idx(tvbuff_t *tvb _U_, int offset _U_, packet_info } static int -samr_dissect_element_SamEntry_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_SamEntry_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset=dissect_ndr_lsa_String(tvb, offset, pinfo, tree, di, drep, 0, hf_samr_samr_SamEntry_name); @@ -2618,7 +2618,7 @@ samr_dissect_element_SamEntry_name(tvbuff_t *tvb _U_, int offset _U_, packet_inf } int -samr_dissect_struct_SamEntry(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) +samr_dissect_struct_SamEntry(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) { proto_item *item = NULL; proto_tree *tree = NULL; @@ -2655,7 +2655,7 @@ samr_dissect_struct_SamEntry(tvbuff_t *tvb _U_, int offset _U_, packet_info *pin /* IDL: } */ static int -samr_dissect_element_SamArray_count(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_SamArray_count(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_samr_samr_SamArray_count, 0); @@ -2663,7 +2663,7 @@ samr_dissect_element_SamArray_count(tvbuff_t *tvb _U_, int offset _U_, packet_in } static int -samr_dissect_element_SamArray_entries(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_SamArray_entries(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, samr_dissect_element_SamArray_entries_, NDR_POINTER_UNIQUE, "Pointer to Entries (samr_SamEntry)",hf_samr_samr_SamArray_entries); @@ -2671,7 +2671,7 @@ samr_dissect_element_SamArray_entries(tvbuff_t *tvb _U_, int offset _U_, packet_ } static int -samr_dissect_element_SamArray_entries_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_SamArray_entries_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = dissect_ndr_ucarray(tvb, offset, pinfo, tree, di, drep, samr_dissect_element_SamArray_entries__); @@ -2679,7 +2679,7 @@ samr_dissect_element_SamArray_entries_(tvbuff_t *tvb _U_, int offset _U_, packet } static int -samr_dissect_element_SamArray_entries__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_SamArray_entries__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = samr_dissect_struct_SamEntry(tvb,offset,pinfo,tree,di,drep,hf_samr_samr_SamArray_entries,3|PIDL_SET_COL_INFO); @@ -2687,7 +2687,7 @@ samr_dissect_element_SamArray_entries__(tvbuff_t *tvb _U_, int offset _U_, packe } int -samr_dissect_struct_SamArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) +samr_dissect_struct_SamArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) { proto_item *item = NULL; proto_tree *tree = NULL; @@ -2735,7 +2735,7 @@ samr_dissect_struct_SamArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pin /* IDL: } */ int -samr_dissect_enum_DomainInfoClass(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_DomainInfoClass(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -2757,7 +2757,7 @@ samr_dissect_enum_DomainInfoClass(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: } */ int -samr_dissect_enum_Role(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_Role(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) { guint32 parameter=0; if(param){ @@ -2781,7 +2781,7 @@ samr_dissect_enum_Role(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_ /* IDL: } */ int -samr_dissect_bitmap_PasswordProperties(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) +samr_dissect_bitmap_PasswordProperties(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_) { proto_item *item = NULL; proto_tree *tree = NULL; @@ -2862,7 +2862,7 @@ samr_dissect_bitmap_PasswordProperties(tvbuff_t *tvb _U_, int offset _U_, packet /* IDL: } */ int -samr_dissect_enum_DomainServerState(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_DomainServerState(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) { guint32 parameter=0; if(param){ @@ -2885,7 +2885,7 @@ samr_dissect_enum_DomainServerState(tvbuff_t *tvb _U_, int offset _U_, packet_in /* IDL: } */ static int -samr_dissect_element_DomInfo1_min_password_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_DomInfo1_min_password_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_samr_samr_DomInfo1_min_password_length, 0); @@ -2893,7 +2893,7 @@ samr_dissect_element_DomInfo1_min_password_length(tvbuff_t *tvb _U_, int offset } static int -samr_dissect_element_DomInfo1_password_history_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_DomInfo1_password_history_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_samr_samr_DomInfo1_password_history_length, 0); @@ -2901,7 +2901,7 @@ samr_dissect_element_DomInfo1_password_history_length(tvbuff_t *tvb _U_, int off } static int -samr_dissect_element_DomInfo1_password_properties(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_DomInfo1_password_properties(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = samr_dissect_bitmap_PasswordProperties(tvb, offset, pinfo, tree, di, drep, hf_samr_samr_DomInfo1_password_properties, 0); @@ -2909,7 +2909,7 @@ samr_dissect_element_DomInfo1_password_properties(tvbuff_t *tvb _U_, int offset } static int -samr_dissect_element_DomInfo1_max_password_age(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info *di _U_, guint8 *drep _U_) +samr_dissect_element_DomInfo1_max_password_age(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_) { offset = dissect_ndr_duint32(tvb, offset, pinfo, tree, di, drep, hf_samr_samr_DomInfo1_max_password_age, NULL); @@ -3593,7 +3593,6 @@ samr_dissect_struct_DomInfo13(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_8_BYTES; @@ -3848,7 +3847,6 @@ samr_dissect_struct_Ids(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4014,7 +4012,6 @@ samr_dissect_struct_GroupInfoAll(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4063,7 +4060,6 @@ samr_dissect_struct_GroupInfoAttributes(tvbuff_t *tvb _U_, int offset _U_, packe { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -4106,7 +4102,6 @@ samr_dissect_struct_GroupInfoDescription(tvbuff_t *tvb _U_, int offset _U_, pack { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4141,7 +4136,7 @@ samr_dissect_struct_GroupInfoDescription(tvbuff_t *tvb _U_, int offset _U_, pack /* IDL: } */ int -samr_dissect_enum_GroupInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_GroupInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -4250,7 +4245,7 @@ samr_dissect_GroupInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_ /* IDL: struct { */ /* IDL: uint32 count; */ /* IDL: [unique(1)] [size_is(count)] uint32 *rids; */ -/* IDL: [unique(1)] [size_is(count)] uint32 *types; */ +/* IDL: [size_is(count)] [unique(1)] uint32 *types; */ /* IDL: } */ static int @@ -4314,7 +4309,6 @@ samr_dissect_struct_RidTypeArray(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4379,7 +4373,6 @@ samr_dissect_struct_AliasInfoAll(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4416,7 +4409,7 @@ samr_dissect_struct_AliasInfoAll(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: } */ int -samr_dissect_enum_AliasInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_AliasInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -4523,7 +4516,7 @@ samr_dissect_AliasInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_ /* IDL: } */ int -samr_dissect_enum_UserInfoLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_UserInfoLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -4590,7 +4583,6 @@ samr_dissect_struct_UserInfo1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4668,7 +4660,6 @@ samr_dissect_struct_UserInfo2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4702,7 +4693,7 @@ samr_dissect_struct_UserInfo2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi /* IDL: struct { */ /* IDL: uint16 units_per_week; */ -/* IDL: [unique(1)] [length_is(units_per_week/8)] [size_is(1260)] uint8 *bits; */ +/* IDL: [unique(1)] [size_is(1260)] [length_is(units_per_week/8)] uint8 *bits; */ /* IDL: } */ static int @@ -4742,7 +4733,6 @@ samr_dissect_struct_LogonHours(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -4940,7 +4930,6 @@ samr_dissect_struct_UserInfo3(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5017,7 +5006,6 @@ samr_dissect_struct_UserInfo4(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5213,7 +5201,6 @@ samr_dissect_struct_UserInfo5(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5299,7 +5286,6 @@ samr_dissect_struct_UserInfo6(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5344,7 +5330,6 @@ samr_dissect_struct_UserInfo7(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5387,7 +5372,6 @@ samr_dissect_struct_UserInfo8(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5430,7 +5414,6 @@ samr_dissect_struct_UserInfo9(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -5482,7 +5465,6 @@ samr_dissect_struct_UserInfo10(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5527,7 +5509,6 @@ samr_dissect_struct_UserInfo11(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5570,7 +5551,6 @@ samr_dissect_struct_UserInfo12(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5613,7 +5593,6 @@ samr_dissect_struct_UserInfo13(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5656,7 +5635,6 @@ samr_dissect_struct_UserInfo14(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -5699,7 +5677,6 @@ samr_dissect_struct_UserInfo16(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -5742,7 +5719,6 @@ samr_dissect_struct_UserInfo17(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -5913,7 +5889,6 @@ samr_dissect_struct_UserInfo20(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -6261,7 +6236,7 @@ samr_dissect_bitmap_FieldsPresent(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: lsa_String nt_password; */ /* IDL: lsa_String private; */ /* IDL: uint32 buf_count; */ -/* IDL: [unique(1)] [size_is(buf_count)] uint8 *buffer; */ +/* IDL: [size_is(buf_count)] [unique(1)] uint8 *buffer; */ /* IDL: uint32 rid; */ /* IDL: uint32 primary_gid; */ /* IDL: samr_AcctFlags acct_flags; */ @@ -6570,7 +6545,6 @@ samr_dissect_struct_UserInfo21(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -6735,7 +6709,6 @@ samr_dissect_struct_UserInfo23(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -6884,7 +6857,6 @@ samr_dissect_struct_UserInfo25(tvbuff_t *tvb _U_, int offset _U_, packet_info *p { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7312,7 +7284,6 @@ samr_dissect_struct_RidWithAttribute(tvbuff_t *tvb _U_, int offset _U_, packet_i { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -7342,7 +7313,7 @@ samr_dissect_struct_RidWithAttribute(tvbuff_t *tvb _U_, int offset _U_, packet_i /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] samr_RidWithAttribute *rids; */ +/* IDL: [size_is(count)] [unique(1)] samr_RidWithAttribute *rids; */ /* IDL: } */ static int @@ -7382,7 +7353,6 @@ samr_dissect_struct_RidWithAttributeArray(tvbuff_t *tvb _U_, int offset _U_, pac { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7472,7 +7442,6 @@ samr_dissect_struct_DispEntryGeneral(tvbuff_t *tvb _U_, int offset _U_, packet_i { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7510,7 +7479,7 @@ samr_dissect_struct_DispEntryGeneral(tvbuff_t *tvb _U_, int offset _U_, packet_i /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] samr_DispEntryGeneral *entries; */ +/* IDL: [size_is(count)] [unique(1)] samr_DispEntryGeneral *entries; */ /* IDL: } */ static int @@ -7550,7 +7519,6 @@ samr_dissect_struct_DispInfoGeneral(tvbuff_t *tvb _U_, int offset _U_, packet_in { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7631,7 +7599,6 @@ samr_dissect_struct_DispEntryFull(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7667,7 +7634,7 @@ samr_dissect_struct_DispEntryFull(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] samr_DispEntryFull *entries; */ +/* IDL: [size_is(count)] [unique(1)] samr_DispEntryFull *entries; */ /* IDL: } */ static int @@ -7707,7 +7674,6 @@ samr_dissect_struct_DispInfoFull(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7788,7 +7754,6 @@ samr_dissect_struct_DispEntryFullGroup(tvbuff_t *tvb _U_, int offset _U_, packet { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7824,7 +7789,7 @@ samr_dissect_struct_DispEntryFullGroup(tvbuff_t *tvb _U_, int offset _U_, packet /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] samr_DispEntryFullGroup *entries; */ +/* IDL: [size_is(count)] [unique(1)] samr_DispEntryFullGroup *entries; */ /* IDL: } */ static int @@ -7864,7 +7829,6 @@ samr_dissect_struct_DispInfoFullGroups(tvbuff_t *tvb _U_, int offset _U_, packet { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7918,7 +7882,6 @@ samr_dissect_struct_DispEntryAscii(tvbuff_t *tvb _U_, int offset _U_, packet_inf { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -7988,7 +7951,6 @@ samr_dissect_struct_DispInfoAscii(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -8025,7 +7987,7 @@ samr_dissect_struct_DispInfoAscii(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: } */ int -samr_dissect_enum_DomainDisplayInformation(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_DomainDisplayInformation(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -8157,7 +8119,6 @@ samr_dissect_struct_PwInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -8241,7 +8202,6 @@ samr_dissect_struct_ChangeReject(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -8297,7 +8257,6 @@ samr_dissect_struct_ConnectInfo1(tvbuff_t *tvb _U_, int offset _U_, packet_info { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_4_BYTES; @@ -8457,7 +8416,7 @@ samr_dissect_bitmap_ValidateFieldsPresent(tvbuff_t *tvb _U_, int offset _U_, pac /* IDL: } */ int -samr_dissect_enum_ValidatePasswordLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_ValidatePasswordLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -8486,7 +8445,7 @@ samr_dissect_enum_ValidatePasswordLevel(tvbuff_t *tvb _U_, int offset _U_, packe /* IDL: } */ int -samr_dissect_enum_ValidationStatus(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_) +samr_dissect_enum_ValidationStatus(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint1632 *param _U_) { guint1632 parameter=0; if(param){ @@ -8542,7 +8501,6 @@ samr_dissect_struct_ValidationBlob(tvbuff_t *tvb _U_, int offset _U_, packet_inf { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_5_BYTES; @@ -8657,7 +8615,6 @@ samr_dissect_struct_ValidatePasswordInfo(tvbuff_t *tvb _U_, int offset _U_, pack { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_8_BYTES; @@ -8721,7 +8678,6 @@ samr_dissect_struct_ValidatePasswordRepCtr(tvbuff_t *tvb _U_, int offset _U_, pa { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_8_BYTES; @@ -8877,7 +8833,6 @@ samr_dissect_struct_ValidatePasswordReq3(tvbuff_t *tvb _U_, int offset _U_, pack { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_8_BYTES; @@ -8966,7 +8921,6 @@ samr_dissect_struct_ValidatePasswordReq2(tvbuff_t *tvb _U_, int offset _U_, pack { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_8_BYTES; @@ -9026,7 +8980,6 @@ samr_dissect_struct_ValidatePasswordReq1(tvbuff_t *tvb _U_, int offset _U_, pack { proto_item *item = NULL; proto_tree *tree = NULL; - int old_offset; ALIGN_TO_8_BYTES; @@ -9162,7 +9115,7 @@ samr_dissect_element_Connect_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: NTSTATUS samr_Connect( */ /* IDL: [unique(1)] [in] uint16 *system_name, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *connect_handle */ +/* IDL: [ref] [out] policy_handle *connect_handle */ /* IDL: ); */ static int @@ -9210,7 +9163,7 @@ samr_dissect_element_Close_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_inf } /* IDL: NTSTATUS samr_Close( */ -/* IDL: [out] [in] [ref] policy_handle *handle */ +/* IDL: [ref] [out] [in] policy_handle *handle */ /* IDL: ); */ static int @@ -9282,7 +9235,7 @@ samr_dissect_element_SetSecurity_sdbuf_(tvbuff_t *tvb _U_, int offset _U_, packe /* IDL: NTSTATUS samr_SetSecurity( */ /* IDL: [in] [ref] policy_handle *handle, */ /* IDL: [in] security_secinfo sec_info, */ -/* IDL: [in] [ref] sec_desc_buf *sdbuf */ +/* IDL: [ref] [in] sec_desc_buf *sdbuf */ /* IDL: ); */ static int @@ -9363,7 +9316,7 @@ samr_dissect_element_QuerySecurity_sdbuf__(tvbuff_t *tvb _U_, int offset _U_, pa /* IDL: NTSTATUS samr_QuerySecurity( */ /* IDL: [in] [ref] policy_handle *handle, */ /* IDL: [in] security_secinfo sec_info, */ -/* IDL: [out] [ref] sec_desc_buf **sdbuf */ +/* IDL: [ref] [out] sec_desc_buf **sdbuf */ /* IDL: ); */ static int @@ -9411,7 +9364,7 @@ samr_dissect_element_Shutdown_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Shutdown( */ -/* IDL: [in] [ref] policy_handle *connect_handle */ +/* IDL: [ref] [in] policy_handle *connect_handle */ /* IDL: ); */ static int @@ -9608,9 +9561,9 @@ samr_dissect_element_EnumDomains_num_entries_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_EnumDomains( */ -/* IDL: [in] [ref] policy_handle *connect_handle, */ -/* IDL: [out] [in] [ref] uint32 *resume_handle, */ -/* IDL: [out] [ref] samr_SamArray **sam, */ +/* IDL: [ref] [in] policy_handle *connect_handle, */ +/* IDL: [ref] [out] [in] uint32 *resume_handle, */ +/* IDL: [ref] [out] samr_SamArray **sam, */ /* IDL: [in] uint32 buf_size, */ /* IDL: [out] [ref] uint32 *num_entries */ /* IDL: ); */ @@ -9711,7 +9664,7 @@ samr_dissect_element_OpenDomain_domain_handle_(tvbuff_t *tvb _U_, int offset _U_ /* IDL: [in] [ref] policy_handle *connect_handle, */ /* IDL: [in] samr_DomainAccessMask access_mask, */ /* IDL: [in] [ref] dom_sid2 *sid, */ -/* IDL: [out] [ref] policy_handle *domain_handle */ +/* IDL: [ref] [out] policy_handle *domain_handle */ /* IDL: ); */ static int @@ -9793,9 +9746,9 @@ samr_dissect_element_QueryDomainInfo_info__(tvbuff_t *tvb _U_, int offset _U_, p } /* IDL: NTSTATUS samr_QueryDomainInfo( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainInfoClass level, */ -/* IDL: [out] [ref] [switch_is(level)] samr_DomainInfo **info */ +/* IDL: [switch_is(level)] [ref] [out] samr_DomainInfo **info */ /* IDL: ); */ static int @@ -9869,7 +9822,7 @@ samr_dissect_element_SetDomainInfo_info_(tvbuff_t *tvb _U_, int offset _U_, pack /* IDL: NTSTATUS samr_SetDomainInfo( */ /* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainInfoClass level, */ -/* IDL: [in] [ref] [switch_is(level)] samr_DomainInfo *info */ +/* IDL: [in] [switch_is(level)] [ref] samr_DomainInfo *info */ /* IDL: ); */ static int @@ -9972,10 +9925,10 @@ samr_dissect_element_CreateDomainGroup_rid_(tvbuff_t *tvb _U_, int offset _U_, p } /* IDL: NTSTATUS samr_CreateDomainGroup( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ -/* IDL: [in] [ref] lsa_String *name, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [ref] [in] lsa_String *name, */ /* IDL: [in] samr_GroupAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [out] policy_handle *group_handle, */ /* IDL: [out] [ref] uint32 *rid */ /* IDL: ); */ @@ -10094,7 +10047,7 @@ samr_dissect_element_EnumDomainGroups_num_entries_(tvbuff_t *tvb _U_, int offset /* IDL: NTSTATUS samr_EnumDomainGroups( */ /* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [out] [in] [ref] uint32 *resume_handle, */ +/* IDL: [in] [out] [ref] uint32 *resume_handle, */ /* IDL: [out] [ref] samr_SamArray **sam, */ /* IDL: [in] uint32 max_size, */ /* IDL: [out] [ref] uint32 *num_entries */ @@ -10209,7 +10162,7 @@ samr_dissect_element_CreateUser_rid_(tvbuff_t *tvb _U_, int offset _U_, packet_i } /* IDL: NTSTATUS samr_CreateUser( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] [ref] lsa_String *account_name, */ /* IDL: [in] samr_UserAccessMask access_mask, */ /* IDL: [out] [ref] policy_handle *user_handle, */ @@ -10338,12 +10291,12 @@ samr_dissect_element_EnumDomainUsers_num_entries_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_EnumDomainUsers( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [out] [in] [ref] uint32 *resume_handle, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [out] [in] uint32 *resume_handle, */ /* IDL: [in] samr_AcctFlags acct_flags, */ /* IDL: [out] [ref] samr_SamArray **sam, */ /* IDL: [in] uint32 max_size, */ -/* IDL: [out] [ref] uint32 *num_entries */ +/* IDL: [ref] [out] uint32 *num_entries */ /* IDL: ); */ static int @@ -10457,11 +10410,11 @@ samr_dissect_element_CreateDomAlias_rid_(tvbuff_t *tvb _U_, int offset _U_, pack } /* IDL: NTSTATUS samr_CreateDomAlias( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] [ref] lsa_String *alias_name, */ /* IDL: [in] samr_AliasAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *alias_handle, */ -/* IDL: [out] [ref] uint32 *rid */ +/* IDL: [ref] [out] policy_handle *alias_handle, */ +/* IDL: [ref] [out] uint32 *rid */ /* IDL: ); */ static int @@ -10579,8 +10532,8 @@ samr_dissect_element_EnumDomainAliases_num_entries_(tvbuff_t *tvb _U_, int offse /* IDL: NTSTATUS samr_EnumDomainAliases( */ /* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [out] [in] [ref] uint32 *resume_handle, */ -/* IDL: [out] [ref] samr_SamArray **sam, */ +/* IDL: [in] [ref] [out] uint32 *resume_handle, */ +/* IDL: [ref] [out] samr_SamArray **sam, */ /* IDL: [in] uint32 max_size, */ /* IDL: [out] [ref] uint32 *num_entries */ /* IDL: ); */ @@ -10671,8 +10624,8 @@ samr_dissect_element_GetAliasMembership_rids_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: NTSTATUS samr_GetAliasMembership( */ /* IDL: [in] [ref] policy_handle *domain_handle, */ -/* IDL: [in] [ref] lsa_SidArray *sids, */ -/* IDL: [out] [ref] samr_Ids *rids */ +/* IDL: [ref] [in] lsa_SidArray *sids, */ +/* IDL: [ref] [out] samr_Ids *rids */ /* IDL: ); */ static int @@ -10787,7 +10740,7 @@ samr_dissect_element_LookupNames_types_(tvbuff_t *tvb _U_, int offset _U_, packe /* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] [range(0,1000)] uint32 num_names, */ /* IDL: [in] [ref] [length_is(num_names)] [size_is(1000)] lsa_String *names, */ -/* IDL: [out] [ref] samr_Ids *rids, */ +/* IDL: [ref] [out] samr_Ids *rids, */ /* IDL: [out] [ref] samr_Ids *types */ /* IDL: ); */ @@ -10897,11 +10850,11 @@ samr_dissect_element_LookupRids_types_(tvbuff_t *tvb _U_, int offset _U_, packet } /* IDL: NTSTATUS samr_LookupRids( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ -/* IDL: [in] [range(0,1000)] uint32 num_rids, */ -/* IDL: [in] [length_is(num_rids)] [size_is(1000)] uint32 rids[*], */ -/* IDL: [out] [ref] lsa_Strings *names, */ -/* IDL: [out] [ref] samr_Ids *types */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [range(0,1000)] [in] uint32 num_rids, */ +/* IDL: [length_is(num_rids)] [size_is(1000)] [in] uint32 rids[*], */ +/* IDL: [ref] [out] lsa_Strings *names, */ +/* IDL: [ref] [out] samr_Ids *types */ /* IDL: ); */ static int @@ -11071,9 +11024,9 @@ samr_dissect_element_QueryGroupInfo_info__(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_QueryGroupInfo( */ -/* IDL: [in] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [in] samr_GroupInfoEnum level, */ -/* IDL: [out] [ref] [switch_is(level)] samr_GroupInfo **info */ +/* IDL: [ref] [switch_is(level)] [out] samr_GroupInfo **info */ /* IDL: ); */ static int @@ -11147,7 +11100,7 @@ samr_dissect_element_SetGroupInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packe /* IDL: NTSTATUS samr_SetGroupInfo( */ /* IDL: [in] [ref] policy_handle *group_handle, */ /* IDL: [in] samr_GroupInfoEnum level, */ -/* IDL: [in] [ref] [switch_is(level)] samr_GroupInfo *info */ +/* IDL: [switch_is(level)] [ref] [in] samr_GroupInfo *info */ /* IDL: ); */ static int @@ -11210,7 +11163,7 @@ samr_dissect_element_AddGroupMember_flags(tvbuff_t *tvb _U_, int offset _U_, pac } /* IDL: NTSTATUS samr_AddGroupMember( */ -/* IDL: [in] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [in] uint32 rid, */ /* IDL: [in] uint32 flags */ /* IDL: ); */ @@ -11259,7 +11212,7 @@ samr_dissect_element_DeleteDomainGroup_group_handle_(tvbuff_t *tvb _U_, int offs } /* IDL: NTSTATUS samr_DeleteDomainGroup( */ -/* IDL: [out] [in] [ref] policy_handle *group_handle */ +/* IDL: [out] [ref] [in] policy_handle *group_handle */ /* IDL: ); */ static int @@ -11527,7 +11480,7 @@ samr_dissect_element_OpenAlias_alias_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_OpenAlias( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_AliasAccessMask access_mask, */ /* IDL: [in] uint32 rid, */ /* IDL: [out] [ref] policy_handle *alias_handle */ @@ -11612,9 +11565,9 @@ samr_dissect_element_QueryAliasInfo_info__(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_QueryAliasInfo( */ -/* IDL: [in] [ref] policy_handle *alias_handle, */ +/* IDL: [ref] [in] policy_handle *alias_handle, */ /* IDL: [in] samr_AliasInfoEnum level, */ -/* IDL: [out] [ref] [switch_is(level)] samr_AliasInfo **info */ +/* IDL: [ref] [switch_is(level)] [out] samr_AliasInfo **info */ /* IDL: ); */ static int @@ -11686,9 +11639,9 @@ samr_dissect_element_SetAliasInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_SetAliasInfo( */ -/* IDL: [in] [ref] policy_handle *alias_handle, */ +/* IDL: [ref] [in] policy_handle *alias_handle, */ /* IDL: [in] samr_AliasInfoEnum level, */ -/* IDL: [in] [ref] [switch_is(level)] samr_AliasInfo *info */ +/* IDL: [in] [switch_is(level)] [ref] samr_AliasInfo *info */ /* IDL: ); */ static int @@ -11735,7 +11688,7 @@ samr_dissect_element_DeleteDomAlias_alias_handle_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_DeleteDomAlias( */ -/* IDL: [out] [in] [ref] policy_handle *alias_handle */ +/* IDL: [ref] [out] [in] policy_handle *alias_handle */ /* IDL: ); */ static int @@ -11797,7 +11750,7 @@ samr_dissect_element_AddAliasMember_sid_(tvbuff_t *tvb _U_, int offset _U_, pack } /* IDL: NTSTATUS samr_AddAliasMember( */ -/* IDL: [in] [ref] policy_handle *alias_handle, */ +/* IDL: [ref] [in] policy_handle *alias_handle, */ /* IDL: [in] [ref] dom_sid2 *sid */ /* IDL: ); */ @@ -11922,7 +11875,7 @@ samr_dissect_element_GetMembersInAlias_sids_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: NTSTATUS samr_GetMembersInAlias( */ /* IDL: [in] [ref] policy_handle *alias_handle, */ -/* IDL: [out] [ref] lsa_SidArray *sids */ +/* IDL: [ref] [out] lsa_SidArray *sids */ /* IDL: ); */ static int @@ -12000,10 +11953,10 @@ samr_dissect_element_OpenUser_user_handle_(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_OpenUser( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_UserAccessMask access_mask, */ /* IDL: [in] uint32 rid, */ -/* IDL: [out] [ref] policy_handle *user_handle */ +/* IDL: [ref] [out] policy_handle *user_handle */ /* IDL: ); */ static int @@ -12053,7 +12006,7 @@ samr_dissect_element_DeleteUser_user_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_DeleteUser( */ -/* IDL: [out] [in] [ref] policy_handle *user_handle */ +/* IDL: [ref] [out] [in] policy_handle *user_handle */ /* IDL: ); */ static int @@ -12131,9 +12084,9 @@ samr_dissect_element_QueryUserInfo_info__(tvbuff_t *tvb _U_, int offset _U_, pac } /* IDL: NTSTATUS samr_QueryUserInfo( */ -/* IDL: [in] [ref] policy_handle *user_handle, */ +/* IDL: [ref] [in] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ -/* IDL: [out] [ref] [switch_is(level)] samr_UserInfo **info */ +/* IDL: [switch_is(level)] [ref] [out] samr_UserInfo **info */ /* IDL: ); */ static int @@ -12207,7 +12160,7 @@ samr_dissect_element_SetUserInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packet /* IDL: NTSTATUS samr_SetUserInfo( */ /* IDL: [in] [ref] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ -/* IDL: [ref] [in] [switch_is(level)] samr_UserInfo *info */ +/* IDL: [in] [switch_is(level)] [ref] samr_UserInfo *info */ /* IDL: ); */ static int @@ -12384,15 +12337,15 @@ samr_dissect_element_ChangePasswordUser_lm_cross_(tvbuff_t *tvb _U_, int offset /* IDL: NTSTATUS samr_ChangePasswordUser( */ /* IDL: [in] [ref] policy_handle *user_handle, */ /* IDL: [in] uint8 lm_present, */ -/* IDL: [unique(1)] [in] samr_Password *old_lm_crypted, */ -/* IDL: [unique(1)] [in] samr_Password *new_lm_crypted, */ +/* IDL: [in] [unique(1)] samr_Password *old_lm_crypted, */ +/* IDL: [in] [unique(1)] samr_Password *new_lm_crypted, */ /* IDL: [in] uint8 nt_present, */ /* IDL: [unique(1)] [in] samr_Password *old_nt_crypted, */ /* IDL: [unique(1)] [in] samr_Password *new_nt_crypted, */ /* IDL: [in] uint8 cross1_present, */ -/* IDL: [unique(1)] [in] samr_Password *nt_cross, */ +/* IDL: [in] [unique(1)] samr_Password *nt_cross, */ /* IDL: [in] uint8 cross2_present, */ -/* IDL: [unique(1)] [in] samr_Password *lm_cross */ +/* IDL: [in] [unique(1)] samr_Password *lm_cross */ /* IDL: ); */ static int @@ -12612,8 +12565,8 @@ samr_dissect_element_QueryDisplayInfo_info_(tvbuff_t *tvb _U_, int offset _U_, p /* IDL: [in] uint32 max_entries, */ /* IDL: [in] uint32 buf_size, */ /* IDL: [out] [ref] uint32 *total_size, */ -/* IDL: [out] [ref] uint32 *returned_size, */ -/* IDL: [out] [ref] [switch_is(level)] samr_DispInfo *info */ +/* IDL: [ref] [out] uint32 *returned_size, */ +/* IDL: [switch_is(level)] [ref] [out] samr_DispInfo *info */ /* IDL: ); */ static int @@ -12715,8 +12668,8 @@ samr_dissect_element_GetDisplayEnumerationIndex_idx_(tvbuff_t *tvb _U_, int offs /* IDL: NTSTATUS samr_GetDisplayEnumerationIndex( */ /* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] uint16 level, */ -/* IDL: [in] [ref] lsa_String *name, */ -/* IDL: [out] [ref] uint32 *idx */ +/* IDL: [ref] [in] lsa_String *name, */ +/* IDL: [ref] [out] uint32 *idx */ /* IDL: ); */ static int @@ -12766,7 +12719,7 @@ samr_dissect_element_TestPrivateFunctionsDomain_domain_handle_(tvbuff_t *tvb _U_ } /* IDL: NTSTATUS samr_TestPrivateFunctionsDomain( */ -/* IDL: [in] [ref] policy_handle *domain_handle */ +/* IDL: [ref] [in] policy_handle *domain_handle */ /* IDL: ); */ static int @@ -12809,7 +12762,7 @@ samr_dissect_element_TestPrivateFunctionsUser_user_handle_(tvbuff_t *tvb _U_, in } /* IDL: NTSTATUS samr_TestPrivateFunctionsUser( */ -/* IDL: [in] [ref] policy_handle *user_handle */ +/* IDL: [ref] [in] policy_handle *user_handle */ /* IDL: ); */ static int @@ -12868,8 +12821,8 @@ samr_dissect_element_GetUserPwInfo_info_(tvbuff_t *tvb _U_, int offset _U_, pack } /* IDL: NTSTATUS samr_GetUserPwInfo( */ -/* IDL: [in] [ref] policy_handle *user_handle, */ -/* IDL: [out] [ref] samr_PwInfo *info */ +/* IDL: [ref] [in] policy_handle *user_handle, */ +/* IDL: [ref] [out] samr_PwInfo *info */ /* IDL: ); */ static int @@ -13009,7 +12962,7 @@ samr_dissect_element_QueryDomainInfo2_info__(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_QueryDomainInfo2( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainInfoClass level, */ /* IDL: [out] [ref] [switch_is(level)] samr_DomainInfo **info */ /* IDL: ); */ @@ -13093,7 +13046,7 @@ samr_dissect_element_QueryUserInfo2_info__(tvbuff_t *tvb _U_, int offset _U_, pa /* IDL: NTSTATUS samr_QueryUserInfo2( */ /* IDL: [in] [ref] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ -/* IDL: [out] [ref] [switch_is(level)] samr_UserInfo **info */ +/* IDL: [switch_is(level)] [ref] [out] samr_UserInfo **info */ /* IDL: ); */ static int @@ -13221,14 +13174,14 @@ samr_dissect_element_QueryDisplayInfo2_info_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_QueryDisplayInfo2( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainDisplayInformation level, */ /* IDL: [in] uint32 start_idx, */ /* IDL: [in] uint32 max_entries, */ /* IDL: [in] uint32 buf_size, */ -/* IDL: [out] [ref] uint32 *total_size, */ -/* IDL: [out] [ref] uint32 *returned_size, */ -/* IDL: [out] [ref] [switch_is(level)] samr_DispInfo *info */ +/* IDL: [ref] [out] uint32 *total_size, */ +/* IDL: [ref] [out] uint32 *returned_size, */ +/* IDL: [out] [switch_is(level)] [ref] samr_DispInfo *info */ /* IDL: ); */ static int @@ -13330,8 +13283,8 @@ samr_dissect_element_GetDisplayEnumerationIndex2_idx_(tvbuff_t *tvb _U_, int off /* IDL: NTSTATUS samr_GetDisplayEnumerationIndex2( */ /* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainDisplayInformation level, */ -/* IDL: [in] [ref] lsa_String *name, */ -/* IDL: [out] [ref] uint32 *idx */ +/* IDL: [ref] [in] lsa_String *name, */ +/* IDL: [ref] [out] uint32 *idx */ /* IDL: ); */ static int @@ -13461,13 +13414,13 @@ samr_dissect_element_CreateUser2_rid_(tvbuff_t *tvb _U_, int offset _U_, packet_ } /* IDL: NTSTATUS samr_CreateUser2( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ -/* IDL: [in] [ref] lsa_String *account_name, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [ref] [in] lsa_String *account_name, */ /* IDL: [in] samr_AcctFlags acct_flags, */ /* IDL: [in] samr_UserAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *user_handle, */ +/* IDL: [ref] [out] policy_handle *user_handle, */ /* IDL: [out] [ref] uint32 *access_granted, */ -/* IDL: [out] [ref] uint32 *rid */ +/* IDL: [ref] [out] uint32 *rid */ /* IDL: ); */ static int @@ -13611,8 +13564,8 @@ samr_dissect_element_QueryDisplayInfo3_info_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: [in] uint32 max_entries, */ /* IDL: [in] uint32 buf_size, */ /* IDL: [out] [ref] uint32 *total_size, */ -/* IDL: [out] [ref] uint32 *returned_size, */ -/* IDL: [out] [ref] [switch_is(level)] samr_DispInfo *info */ +/* IDL: [ref] [out] uint32 *returned_size, */ +/* IDL: [out] [switch_is(level)] [ref] samr_DispInfo *info */ /* IDL: ); */ static int @@ -13750,8 +13703,8 @@ samr_dissect_element_RemoveMultipleMembersFromAlias_sids_(tvbuff_t *tvb _U_, int } /* IDL: NTSTATUS samr_RemoveMultipleMembersFromAlias( */ -/* IDL: [in] [ref] policy_handle *alias_handle, */ -/* IDL: [in] [ref] lsa_SidArray *sids */ +/* IDL: [ref] [in] policy_handle *alias_handle, */ +/* IDL: [ref] [in] lsa_SidArray *sids */ /* IDL: ); */ static int @@ -13844,9 +13797,9 @@ samr_dissect_element_OemChangePasswordUser2_hash_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_OemChangePasswordUser2( */ -/* IDL: [unique(1)] [in] lsa_AsciiString *server, */ -/* IDL: [in] [ref] lsa_AsciiString *account, */ -/* IDL: [unique(1)] [in] samr_CryptPassword *password, */ +/* IDL: [in] [unique(1)] lsa_AsciiString *server, */ +/* IDL: [ref] [in] lsa_AsciiString *account, */ +/* IDL: [in] [unique(1)] samr_CryptPassword *password, */ /* IDL: [unique(1)] [in] samr_Password *hash */ /* IDL: ); */ @@ -13984,10 +13937,10 @@ samr_dissect_element_ChangePasswordUser2_lm_verifier_(tvbuff_t *tvb _U_, int off } /* IDL: NTSTATUS samr_ChangePasswordUser2( */ -/* IDL: [unique(1)] [in] lsa_String *server, */ -/* IDL: [in] [ref] lsa_String *account, */ -/* IDL: [unique(1)] [in] samr_CryptPassword *nt_password, */ -/* IDL: [unique(1)] [in] samr_Password *nt_verifier, */ +/* IDL: [in] [unique(1)] lsa_String *server, */ +/* IDL: [ref] [in] lsa_String *account, */ +/* IDL: [in] [unique(1)] samr_CryptPassword *nt_password, */ +/* IDL: [in] [unique(1)] samr_Password *nt_verifier, */ /* IDL: [in] uint8 lm_change, */ /* IDL: [unique(1)] [in] samr_CryptPassword *lm_password, */ /* IDL: [unique(1)] [in] samr_Password *lm_verifier */ @@ -14061,8 +14014,8 @@ samr_dissect_element_GetDomPwInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_GetDomPwInfo( */ -/* IDL: [unique(1)] [in] lsa_String *domain_name, */ -/* IDL: [out] [ref] samr_PwInfo *info */ +/* IDL: [in] [unique(1)] lsa_String *domain_name, */ +/* IDL: [ref] [out] samr_PwInfo *info */ /* IDL: ); */ static int @@ -14135,9 +14088,9 @@ samr_dissect_element_Connect2_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect2( */ -/* IDL: [unique(1)] [in] [charset(UTF16)] uint16 *system_name, */ +/* IDL: [in] [charset(UTF16)] [unique(1)] uint16 *system_name, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *connect_handle */ +/* IDL: [ref] [out] policy_handle *connect_handle */ /* IDL: ); */ static int @@ -14209,9 +14162,9 @@ samr_dissect_element_SetUserInfo2_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_SetUserInfo2( */ -/* IDL: [in] [ref] policy_handle *user_handle, */ +/* IDL: [ref] [in] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ -/* IDL: [ref] [in] [switch_is(level)] samr_UserInfo *info */ +/* IDL: [in] [ref] [switch_is(level)] samr_UserInfo *info */ /* IDL: ); */ static int @@ -14282,7 +14235,7 @@ samr_dissect_element_SetBootKeyInformation_unknown3(tvbuff_t *tvb _U_, int offse } /* IDL: NTSTATUS samr_SetBootKeyInformation( */ -/* IDL: [in] [ref] policy_handle *connect_handle, */ +/* IDL: [ref] [in] policy_handle *connect_handle, */ /* IDL: [in] uint32 unknown1, */ /* IDL: [in] uint32 unknown2, */ /* IDL: [in] uint32 unknown3 */ @@ -14350,7 +14303,7 @@ samr_dissect_element_GetBootKeyInformation_unknown_(tvbuff_t *tvb _U_, int offse } /* IDL: NTSTATUS samr_GetBootKeyInformation( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [out] [ref] uint32 *unknown */ /* IDL: ); */ @@ -14520,7 +14473,7 @@ samr_dissect_element_Connect4_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect4( */ -/* IDL: [unique(1)] [in] [charset(UTF16)] uint16 *system_name, */ +/* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */ /* IDL: [in] samr_ConnectVersion client_version, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ /* IDL: [out] [ref] policy_handle *connect_handle */ @@ -14731,10 +14684,10 @@ samr_dissect_element_ChangePasswordUser3_reject__(tvbuff_t *tvb _U_, int offset /* IDL: [unique(1)] [in] samr_Password *nt_verifier, */ /* IDL: [in] uint8 lm_change, */ /* IDL: [unique(1)] [in] samr_CryptPassword *lm_password, */ -/* IDL: [unique(1)] [in] samr_Password *lm_verifier, */ -/* IDL: [unique(1)] [in] samr_CryptPassword *password3, */ -/* IDL: [out] [ref] samr_DomInfo1 **dominfo, */ -/* IDL: [out] [ref] samr_ChangeReject **reject */ +/* IDL: [in] [unique(1)] samr_Password *lm_verifier, */ +/* IDL: [in] [unique(1)] samr_CryptPassword *password3, */ +/* IDL: [ref] [out] samr_DomInfo1 **dominfo, */ +/* IDL: [ref] [out] samr_ChangeReject **reject */ /* IDL: ); */ static int @@ -14880,13 +14833,13 @@ samr_dissect_element_Connect5_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect5( */ -/* IDL: [unique(1)] [in] [charset(UTF16)] uint16 *system_name, */ +/* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ /* IDL: [in] uint32 level_in, */ -/* IDL: [ref] [in] [switch_is(level_in)] samr_ConnectInfo *info_in, */ -/* IDL: [out] [ref] uint32 *level_out, */ -/* IDL: [out] [ref] [switch_is(*level_out)] samr_ConnectInfo *info_out, */ -/* IDL: [out] [ref] policy_handle *connect_handle */ +/* IDL: [ref] [switch_is(level_in)] [in] samr_ConnectInfo *info_in, */ +/* IDL: [ref] [out] uint32 *level_out, */ +/* IDL: [out] [switch_is(*level_out)] [ref] samr_ConnectInfo *info_out, */ +/* IDL: [ref] [out] policy_handle *connect_handle */ /* IDL: ); */ static int @@ -14976,7 +14929,7 @@ samr_dissect_element_RidToSid_sid__(tvbuff_t *tvb _U_, int offset _U_, packet_in } /* IDL: NTSTATUS samr_RidToSid( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] uint32 rid, */ /* IDL: [out] [ref] dom_sid2 **sid */ /* IDL: ); */ @@ -15050,9 +15003,9 @@ samr_dissect_element_SetDsrmPassword_hash_(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_SetDsrmPassword( */ -/* IDL: [unique(1)] [in] lsa_String *name, */ +/* IDL: [in] [unique(1)] lsa_String *name, */ /* IDL: [in] uint32 unknown, */ -/* IDL: [unique(1)] [in] samr_Password *hash */ +/* IDL: [in] [unique(1)] samr_Password *hash */ /* IDL: ); */ static int @@ -15132,8 +15085,8 @@ samr_dissect_element_ValidatePassword_rep__(tvbuff_t *tvb _U_, int offset _U_, p /* IDL: NTSTATUS samr_ValidatePassword( */ /* IDL: [in] samr_ValidatePasswordLevel level, */ -/* IDL: [ref] [in] [switch_is(level)] samr_ValidatePasswordReq *req, */ -/* IDL: [out] [ref] [switch_is(level)] samr_ValidatePasswordRep **rep */ +/* IDL: [switch_is(level)] [ref] [in] samr_ValidatePasswordReq *req, */ +/* IDL: [ref] [switch_is(level)] [out] samr_ValidatePasswordRep **rep */ /* IDL: ); */ static int @@ -15308,1112 +15261,1112 @@ static dcerpc_sub_dissector samr_dissectors[] = { void proto_register_dcerpc_samr(void) { static hf_register_info hf[] = { - { &hf_samr_samr_QueryDisplayInfo2_level, - { "Level", "samr.samr_QueryDisplayInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_rid, - { "RID", "samr.rid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect2_system_name, - { "System Name", "samr.samr_Connect2.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH, - { "Acb Dont Require Preauth", "samr.samr_AcctFlags.ACB_DONT_REQUIRE_PREAUTH", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH_tfs), ( 0x00010000 ), NULL, HFILL }}, - { &hf_samr_group_access_mask, - { "Access Mask", "samr.group.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_oem, - { "Oem", "samr.samr_DomainInfo.oem", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoAscii_entries, - { "Entries", "samr.samr_DispInfoAscii.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryAliasInfo_level, - { "Level", "samr.samr_QueryAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_idx, - { "Idx", "samr.samr_DispEntryFullGroup.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryGroupInfo_info, - { "Info", "samr.samr_QueryGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT, - { "Samr Field Logon Script", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_SCRIPT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_primary_gid, - { "Primary Gid", "samr.samr_UserInfo21.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_lockout_duration, - { "Lockout Duration", "samr.samr_DomGeneralInformation2.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY, - { "Samr Field Acct Expiry", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_EXPIRY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY_tfs), ( 0x00080000 ), NULL, HFILL }}, - { &hf_samr_samr_DispInfoGeneral_count, - { "Count", "samr.samr_DispInfoGeneral.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_total_size, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET, + { "Samr Validate Field Password Last Set", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo23_password, + { "Password", "samr.samr_UserInfo23.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_description, + { "Description", "samr.samr_UserInfo21.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_total_size, { "Total Size", "samr.samr_QueryDisplayInfo3.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDomPwInfo_info, - { "Info", "samr.samr_GetDomPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QuerySecurity_sdbuf, - { "Sdbuf", "samr.samr_QuerySecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_workstations, - { "Workstations", "samr.samr_UserInfo3.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo2_info, - { "Info", "samr.samr_QueryUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_start_idx, - { "Start Idx", "samr.samr_QueryDisplayInfo3.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS, - { "Samr Field Parameters", "samr.samr_FieldsPresent.SAMR_FIELD_PARAMETERS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PARAMETERS_tfs), ( 0x00200000 ), NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_num_users, - { "Num Users", "samr.samr_DomGeneralInformation.num_users", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS, - { "Samr Domain Access Lookup Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_acct_flags, - { "Acct Flags", "samr.samr_UserInfo21.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_profile_path, - { "Profile Path", "samr.samr_UserInfo5.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_PW_EXPIRED, - { "Acb Pw Expired", "samr.samr_AcctFlags.ACB_PW_EXPIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PW_EXPIRED_tfs), ( 0x00020000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_hash, - { "Hash", "samr.samr_ValidatePasswordReq3.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo_info, - { "Info", "samr.samr_QueryDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info16, - { "Info16", "samr.samr_UserInfo.info16", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetBootKeyInformation_unknown1, - { "Unknown1", "samr.samr_SetBootKeyInformation.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_attributes, - { "Attributes", "samr.samr_GroupInfo.attributes", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo3_force_logoff_time, - { "Force Logoff Time", "samr.samr_DomInfo3.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_new_nt_crypted, - { "New Nt Crypted", "samr.samr_ChangePasswordUser.new_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_reject, - { "Reject", "samr.samr_ChangePasswordUser3.reject", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo2_info, - { "Info", "samr.samr_QueryDomainInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_description, - { "Description", "samr.samr_UserInfo1.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetAliasInfo_info, - { "Info", "samr.samr_SetAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_cross1_present, - { "Cross1 Present", "samr.samr_ChangePasswordUser.cross1_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_primary_gid, - { "Primary Gid", "samr.samr_UserInfo5.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE, - { "Domain Password No Clear Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_CLEAR_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT, - { "Samr Domain Access Open Account", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_Connect4_system_name, - { "System Name", "samr.samr_Connect4.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_buf_size, - { "Buf Size", "samr.samr_QueryDisplayInfo3.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS, - { "Samr Field Num Logons", "samr.samr_FieldsPresent.SAMR_FIELD_NUM_LOGONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS_tfs), ( 0x00008000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT, - { "Samr Validate Field Bad Password Count", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE, - { "Samr Field Last Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE_tfs), ( 0x00040000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo20_parameters, + { &hf_samr_samr_UserInfo20_parameters, { "Parameters", "samr.samr_UserInfo20.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_lm_pwd, - { "Lm Pwd", "samr.samr_UserInfo18.lm_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_account_name, - { "Account Name", "samr.samr_UserInfo1.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_lm_change, - { "Lm Change", "samr.samr_ChangePasswordUser2.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_description, - { "Description", "samr.samr_UserInfo21.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_profile_path, - { "Profile Path", "samr.samr_UserInfo21.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePassword_req, - { "Req", "samr.samr_ValidatePassword.req", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_DISABLED, - { "Acb Disabled", "samr.samr_AcctFlags.ACB_DISABLED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DISABLED_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_nt_cross, - { "Nt Cross", "samr.samr_ChangePasswordUser.nt_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangeReject_unknown2, - { "Unknown2", "samr.samr_ChangeReject.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME, - { "Samr Field Account Name", "samr.samr_FieldsPresent.SAMR_FIELD_ACCOUNT_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_unknown, - { "Unknown", "samr.samr_UserInfo2.unknown", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_password, - { "Password", "samr.samr_ValidatePasswordReq3.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_logon_script, - { "Logon Script", "samr.samr_UserInfo5.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidWithAttributeArray_count, - { "Count", "samr.samr_RidWithAttributeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_pwd_history_len, - { "Pwd History Len", "samr.samr_ValidatePasswordInfo.pwd_history_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoFullGroups_entries, - { "Entries", "samr.samr_DispInfoFullGroups.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_bad_password_count, - { "Bad Password Count", "samr.samr_UserInfo5.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info5, + { &hf_samr_samr_DomainInfo_info5, { "Info5", "samr.samr_DomainInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER, + { &hf_samr_samr_QueryDisplayInfo_buf_size, + { "Buf Size", "samr.samr_QueryDisplayInfo.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER, { "Samr Alias Access Add Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info6, - { "Info6", "samr.samr_UserInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_info_out, - { "Info Out", "samr.samr_Connect5.info_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_logon_script, - { "Logon Script", "samr.samr_UserInfo3.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo_level, - { "Level", "samr.samr_SetUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_last_logon, - { "Last Logon", "samr.samr_UserInfo21.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetBootKeyInformation_domain_handle, - { "Domain Handle", "samr.samr_GetBootKeyInformation.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_lm_password, - { "Lm Password", "samr.samr_UserInfo21.lm_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_returned_size, - { "Returned Size", "samr.samr_QueryDisplayInfo3.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_account, - { "Account", "samr.samr_ValidatePasswordReq3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo7_account_name, - { "Account Name", "samr.samr_UserInfo7.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo23_info, - { "Info", "samr.samr_UserInfo23.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1, - { "Samr Domain Access Set Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_last_logon, - { "Last Logon", "samr.samr_UserInfo3.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info10, - { "Info10", "samr.samr_UserInfo.info10", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_max_size, - { "Max Size", "samr.samr_EnumDomainGroups.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE, - { "Domain Password No Anon Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_ANON_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_full_name, - { "Full Name", "samr.samr_UserInfo3.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryAscii_account_name, - { "Account Name", "samr.samr_DispEntryAscii.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo11_logon_script, - { "Logon Script", "samr.samr_UserInfo11.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT, - { "Acb Trust Auth Delegat", "samr.samr_AcctFlags.ACB_TRUST_AUTH_DELEGAT", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT_tfs), ( 0x00040000 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_lm_present, - { "Lm Present", "samr.samr_ChangePasswordUser.lm_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AddMultipleMembersToAlias_sids, + { &hf_samr_samr_RemoveMemberFromForeignDomain_sid, + { "Sid", "samr.samr_RemoveMemberFromForeignDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE, + { "Samr Field Country Code", "samr.samr_FieldsPresent.SAMR_FIELD_COUNTRY_CODE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE_tfs), ( 0x00400000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_full_name, + { "Full Name", "samr.samr_UserInfo5.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_max_entries, + { "Max Entries", "samr.samr_QueryDisplayInfo3.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoAscii_count, + { "Count", "samr.samr_DispInfoAscii.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_lm_verifier, + { "Lm Verifier", "samr.samr_ChangePasswordUser3.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_nt_password, + { "Nt Password", "samr.samr_ChangePasswordUser2.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDomainInfo_info, + { "Info", "samr.samr_SetDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AddMultipleMembersToAlias_sids, { "Sids", "samr.samr_AddMultipleMembersToAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo13_sequence_num, - { "Sequence Num", "samr.samr_DomInfo13.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info21, - { "Info21", "samr.samr_UserInfo.info21", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq_req1, - { "Req1", "samr.samr_ValidatePasswordReq.req1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_MNS, - { "Acb Mns", "samr.samr_AcctFlags.ACB_MNS", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_MNS_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_description, - { "Description", "samr.samr_DispEntryFullGroup.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetSecurity_sdbuf, - { "Sdbuf", "samr.samr_SetSecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_account, - { "Account", "samr.samr_ValidatePasswordReq2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_names, - { "Names", "samr.samr_LookupNames.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE, - { "Domain Refuse Password Change", "samr.samr_PasswordProperties.DOMAIN_REFUSE_PASSWORD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP, - { "Samr User Access Change Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_samr_PwInfo_password_properties, - { "Password Properties", "samr.samr_PwInfo.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq_req2, - { "Req2", "samr.samr_ValidatePasswordReq.req2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_lockout_window, - { "Lockout Window", "samr.samr_DomGeneralInformation2.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_returned_size, - { "Returned Size", "samr.samr_QueryDisplayInfo2.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetBootKeyInformation_unknown2, - { "Unknown2", "samr.samr_SetBootKeyInformation.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON, - { "Samr Field Last Logon", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGON", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGON_tfs), ( 0x00000800 ), NULL, HFILL }}, - { &hf_samr_samr_Ids_count, - { "Count", "samr.samr_Ids.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM, - { "Samr User Access Set Loc Com", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_LOC_COM", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED, + { &hf_samr_samr_DispInfo_info3, + { "Info3", "samr.samr_DispInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq1_password_matched, + { "Password Matched", "samr.samr_ValidatePasswordReq1.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_acct_flags, + { "Acct Flags", "samr.samr_DispEntryFull.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_WSTRUST, + { "Acb Wstrust", "samr.samr_AcctFlags.ACB_WSTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_WSTRUST_tfs), ( 0x00000080 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_profile_path, + { "Profile Path", "samr.samr_UserInfo21.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_last_logoff, + { "Last Logoff", "samr.samr_UserInfo21.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS, + { "Samr Alias Access Get Members", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS, + { "Samr Domain Access Enum Accounts", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_PwInfo_min_password_length, + { "Min Password Length", "samr.samr_PwInfo.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryGroupMember_rids, + { "Rids", "samr.samr_QueryGroupMember.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED, { "Acb Smartcard Required", "samr.samr_AcctFlags.ACB_SMARTCARD_REQUIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SMARTCARD_REQUIRED_tfs), ( 0x00001000 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_nt_verifier, - { "Nt Verifier", "samr.samr_ChangePasswordUser3.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info17, - { "Info17", "samr.samr_UserInfo.info17", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupRids_types, - { "Types", "samr.samr_LookupRids.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH, - { "Samr Field Profile Path", "samr.samr_FieldsPresent.SAMR_FIELD_PROFILE_PATH", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_lm_change, - { "Lm Change", "samr.samr_ChangePasswordUser3.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_primary_gid, - { "Primary Gid", "samr.samr_UserInfo1.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq1_info, - { "Info", "samr.samr_ValidatePasswordReq1.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_home_drive, - { "Home Drive", "samr.samr_UserInfo21.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_PWNOEXP, - { "Acb Pwnoexp", "samr.samr_AcctFlags.ACB_PWNOEXP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOEXP_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_DomOEMInformation_oem_information, - { "Oem Information", "samr.samr_DomOEMInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_group_handle, - { "Group Handle", "samr.group_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_num_entries, - { "Num Entries", "samr.samr_EnumDomainAliases.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_SVRTRUST, - { "Acb Svrtrust", "samr.samr_AcctFlags.ACB_SVRTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SVRTRUST_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_oem_information, - { "Oem Information", "samr.samr_DomGeneralInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info8, - { "Info8", "samr.samr_UserInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo25_info, - { "Info", "samr.samr_UserInfo25.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP, - { "Samr User Access Get Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_CreateDomainGroup_name, - { "Name", "samr.samr_CreateDomainGroup.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_num_groups, - { "Num Groups", "samr.samr_DomGeneralInformation.num_groups", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetGroupInfo_info, - { "Info", "samr.samr_SetGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_lsa_Strings_names, - { "Names", "samr.lsa_Strings.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_resume_handle, - { "Resume Handle", "samr.samr_EnumDomainAliases.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_num_aliases, - { "Num Aliases", "samr.samr_DomGeneralInformation.num_aliases", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_max_size, - { "Max Size", "samr.samr_EnumDomainAliases.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_full_name, - { "Full Name", "samr.samr_UserInfo21.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDomPwInfo_domain_name, - { "Domain Name", "samr.samr_GetDomPwInfo.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_primary_gid, - { "Primary Gid", "samr.samr_UserInfo3.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO, - { "Samr Alias Access Lookup Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info5, - { "Info5", "samr.samr_UserInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_home_directory, - { "Home Directory", "samr.samr_UserInfo3.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_cross2_present, - { "Cross2 Present", "samr.samr_ChangePasswordUser.cross2_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DeleteAliasMember_sid, - { "Sid", "samr.samr_DeleteAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePassword_rep, - { "Rep", "samr.samr_ValidatePassword.rep", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_fields_present, - { "Fields Present", "samr.samr_ValidatePasswordInfo.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER, - { "Samr Group Access Remove Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_SetMemberAttributesOfGroup_unknown1, - { "Unknown1", "samr.samr_SetMemberAttributesOfGroup.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex2_level, - { "Level", "samr.samr_GetDisplayEnumerationIndex2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED, - { "Acb Enc Txt Pwd Allowed", "samr.samr_AcctFlags.ACB_ENC_TXT_PWD_ALLOWED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED_tfs), ( 0x00000800 ), NULL, HFILL }}, - { &hf_samr_samr_AliasInfo_description, - { "Description", "samr.samr_AliasInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_info, - { "Info", "samr.samr_QueryDisplayInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_num_members, - { "Num Members", "samr.samr_GroupInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_status, - { "NT Error", "samr.status", FT_UINT32, BASE_HEX, VALS(NT_errors), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo12_profile_path, - { "Profile Path", "samr.samr_UserInfo12.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_comment, - { "Comment", "samr.samr_UserInfo21.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2, - { "Samr Domain Access Set Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info14, - { "Info14", "samr.samr_UserInfo.info14", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser2_access_granted, - { "Access Granted", "samr.samr_CreateUser2.access_granted", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectInfo1_client_version, - { "Client Version", "samr.samr_ConnectInfo1.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_acct_flags, - { "Acct Flags", "samr.samr_UserInfo5.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo24_password_expired, - { "Password Expired", "samr.samr_UserInfo24.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED, - { "Acb Not Delegated", "samr.samr_AcctFlags.ACB_NOT_DELEGATED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NOT_DELEGATED_tfs), ( 0x00004000 ), NULL, HFILL }}, - { &hf_samr_samr_SetDsrmPassword_name, - { "Name", "samr.samr_SetDsrmPassword.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect_system_name, - { "System Name", "samr.samr_Connect.system_name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_min_password_age, - { "Min Password Age", "samr.samr_DomInfo1.min_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupRids_num_rids, - { "Num Rids", "samr.samr_LookupRids.num_rids", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoDescription_description, - { "Description", "samr.samr_GroupInfoDescription.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo_level, - { "Level", "samr.samr_QueryUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID, - { "Se Group Logon Id", "samr.samr_GroupAttrs.SE_GROUP_LOGON_ID", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_LOGON_ID_tfs), ( 0xC0000000 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_account_name, - { "Account Name", "samr.samr_DispEntryGeneral.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_HOMDIRREQ, - { "Acb Homdirreq", "samr.samr_AcctFlags.ACB_HOMDIRREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_HOMDIRREQ_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_CryptPasswordEx_data, - { "Data", "samr.samr_CryptPasswordEx.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_bad_password_time, - { "Bad Password Time", "samr.samr_ValidatePasswordInfo.bad_password_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY, - { "Acb Use Des Key Only", "samr.samr_AcctFlags.ACB_USE_DES_KEY_ONLY", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_USE_DES_KEY_ONLY_tfs), ( 0x00008000 ), NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info1, - { "Info1", "samr.samr_DispInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDomainInfo_level, - { "Level", "samr.samr_SetDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info4, - { "Info4", "samr.samr_DispInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo8_domain_create_time, - { "Domain Create Time", "samr.samr_DomInfo8.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_private, - { "Private", "samr.samr_UserInfo21.private", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_old_nt_crypted, - { "Old Nt Crypted", "samr.samr_ChangePasswordUser.old_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_force_logoff_time, - { "Force Logoff Time", "samr.samr_DomGeneralInformation.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo12_lockout_threshold, - { "Lockout Threshold", "samr.samr_DomInfo12.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAttributes_attributes, + { &hf_samr_samr_UserInfo21_workstations, + { "Workstations", "samr.samr_UserInfo21.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_NORMAL, + { "Acb Normal", "samr.samr_AcctFlags.ACB_NORMAL", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NORMAL_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM, + { "Samr User Access Set Loc Com", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_LOC_COM", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER, + { "Samr Access Initialize Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_INITIALIZE_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info7, + { "Info7", "samr.samr_UserInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAttributes_attributes, { "Attributes", "samr.samr_GroupInfoAttributes.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SamArray_entries, - { "Entries", "samr.samr_SamArray.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info9, - { "Info9", "samr.samr_UserInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_lm_password, - { "Lm Password", "samr.samr_ChangePasswordUser2.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_full_name, - { "Full Name", "samr.samr_DispEntryGeneral.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_domain_handle, - { "Domain Handle", "samr.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_general, - { "General", "samr.samr_DomGeneralInformation2.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasInfoAll_num_members, - { "Num Members", "samr.samr_AliasInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO, - { "Samr Group Access Set Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_description, - { "Description", "samr.samr_DispEntryFull.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupDomain_domain_name, - { "Domain Name", "samr.samr_LookupDomain.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRep_ctr3, - { "Ctr3", "samr.samr_ValidatePasswordRep.ctr3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_user_handle, - { "User Handle", "samr.user_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_max_entries, - { "Max Entries", "samr.samr_QueryDisplayInfo3.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo6_primary, + { &hf_samr_samr_ChangePasswordUser3_server, + { "Server", "samr.samr_ChangePasswordUser3.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO, + { "Samr Alias Access Lookup Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_ConnectInfo1_unknown2, + { "Unknown2", "samr.samr_ConnectInfo1.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex2_idx, + { "Idx", "samr.samr_GetDisplayEnumerationIndex2.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_max_size, + { "Max Size", "samr.samr_EnumDomainGroups.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_acct_flags, + { "Acct Flags", "samr.samr_UserInfo3.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo6_primary, { "Primary", "samr.samr_DomInfo6.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX, - { "Domain Password Complex", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_COMPLEX", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_domain_access_mask, - { "Access Mask", "samr.domain.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_system_name, - { "System Name", "samr.samr_Connect5.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_bad_password_count, - { "Bad Password Count", "samr.samr_UserInfo21.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_acct_expiry, - { "Acct Expiry", "samr.samr_UserInfo21.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_max_size, - { "Max Size", "samr.samr_EnumDomainUsers.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE, - { "Samr Field Allow Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_ALLOW_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE_tfs), ( 0x00010000 ), NULL, HFILL }}, - { &hf_samr_samr_LookupNames_rids, - { "Rids", "samr.samr_LookupNames.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_min_password_length, - { "Min Password Length", "samr.samr_DomInfo1.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon, - { "Pwd Must Change At Next Logon", "samr.samr_ValidatePasswordReq3.pwd_must_change_at_next_logon", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS, - { "Samr Field Workstations", "samr.samr_FieldsPresent.SAMR_FIELD_WORKSTATIONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex_idx, - { "Idx", "samr.samr_GetDisplayEnumerationIndex.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo9_domain_server_state, - { "Domain Server State", "samr.samr_DomInfo9.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_level_out, - { "Level Out", "samr.samr_Connect5.level_out", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_last_logon, - { "Last Logon", "samr.samr_UserInfo5.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_server, - { "Server", "samr.samr_ChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDomainInfo_info, - { "Info", "samr.samr_SetDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SamArray_count, - { "Count", "samr.samr_SamArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo24_password, - { "Password", "samr.samr_UserInfo24.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_idx, - { "Idx", "samr.samr_DispEntryFull.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER, - { "Samr Access Initialize Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_INITIALIZE_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_acct_flags, - { "Acct Flags", "samr.samr_DispEntryFull.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo13_modified_count_at_last_promotion, - { "Modified Count At Last Promotion", "samr.samr_DomInfo13.modified_count_at_last_promotion", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetAliasMembership_sids, - { "Sids", "samr.samr_GetAliasMembership.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info1, - { "Info1", "samr.samr_UserInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE, + { &hf_samr_samr_SetUserInfo_level, + { "Level", "samr.samr_SetUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_SetUserInfo2_level, + { "Level", "samr.samr_SetUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_acct_expiry, + { "Acct Expiry", "samr.samr_UserInfo5.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE, { "Se Group Resource", "samr.samr_GroupAttrs.SE_GROUP_RESOURCE", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_RESOURCE_tfs), ( 0x20000000 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION, - { "Samr Field Description", "samr.samr_FieldsPresent.SAMR_FIELD_DESCRIPTION", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_DESCRIPTION_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_nt_pwd, - { "Nt Pwd", "samr.samr_UserInfo18.nt_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo23_password, - { "Password", "samr.samr_UserInfo23.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_last_logoff, - { "Last Logoff", "samr.samr_UserInfo21.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info2, - { "Info2", "samr.samr_DispInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_resume_handle, - { "Resume Handle", "samr.samr_EnumDomainUsers.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRepCtr_status, - { "Status", "samr.samr_ValidatePasswordRepCtr.status", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidationStatus_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SetMemberAttributesOfGroup_unknown2, - { "Unknown2", "samr.samr_SetMemberAttributesOfGroup.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_general2, - { "General2", "samr.samr_DomainInfo.general2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoFull_count, - { "Count", "samr.samr_DispInfoFull.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS, - { "Samr Group Access Get Members", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE, - { "Samr Field Country Code", "samr.samr_FieldsPresent.SAMR_FIELD_COUNTRY_CODE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE_tfs), ( 0x00400000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_password, - { "Password", "samr.samr_ValidatePasswordReq2.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_logon_hours, - { "Logon Hours", "samr.samr_UserInfo5.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY, - { "Samr Field Home Directory", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DIRECTORY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD, - { "Acb No Auth Data Reqd", "samr.samr_AcctFlags.ACB_NO_AUTH_DATA_REQD", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NO_AUTH_DATA_REQD_tfs), ( 0x00080000 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo_level, - { "Level", "samr.samr_QueryDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo26_password, - { "Password", "samr.samr_UserInfo26.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq1_password_matched, - { "Password Matched", "samr.samr_ValidatePasswordReq1.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_account_name, - { "Account Name", "samr.samr_UserInfo21.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES, - { "Samr User Access Get Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO, - { "Samr Alias Access Set Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_comment, - { "Comment", "samr.samr_UserInfo2.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_RID, - { "Samr Field Rid", "samr.samr_FieldsPresent.SAMR_FIELD_RID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_RID_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info23, - { "Info23", "samr.samr_UserInfo.info23", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_password_expired, - { "Password Expired", "samr.samr_UserInfo18.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_total_size, + { &hf_samr_samr_ChangePasswordUser_cross2_present, + { "Cross2 Present", "samr.samr_ChangePasswordUser.cross2_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser_account_name, + { "Account Name", "samr.samr_CreateUser.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_oem_information, + { "Oem Information", "samr.samr_DomGeneralInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_lm_cross, + { "Lm Cross", "samr.samr_ChangePasswordUser.lm_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomOEMInformation_oem_information, + { "Oem Information", "samr.samr_DomOEMInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_rid, + { "RID", "samr.rid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_country_code, + { "Country Code", "samr.samr_UserInfo2.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO, + { "Samr Group Access Set Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_buf_size, + { "Buf Size", "samr.samr_QueryDisplayInfo2.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER, + { "Samr Access Connect To Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CONNECT_TO_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo6_account_name, + { "Account Name", "samr.samr_UserInfo6.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_home_directory, + { "Home Directory", "samr.samr_UserInfo21.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_logon_count, + { "Logon Count", "samr.samr_UserInfo21.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_lm_password, + { "Lm Password", "samr.samr_ChangePasswordUser2.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_total_size, { "Total Size", "samr.samr_QueryDisplayInfo2.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo25_password, - { "Password", "samr.samr_UserInfo25.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_lm_verifier, - { "Lm Verifier", "samr.samr_ChangePasswordUser2.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo4_logon_hours, + { &hf_samr_samr_DomInfo1_min_password_age, + { "Min Password Age", "samr.samr_DomInfo1.min_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidWithAttribute_attributes, + { "Attributes", "samr.samr_RidWithAttribute.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_level, + { "Level", "samr.samr_QueryDisplayInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT, + { "Domain Password Store Cleartext", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_STORE_CLEARTEXT", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo4_logon_hours, { "Logon Hours", "samr.samr_UserInfo4.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_home_directory, - { "Home Directory", "samr.samr_UserInfo5.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo12_lockout_duration, + { &hf_samr_samr_ChangePasswordUser_lm_present, + { "Lm Present", "samr.samr_ChangePasswordUser.lm_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_alias_access_mask, + { "Access Mask", "samr.alias.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo12_lockout_duration, { "Lockout Duration", "samr.samr_DomInfo12.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser_account_name, - { "Account Name", "samr.samr_CreateUser.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo9_primary_gid, - { "Primary Gid", "samr.samr_UserInfo9.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO, - { "Samr User Access Get Logoninfo", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOGONINFO", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET, - { "Samr Validate Field Password Last Set", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_domain_name, - { "Domain Name", "samr.samr_DomGeneralInformation.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser2_account_name, - { "Account Name", "samr.samr_CreateUser2.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN, - { "Samr Access Create Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CREATE_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_LookupDomain_sid, - { "Sid", "samr.samr_LookupDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AddAliasMember_sid, - { "Sid", "samr.samr_AddAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryAliasInfo_info, - { "Info", "samr.samr_QueryAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_hash, - { "Hash", "samr.samr_ValidatePasswordReq2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_fields_present, - { "Fields Present", "samr.samr_UserInfo21.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG, - { "Samr Field Expired Flag", "samr.samr_FieldsPresent.SAMR_FIELD_EXPIRED_FLAG", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG_tfs), ( 0x08000000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_password_matched, - { "Password Matched", "samr.samr_ValidatePasswordReq2.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QuerySecurity_sec_info, - { "Sec Info", "samr.samr_QuerySecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info12, - { "Info12", "samr.samr_DomainInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_max_entries, - { "Max Entries", "samr.samr_QueryDisplayInfo.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_resume_handle, - { "Resume Handle", "samr.samr_EnumDomains.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info7, - { "Info7", "samr.samr_UserInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_all2, - { "All2", "samr.samr_GroupInfo.all2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_full_name, - { "Full Name", "samr.samr_UserInfo1.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_resume_handle, - { "Resume Handle", "samr.samr_EnumDomainGroups.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo2_info, + { &hf_samr_samr_LookupDomain_domain_name, + { "Domain Name", "samr.samr_LookupDomain.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED, + { "Acb Not Delegated", "samr.samr_AcctFlags.ACB_NOT_DELEGATED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NOT_DELEGATED_tfs), ( 0x00004000 ), NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_password3, + { "Password3", "samr.samr_ChangePasswordUser3.password3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT, + { "Samr Field Lm Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_LM_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT_tfs), ( 0x02000000 ), NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_attributes, + { "Attributes", "samr.samr_GroupInfoAll.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_start_idx, + { "Start Idx", "samr.samr_QueryDisplayInfo.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryAscii_account_name, + { "Account Name", "samr.samr_DispEntryAscii.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetGroupInfo_level, + { "Level", "samr.samr_SetGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_SetUserInfo2_info, { "Info", "samr.samr_SetUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_nt_password, - { "Nt Password", "samr.samr_ChangePasswordUser3.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_buf_count, - { "Buf Count", "samr.samr_UserInfo21.buf_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PwInfo_min_password_length, - { "Min Password Length", "samr.samr_PwInfo.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_user_access_mask, - { "Access Mask", "samr.user.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_sequence_num, - { "Sequence Num", "samr.samr_DomGeneralInformation.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo26_password_expired, - { "Password Expired", "samr.samr_UserInfo26.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_old_lm_crypted, - { "Old Lm Crypted", "samr.samr_ChangePasswordUser.old_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS, - { "Samr Alias Access Get Members", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_NORMAL, - { "Acb Normal", "samr.samr_AcctFlags.ACB_NORMAL", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NORMAL_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_all, - { "All", "samr.samr_GroupInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo16_acct_flags, - { "Acct Flags", "samr.samr_UserInfo16.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_country_code, - { "Country Code", "samr.samr_UserInfo2.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AddGroupMember_flags, - { "Flags", "samr.samr_AddGroupMember.flags", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo10_home_directory, - { "Home Directory", "samr.samr_UserInfo10.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_server, + { &hf_samr_samr_DispEntryGeneral_idx, + { "Idx", "samr.samr_DispEntryGeneral.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_name, + { "Name", "samr.samr_GroupInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex2_level, + { "Level", "samr.samr_GetDisplayEnumerationIndex2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER, + { "Samr Domain Access Create User", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_USER", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_account_name, + { "Account Name", "samr.samr_UserInfo3.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS, + { "Samr Field Parameters", "samr.samr_FieldsPresent.SAMR_FIELD_PARAMETERS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PARAMETERS_tfs), ( 0x00200000 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_oem, + { "Oem", "samr.samr_DomainInfo.oem", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info8, + { "Info8", "samr.samr_DomainInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_info, + { "Info", "samr.samr_QueryDisplayInfo3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_force_password_change, + { "Force Password Change", "samr.samr_UserInfo3.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo9_domain_server_state, + { "Domain Server State", "samr.samr_DomInfo9.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_logon_count, + { "Logon Count", "samr.samr_UserInfo3.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfoAll_num_members, + { "Num Members", "samr.samr_AliasInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_max_size, + { "Max Size", "samr.samr_EnumDomainUsers.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_unknown, + { "Unknown", "samr.samr_UserInfo2.unknown", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_general2, + { "General2", "samr.samr_DomainInfo.general2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_server, + { "Server", "samr.samr_ChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupNames_types, + { "Types", "samr.samr_LookupNames.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_acct_flags, + { "Acct Flags", "samr.samr_UserInfo5.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupNames_rids, + { "Rids", "samr.samr_LookupNames.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_returned_size, + { "Returned Size", "samr.samr_QueryDisplayInfo.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_server, { "Server", "samr.samr_OemChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD, - { "Samr User Access Change Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_AliasInfo_all, - { "All", "samr.samr_AliasInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME, - { "Samr Validate Field Bad Password Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_ChangeReject_reason, - { "Reason", "samr.samr_ChangeReject.reason", FT_UINT32, BASE_DEC, VALS(samr_samr_RejectReason_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC, - { "Samr User Access Get Name Etc", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_NAME_ETC", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_password3, - { "Password3", "samr.samr_ChangePasswordUser3.password3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo13_description, - { "Description", "samr.samr_UserInfo13.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_lm_password_set, - { "Lm Password Set", "samr.samr_UserInfo21.lm_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info2, - { "Info2", "samr.samr_UserInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LogonHours_bits, - { "Bits", "samr.samr_LogonHours.bits", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_handle, + { &hf_samr_samr_QueryDomainInfo_info, + { "Info", "samr.samr_QueryDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo2_level, + { "Level", "samr.samr_QueryUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS, + { "Samr Domain Access Create Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info12, + { "Info12", "samr.samr_DomainInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER, + { "Samr Access Shutdown Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_SHUTDOWN_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_account, + { "Account", "samr.samr_ValidatePasswordReq2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_handle, { "Handle", "samr.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT, - { "Se Group Enabled By Default", "samr.samr_GroupAttrs.SE_GROUP_ENABLED_BY_DEFAULT", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_sam, - { "Sam", "samr.samr_EnumDomainGroups.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_name, - { "Name", "samr.samr_GroupInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRep_ctr2, - { "Ctr2", "samr.samr_ValidatePasswordRep.ctr2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info24, - { "Info24", "samr.samr_UserInfo.info24", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info3, - { "Info3", "samr.samr_DomainInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_num_entries, - { "Num Entries", "samr.samr_EnumDomainGroups.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_PWNOTREQ, - { "Acb Pwnotreq", "samr.samr_AcctFlags.ACB_PWNOTREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOTREQ_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_bad_password_count, - { "Bad Password Count", "samr.samr_UserInfo3.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE, - { "Samr Field Code Page", "samr.samr_FieldsPresent.SAMR_FIELD_CODE_PAGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_CODE_PAGE_tfs), ( 0x00800000 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_new_lm_crypted, - { "New Lm Crypted", "samr.samr_ChangePasswordUser.new_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_types, - { "Types", "samr.samr_LookupNames.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SamEntry_idx, - { "Idx", "samr.samr_SamEntry.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_logon_hours, - { "Logon Hours", "samr.samr_UserInfo3.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangeReject_unknown1, - { "Unknown1", "samr.samr_ChangeReject.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_account, - { "Account", "samr.samr_ChangePasswordUser3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo8_sequence_num, - { "Sequence Num", "samr.samr_DomInfo8.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_pwd_history, - { "Pwd History", "samr.samr_ValidatePasswordInfo.pwd_history", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect3_unknown, - { "Unknown", "samr.samr_Connect3.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN, - { "Samr Access Lookup Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_LOOKUP_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex2_idx, - { "Idx", "samr.samr_GetDisplayEnumerationIndex2.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectInfo1_unknown2, - { "Unknown2", "samr.samr_ConnectInfo1.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasInfoAll_name, - { "Name", "samr.samr_AliasInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_description, - { "Description", "samr.samr_GroupInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_OWNER, - { "Se Group Owner", "samr.samr_GroupAttrs.SE_GROUP_OWNER", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_OWNER_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_sam, - { "Sam", "samr.samr_EnumDomainAliases.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LogonHours_units_per_week, - { "Units Per Week", "samr.samr_LogonHours.units_per_week", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_role, - { "Role", "samr.samr_DomGeneralInformation.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info13, - { "Info13", "samr.samr_DomainInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetSecurity_sec_info, - { "Sec Info", "samr.samr_SetSecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_buf_size, - { "Buf Size", "samr.samr_QueryDisplayInfo2.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT, - { "Domain Password Store Cleartext", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_STORE_CLEARTEXT", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_lockout_threshold, - { "Lockout Threshold", "samr.samr_DomGeneralInformation2.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_last_password_change, - { "Last Password Change", "samr.samr_UserInfo21.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_account, - { "Account", "samr.samr_ChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_lm_password, - { "Lm Password", "samr.samr_ChangePasswordUser3.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_account_name, - { "Account Name", "samr.samr_UserInfo3.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect3_system_name, - { "System Name", "samr.samr_Connect3.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info11, - { "Info11", "samr.samr_UserInfo.info11", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info9, - { "Info9", "samr.samr_DomainInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SamEntry_name, - { "Name", "samr.samr_SamEntry.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_lsa_Strings_count, - { "Count", "samr.lsa_Strings.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_acct_flags, - { "Acct Flags", "samr.samr_UserInfo3.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_allow_password_change, + { &hf_samr_samr_ValidatePasswordReq2_password, + { "Password", "samr.samr_ValidatePasswordReq2.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info5, + { "Info5", "samr.samr_UserInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_logon_hours, + { "Logon Hours", "samr.samr_UserInfo5.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_allow_password_change, { "Allow Password Change", "samr.samr_UserInfo3.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo2_level, - { "Level", "samr.samr_QueryDomainInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex_name, - { "Name", "samr.samr_GetDisplayEnumerationIndex.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_info, - { "Info", "samr.samr_ValidatePasswordReq3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_lockout_time, - { "Lockout Time", "samr.samr_ValidatePasswordInfo.lockout_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo17_acct_expiry, + { &hf_samr_samr_RidWithAttributeArray_count, + { "Count", "samr.samr_RidWithAttributeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES, + { "Samr User Access Set Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info12, + { "Info12", "samr.samr_UserInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_resume_handle, + { "Resume Handle", "samr.samr_EnumDomainGroups.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo17_acct_expiry, { "Acct Expiry", "samr.samr_UserInfo17.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_password_history_length, - { "Password History Length", "samr.samr_DomInfo1.password_history_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo_info, - { "Info", "samr.samr_QueryUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_primary, - { "Primary", "samr.samr_DomGeneralInformation.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER, - { "Samr Access Shutdown Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_SHUTDOWN_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT, - { "Samr Field Lm Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_LM_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT_tfs), ( 0x02000000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_home_drive, + { &hf_samr_samr_ConnectInfo_info1, + { "Info1", "samr.samr_ConnectInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_num_entries, + { "Num Entries", "samr.samr_EnumDomainAliases.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_lm_password_set, + { "Lm Password Set", "samr.samr_UserInfo21.lm_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME, + { "Samr Field Account Name", "samr.samr_FieldsPresent.SAMR_FIELD_ACCOUNT_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_connect_handle, + { "Connect Handle", "samr.samr_EnumDomains.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetUserInfo_info, + { "Info", "samr.samr_SetUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDomainInfo_level, + { "Level", "samr.samr_QueryDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePassword_level, + { "Level", "samr.samr_ValidatePassword.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidatePasswordLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_sam, + { "Sam", "samr.samr_EnumDomainUsers.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo26_password_expired, + { "Password Expired", "samr.samr_UserInfo26.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_password, + { "Password", "samr.samr_ValidatePasswordReq3.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DeleteAliasMember_sid, + { "Sid", "samr.samr_DeleteAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo26_password, + { "Password", "samr.samr_UserInfo26.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_home_drive, { "Home Drive", "samr.samr_UserInfo5.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RemoveMemberFromForeignDomain_sid, - { "Sid", "samr.samr_RemoveMemberFromForeignDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE, - { "Samr Field Force Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_FORCE_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE_tfs), ( 0x00020000 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF, - { "Samr Field Last Logoff", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGOFF", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF_tfs), ( 0x00001000 ), NULL, HFILL }}, - { &hf_samr_samr_RidWithAttributeArray_rids, - { "Rids", "samr.samr_RidWithAttributeArray.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Password_hash, - { "Hash", "samr.samr_Password.hash", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD, - { "Samr Field Owf Pwd", "samr.samr_FieldsPresent.SAMR_FIELD_OWF_PWD", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_OWF_PWD_tfs), ( 0x20000000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info25, - { "Info25", "samr.samr_UserInfo.info25", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_home_drive, - { "Home Drive", "samr.samr_UserInfo3.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_start_idx, - { "Start Idx", "samr.samr_QueryDisplayInfo.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info13, - { "Info13", "samr.samr_UserInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_nt_password, - { "Nt Password", "samr.samr_ChangePasswordUser2.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_bad_pwd_count, - { "Bad Pwd Count", "samr.samr_ValidatePasswordInfo.bad_pwd_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryGroupMember_rids, - { "Rids", "samr.samr_QueryGroupMember.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_password_expired, + { &hf_samr_samr_AliasInfoAll_description, + { "Description", "samr.samr_AliasInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_nt_password, + { "Nt Password", "samr.samr_ChangePasswordUser3.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_account, + { "Account", "samr.samr_OemChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info4, + { "Info4", "samr.samr_DispInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_attributes, + { "Attributes", "samr.samr_GroupInfo.attributes", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_PWNOTREQ, + { "Acb Pwnotreq", "samr.samr_AcctFlags.ACB_PWNOTREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOTREQ_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_AliasInfo_all, + { "All", "samr.samr_AliasInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_num_aliases, + { "Num Aliases", "samr.samr_DomGeneralInformation.num_aliases", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRep_ctr1, + { "Ctr1", "samr.samr_ValidatePasswordRep.ctr1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_password_expired, { "Password Expired", "samr.samr_UserInfo21.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_buf_size, - { "Buf Size", "samr.samr_EnumDomains.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_max_password_age, - { "Max Password Age", "samr.samr_DomInfo1.max_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER, - { "Samr Group Access Add Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_description, - { "Description", "samr.samr_GroupInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_logon_count, - { "Logon Count", "samr.samr_UserInfo3.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY, - { "Samr Validate Field Password History", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_name, - { "Name", "samr.samr_GroupInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_force_password_change, - { "Force Password Change", "samr.samr_UserInfo3.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_nt_present, - { "Nt Present", "samr.samr_ChangePasswordUser.nt_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_home_directory, - { "Home Directory", "samr.samr_UserInfo21.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info12, - { "Info12", "samr.samr_UserInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_password, - { "Password", "samr.samr_OemChangePasswordUser2.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidTypeArray_types, - { "Types", "samr.samr_RidTypeArray.types", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS, - { "Samr Domain Access Create Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_opnum, - { "Operation", "samr.opnum", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_server, - { "Server", "samr.samr_ChangePasswordUser3.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex2_name, - { "Name", "samr.samr_GetDisplayEnumerationIndex2.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO, - { "Samr Group Access Lookup Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo14_workstations, + { &hf_samr_samr_DispEntryFullGroup_idx, + { "Idx", "samr.samr_DispEntryFullGroup.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_country_code, + { "Country Code", "samr.samr_UserInfo21.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY, + { "Se Group Use For Deny Only", "samr.samr_GroupAttrs.SE_GROUP_USE_FOR_DENY_ONLY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT, + { "Samr Field Comment", "samr.samr_FieldsPresent.SAMR_FIELD_COMMENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COMMENT_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS, + { "Samr Group Access Get Members", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo14_workstations, { "Workstations", "samr.samr_UserInfo14.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info3, - { "Info3", "samr.samr_DispInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info8, - { "Info8", "samr.samr_DomainInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoGeneral_entries, - { "Entries", "samr.samr_DispInfoGeneral.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo8_full_name, - { "Full Name", "samr.samr_UserInfo8.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_logon_count, - { "Logon Count", "samr.samr_UserInfo21.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_code_page, - { "Code Page", "samr.samr_UserInfo21.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_acct_flags, - { "Acct Flags", "samr.samr_DispEntryFullGroup.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo_info, - { "Info", "samr.samr_SetUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OpenDomain_sid, - { "Sid", "samr.samr_OpenDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_account_name, - { "Account Name", "samr.samr_DispEntryFull.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH, - { "Samr Validate Field Password History Length", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_CreateUser2_acct_flags, + { &hf_samr_samr_GroupInfoDescription_description, + { "Description", "samr.samr_GroupInfoDescription.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidWithAttributeArray_rids, + { "Rids", "samr.samr_RidWithAttributeArray.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_acct_flags, + { "Acct Flags", "samr.samr_UserInfo21.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser2_acct_flags, { "Acct Flags", "samr.samr_CreateUser2.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE, - { "Samr Field Home Drive", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DRIVE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info1, - { "Info1", "samr.samr_DomainInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRep_ctr1, - { "Ctr1", "samr.samr_ValidatePasswordRep.ctr1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_nt_pwd_active, - { "Nt Pwd Active", "samr.samr_UserInfo18.nt_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_DOMTRUST, - { "Acb Domtrust", "samr.samr_AcctFlags.ACB_DOMTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DOMTRUST_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_lm_cross, - { "Lm Cross", "samr.samr_ChangePasswordUser.lm_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_profile_path, - { "Profile Path", "samr.samr_UserInfo3.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_unknown4, - { "Unknown4", "samr.samr_UserInfo21.unknown4", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo13_domain_create_time, - { "Domain Create Time", "samr.samr_DomInfo13.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_WSTRUST, - { "Acb Wstrust", "samr.samr_AcctFlags.ACB_WSTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_WSTRUST_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryAscii_idx, + { &hf_samr_samr_CryptPasswordEx_data, + { "Data", "samr.samr_CryptPasswordEx.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC, + { "Samr User Access Get Name Etc", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_NAME_ETC", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_info, + { "Info", "samr.samr_ValidatePasswordReq3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoGeneral_entries, + { "Entries", "samr.samr_DispInfoGeneral.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetMembersInAlias_sids, + { "Sids", "samr.samr_GetMembersInAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_num_entries, + { "Num Entries", "samr.samr_EnumDomainGroups.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetBootKeyInformation_unknown1, + { "Unknown1", "samr.samr_SetBootKeyInformation.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_password_matched, + { "Password Matched", "samr.samr_ValidatePasswordReq2.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_description, + { "Description", "samr.samr_DispEntryFull.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_parameters, + { "Parameters", "samr.samr_UserInfo21.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT, + { "Samr Domain Access Open Account", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_DispEntryAscii_idx, { "Idx", "samr.samr_DispEntryAscii.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo5_domain_name, + { &hf_samr_samr_ValidatePasswordReq3_clear_lockout, + { "Clear Lockout", "samr.samr_ValidatePasswordReq3.clear_lockout", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_role, + { "Role", "samr.samr_DomGeneralInformation.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS, + { "Samr Field Workstations", "samr.samr_FieldsPresent.SAMR_FIELD_WORKSTATIONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_DomInfo5_domain_name, { "Domain Name", "samr.samr_DomInfo5.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_logon_count, - { "Logon Count", "samr.samr_UserInfo5.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_last_logoff, - { "Last Logoff", "samr.samr_UserInfo5.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePassword_level, - { "Level", "samr.samr_ValidatePassword.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidatePasswordLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo6_full_name, - { "Full Name", "samr.samr_UserInfo6.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupRids_names, - { "Names", "samr.samr_LookupRids.names", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo10_home_drive, - { "Home Drive", "samr.samr_UserInfo10.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS, - { "Samr Field Acct Flags", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_FLAGS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS_tfs), ( 0x00100000 ), NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP, + { "Samr User Access Change Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_resume_handle, + { "Resume Handle", "samr.samr_EnumDomainUsers.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_primary_gid, + { "Primary Gid", "samr.samr_UserInfo5.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_workstations, + { "Workstations", "samr.samr_UserInfo5.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect3_unknown, + { "Unknown", "samr.samr_Connect3.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS, { "Samr User Access Get Groups", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUPS", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_RemoveMultipleMembersFromAlias_sids, - { "Sids", "samr.samr_RemoveMultipleMembersFromAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_account, - { "Account", "samr.samr_OemChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS, + { &hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED, + { "Acb Enc Txt Pwd Allowed", "samr.samr_AcctFlags.ACB_ENC_TXT_PWD_ALLOWED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED_tfs), ( 0x00000800 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_last_logon, + { "Last Logon", "samr.samr_UserInfo5.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo16_acct_flags, + { "Acct Flags", "samr.samr_UserInfo16.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo12_lockout_window, + { "Lockout Window", "samr.samr_DomInfo12.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRep_ctr3, + { "Ctr3", "samr.samr_ValidatePasswordRep.ctr3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_all2, + { "All2", "samr.samr_GroupInfo.all2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupDomain_sid, + { "Sid", "samr.samr_LookupDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_home_drive, + { "Home Drive", "samr.samr_UserInfo3.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LogonHours_units_per_week, + { "Units Per Week", "samr.samr_LogonHours.units_per_week", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_max_size, + { "Max Size", "samr.samr_EnumDomainAliases.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_nt_password_set, + { "Nt Password Set", "samr.samr_UserInfo21.nt_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePassword_req, + { "Req", "samr.samr_ValidatePassword.req", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_num_groups, + { "Num Groups", "samr.samr_DomGeneralInformation.num_groups", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SamArray_entries, + { "Entries", "samr.samr_SamArray.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidationBlob_data, + { "Data", "samr.samr_ValidationBlob.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_code_page, + { "Code Page", "samr.samr_UserInfo21.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO, + { "Samr Group Access Lookup Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_DispInfoFullGroups_count, + { "Count", "samr.samr_DispInfoFullGroups.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRep_ctr2, + { "Ctr2", "samr.samr_ValidatePasswordRep.ctr2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetBootKeyInformation_domain_handle, + { "Domain Handle", "samr.samr_GetBootKeyInformation.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info18, + { "Info18", "samr.samr_UserInfo.info18", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS, { "Samr Access Enum Domains", "samr.samr_ConnectAccessMask.SAMR_ACCESS_ENUM_DOMAINS", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info4, - { "Info4", "samr.samr_UserInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_info, - { "Info", "samr.samr_QueryDisplayInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_password_properties, - { "Password Properties", "samr.samr_DomInfo1.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_logon_script, - { "Logon Script", "samr.samr_UserInfo21.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_AUTOLOCK, - { "Acb Autolock", "samr.samr_AcctFlags.ACB_AUTOLOCK", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_AUTOLOCK_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_samr_GetBootKeyInformation_unknown, - { "Unknown", "samr.samr_GetBootKeyInformation.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidWithAttribute_attributes, - { "Attributes", "samr.samr_RidWithAttribute.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CryptPassword_data, - { "Data", "samr.samr_CryptPassword.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasInfo_name, - { "Name", "samr.samr_AliasInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER, - { "Samr Domain Access Create User", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_USER", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT, - { "Samr Field Comment", "samr.samr_FieldsPresent.SAMR_FIELD_COMMENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COMMENT_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_last_password_change, + { &hf_samr_samr_ChangePasswordUser3_nt_verifier, + { "Nt Verifier", "samr.samr_ChangePasswordUser3.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info13, + { "Info13", "samr.samr_UserInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_fields_present, + { "Fields Present", "samr.samr_UserInfo21.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_primary_gid, + { "Primary Gid", "samr.samr_UserInfo21.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_all, + { "All", "samr.samr_GroupInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect5_system_name, + { "System Name", "samr.samr_Connect5.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_buf_size, + { "Buf Size", "samr.samr_QueryDisplayInfo3.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_old_lm_crypted, + { "Old Lm Crypted", "samr.samr_ChangePasswordUser.old_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_DOMTRUST, + { "Acb Domtrust", "samr.samr_AcctFlags.ACB_DOMTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DOMTRUST_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE, + { "Domain Refuse Password Change", "samr.samr_PasswordProperties.DOMAIN_REFUSE_PASSWORD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_max_entries, + { "Max Entries", "samr.samr_QueryDisplayInfo.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_last_password_change, { "Last Password Change", "samr.samr_UserInfo3.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Shutdown_connect_handle, - { "Connect Handle", "samr.samr_Shutdown.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_sec_desc_buf_len, + { &hf_samr_samr_ValidatePasswordReq2_hash, + { "Hash", "samr.samr_ValidatePasswordReq2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_account_name, + { "Account Name", "samr.samr_UserInfo5.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDomPwInfo_info, + { "Info", "samr.samr_GetDomPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangeReject_unknown1, + { "Unknown1", "samr.samr_ChangeReject.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH, + { "Samr Field Profile Path", "samr.samr_FieldsPresent.SAMR_FIELD_PROFILE_PATH", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info16, + { "Info16", "samr.samr_UserInfo.info16", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_logon_script, + { "Logon Script", "samr.samr_UserInfo21.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_sec_desc_buf_len, { "Sec Desc Buf Len", "samr.sec_desc_buf_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED, - { "Se Group Enabled", "samr.samr_GroupAttrs.SE_GROUP_ENABLED", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2, - { "Samr Domain Access Lookup Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_ValidationBlob_length, - { "Length", "samr.samr_ValidationBlob.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_idx, - { "Idx", "samr.samr_DispEntryGeneral.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_start_idx, - { "Start Idx", "samr.samr_QueryDisplayInfo2.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_logon_hours, + { &hf_samr_samr_LookupNames_names, + { "Names", "samr.samr_LookupNames.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info14, + { "Info14", "samr.samr_UserInfo.info14", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDsrmPassword_name, + { "Name", "samr.samr_SetDsrmPassword.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_acct_flags, + { "Acct Flags", "samr.samr_DispEntryGeneral.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_PW_EXPIRED, + { "Acb Pw Expired", "samr.samr_AcctFlags.ACB_PW_EXPIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PW_EXPIRED_tfs), ( 0x00020000 ), NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1, + { "Samr Domain Access Lookup Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_last_logoff, + { "Last Logoff", "samr.samr_UserInfo3.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo2_info, + { "Info", "samr.samr_QueryUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRepCtr_status, + { "Status", "samr.samr_ValidatePasswordRepCtr.status", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidationStatus_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_max_password_age, + { "Max Password Age", "samr.samr_DomInfo1.max_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_full_name, + { "Full Name", "samr.samr_DispEntryGeneral.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex_name, + { "Name", "samr.samr_GetDisplayEnumerationIndex.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo13_sequence_num, + { "Sequence Num", "samr.samr_DomInfo13.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_returned_size, + { "Returned Size", "samr.samr_QueryDisplayInfo2.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo6_full_name, + { "Full Name", "samr.samr_UserInfo6.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_lm_change, + { "Lm Change", "samr.samr_ChangePasswordUser2.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LogonHours_bits, + { "Bits", "samr.samr_LogonHours.bits", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_lm_change, + { "Lm Change", "samr.samr_ChangePasswordUser3.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupNames_num_names, + { "Num Names", "samr.samr_LookupNames.num_names", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_logon_hours, { "Logon Hours", "samr.samr_UserInfo21.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_country_code, - { "Country Code", "samr.samr_UserInfo21.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDsrmPassword_hash, + { &hf_samr_lsa_Strings_count, + { "Count", "samr.lsa_Strings.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo11_logon_script, + { "Logon Script", "samr.samr_UserInfo11.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN, + { "Samr Access Lookup Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_LOOKUP_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_SetMemberAttributesOfGroup_unknown1, + { "Unknown1", "samr.samr_SetMemberAttributesOfGroup.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_lsa_Strings_names, + { "Names", "samr.lsa_Strings.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_bad_password_count, + { "Bad Password Count", "samr.samr_UserInfo21.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_num_entries, + { "Num Entries", "samr.samr_EnumDomains.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2, + { "Samr Domain Access Lookup Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS, + { "Samr Field Logon Hours", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_HOURS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS_tfs), ( 0x00002000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_last_password_change, + { "Last Password Change", "samr.samr_UserInfo5.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_TEMPDUP, + { "Acb Tempdup", "samr.samr_AcctFlags.ACB_TEMPDUP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TEMPDUP_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_new_lm_crypted, + { "New Lm Crypted", "samr.samr_ChangePasswordUser.new_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_primary_gid, + { "Primary Gid", "samr.samr_UserInfo3.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info3, + { "Info3", "samr.samr_UserInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info23, + { "Info23", "samr.samr_UserInfo.info23", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY, + { "Samr Validate Field Password History", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info17, + { "Info17", "samr.samr_UserInfo.info17", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_home_directory, + { "Home Directory", "samr.samr_UserInfo5.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDsrmPassword_hash, { "Hash", "samr.samr_SetDsrmPassword.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_general, - { "General", "samr.samr_DomainInfo.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY, - { "Se Group Mandatory", "samr.samr_GroupAttrs.SE_GROUP_MANDATORY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_MANDATORY_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_description, - { "Description", "samr.samr_UserInfo5.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo7_role, - { "Role", "samr.samr_DomInfo7.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_workstations, - { "Workstations", "samr.samr_UserInfo21.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_description, - { "Description", "samr.samr_DispEntryGeneral.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA, - { "Samr Field Private Data", "samr.samr_FieldsPresent.SAMR_FIELD_PRIVATE_DATA", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA_tfs), ( 0x04000000 ), NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS, - { "Samr Domain Access Enum Accounts", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq_req3, - { "Req3", "samr.samr_ValidatePasswordReq.req3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_alias_access_mask, - { "Access Mask", "samr.alias.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_nt_verifier, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE, + { "Samr Field Force Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_FORCE_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE_tfs), ( 0x00020000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_private, + { "Private", "samr.samr_UserInfo21.private", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_info, + { "Info", "samr.samr_QueryDisplayInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME, + { "Samr Validate Field Lockout Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_LOCKOUT_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_QueryAliasInfo_info, + { "Info", "samr.samr_QueryAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS, + { "Domain Password Lockout Admins", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_LOCKOUT_ADMINS", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD, + { "Samr Field Owf Pwd", "samr.samr_FieldsPresent.SAMR_FIELD_OWF_PWD", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_OWF_PWD_tfs), ( 0x20000000 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info1, + { "Info1", "samr.samr_DomainInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetSecurity_sdbuf, + { "Sdbuf", "samr.samr_SetSecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_dominfo, + { "Dominfo", "samr.samr_ChangePasswordUser3.dominfo", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser2_account_name, + { "Account Name", "samr.samr_CreateUser2.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_connect_access_mask, + { "Access Mask", "samr.connect.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateDomainGroup_name, + { "Name", "samr.samr_CreateDomainGroup.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_account_name, + { "Account Name", "samr.samr_DispEntryGeneral.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRepCtr_info, + { "Info", "samr.samr_ValidatePasswordRepCtr.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_nt_verifier, { "Nt Verifier", "samr.samr_ChangePasswordUser2.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION, + { &hf_samr_samr_AddGroupMember_flags, + { "Flags", "samr.samr_AddGroupMember.flags", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info1, + { "Info1", "samr.samr_UserInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_home_directory, + { "Home Directory", "samr.samr_UserInfo3.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryGroupInfo_level, + { "Level", "samr.samr_QueryGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_account, + { "Account", "samr.samr_ChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION, { "Acb Trusted For Delegation", "samr.samr_AcctFlags.ACB_TRUSTED_FOR_DELEGATION", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION_tfs), ( 0x00002000 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_connect_handle, - { "Connect Handle", "samr.samr_EnumDomains.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info18, - { "Info18", "samr.samr_UserInfo.info18", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_force_password_change, - { "Force Password Change", "samr.samr_UserInfo21.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_nt_password, - { "Nt Password", "samr.samr_UserInfo21.nt_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_domain_server_state, - { "Domain Server State", "samr.samr_DomGeneralInformation.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SetBootKeyInformation_unknown3, - { "Unknown3", "samr.samr_SetBootKeyInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_num_entries, - { "Num Entries", "samr.samr_EnumDomainUsers.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_info, - { "Info", "samr.samr_ValidatePasswordReq2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_num_names, - { "Num Names", "samr.samr_LookupNames.num_names", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_level, - { "Level", "samr.samr_QueryDisplayInfo3.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_RidTypeArray_count, - { "Count", "samr.samr_RidTypeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_max_entries, - { "Max Entries", "samr.samr_QueryDisplayInfo2.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_last_password_change, - { "Last Password Change", "samr.samr_ValidatePasswordInfo.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE, + { &hf_samr_samr_DomInfo1_password_properties, + { "Password Properties", "samr.samr_DomInfo1.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_lm_password, + { "Lm Password", "samr.samr_ChangePasswordUser3.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info1, + { "Info1", "samr.samr_DispInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect_system_name, + { "System Name", "samr.samr_Connect.system_name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo8_sequence_num, + { "Sequence Num", "samr.samr_DomInfo8.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_account_name, + { "Account Name", "samr.samr_UserInfo1.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_RID, + { "Samr Field Rid", "samr.samr_FieldsPresent.SAMR_FIELD_RID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_RID_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT, + { "Samr Field Bad Pwd Count", "samr.samr_FieldsPresent.SAMR_FIELD_BAD_PWD_COUNT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT_tfs), ( 0x00004000 ), NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE, + { "Domain Password No Anon Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_ANON_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo24_password, + { "Password", "samr.samr_UserInfo24.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo12_lockout_threshold, + { "Lockout Threshold", "samr.samr_DomInfo12.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_lockout_window, + { "Lockout Window", "samr.samr_DomGeneralInformation2.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE, { "Samr User Access Get Locale", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOCALE", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS, - { "Samr Field Logon Hours", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_HOURS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS_tfs), ( 0x00002000 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_dominfo, - { "Dominfo", "samr.samr_ChangePasswordUser3.dominfo", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidationBlob_data, - { "Data", "samr.samr_ValidationBlob.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_lm_pwd_active, - { "Lm Pwd Active", "samr.samr_UserInfo18.lm_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info26, - { "Info26", "samr.samr_UserInfo.info26", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_attributes, - { "Attributes", "samr.samr_GroupInfoAll.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info7, - { "Info7", "samr.samr_DomainInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER, - { "Samr Access Connect To Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CONNECT_TO_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_num_entries, - { "Num Entries", "samr.samr_EnumDomains.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_parameters, - { "Parameters", "samr.samr_UserInfo21.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_acct_flags, - { "Acct Flags", "samr.samr_DispEntryGeneral.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_connect_handle, - { "Connect Handle", "samr.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_TEMPDUP, - { "Acb Tempdup", "samr.samr_AcctFlags.ACB_TEMPDUP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TEMPDUP_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_DispInfoFullGroups_count, - { "Count", "samr.samr_DispInfoFullGroups.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1, - { "Samr Domain Access Lookup Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_GetAliasMembership_rids, - { "Rids", "samr.samr_GetAliasMembership.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo6_account_name, - { "Account Name", "samr.samr_UserInfo6.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_connect_access_mask, - { "Access Mask", "samr.connect.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info3, - { "Info3", "samr.samr_UserInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_level_in, - { "Level In", "samr.samr_Connect5.level_in", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo12_lockout_window, - { "Lockout Window", "samr.samr_DomInfo12.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidToSid_sid, - { "Sid", "samr.samr_RidToSid.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC, - { "Samr Field Sec Desc", "samr.samr_FieldsPresent.SAMR_FIELD_SEC_DESC", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_SEC_DESC_tfs), ( 0x10000000 ), NULL, HFILL }}, - { &hf_samr_samr_GetUserPwInfo_info, - { "Info", "samr.samr_GetUserPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_acct_flags, - { "Acct Flags", "samr.samr_EnumDomainUsers.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info6, - { "Info6", "samr.samr_DomainInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateDomAlias_alias_name, - { "Alias Name", "samr.samr_CreateDomAlias.alias_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_sam, - { "Sam", "samr.samr_EnumDomainUsers.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info5, - { "Info5", "samr.samr_DispInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetGroupsForUser_rids, + { &hf_samr_alias_handle, + { "Alias Handle", "samr.alias_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoGeneral_count, + { "Count", "samr.samr_DispInfoGeneral.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_profile_path, + { "Profile Path", "samr.samr_UserInfo3.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_HOMDIRREQ, + { "Acb Homdirreq", "samr.samr_AcctFlags.ACB_HOMDIRREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_HOMDIRREQ_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_Ids_count, + { "Count", "samr.samr_Ids.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_reject, + { "Reject", "samr.samr_ChangePasswordUser3.reject", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY, + { "Se Group Mandatory", "samr.samr_GroupAttrs.SE_GROUP_MANDATORY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_MANDATORY_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_GetGroupsForUser_rids, { "Rids", "samr.samr_GetGroupsForUser.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_last_logoff, - { "Last Logoff", "samr.samr_UserInfo3.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRepCtr_info, - { "Info", "samr.samr_ValidatePasswordRepCtr.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetGroupInfo_level, - { "Level", "samr.samr_SetGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT, + { &hf_samr_samr_UserInfo23_info, + { "Info", "samr.samr_UserInfo23.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_password_expired, + { "Password Expired", "samr.samr_UserInfo18.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo25_info, + { "Info", "samr.samr_UserInfo25.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OpenDomain_sid, + { "Sid", "samr.samr_OpenDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetAliasMembership_sids, + { "Sids", "samr.samr_GetAliasMembership.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX, + { "Domain Password Complex", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_COMPLEX", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE, + { "Samr Field Home Drive", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DRIVE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE_tfs), ( 0x00000080 ), NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_account_name, + { "Account Name", "samr.samr_DispEntryFullGroup.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT, { "Samr Field Nt Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_NT_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT_tfs), ( 0x01000000 ), NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT, + { "Samr Validate Field Bad Password Count", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_AddAliasMember_sid, + { "Sid", "samr.samr_AddAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD, { "Samr User Access Set Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo2_level, - { "Level", "samr.samr_SetUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_acct_expiry, - { "Acct Expiry", "samr.samr_UserInfo5.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_info_in, + { &hf_samr_samr_GetBootKeyInformation_unknown, + { "Unknown", "samr.samr_GetBootKeyInformation.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect2_system_name, + { "System Name", "samr.samr_Connect2.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_password_history_length, + { "Password History Length", "samr.samr_DomInfo1.password_history_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo25_password, + { "Password", "samr.samr_UserInfo25.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_fields_present, + { "Fields Present", "samr.samr_ValidatePasswordInfo.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq_req3, + { "Req3", "samr.samr_ValidatePasswordReq.req3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo7_account_name, + { "Account Name", "samr.samr_UserInfo7.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo9_primary_gid, + { "Primary Gid", "samr.samr_UserInfo9.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info3, + { "Info3", "samr.samr_DomainInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_logon_hours, + { "Logon Hours", "samr.samr_UserInfo3.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_acct_expiry, + { "Acct Expiry", "samr.samr_UserInfo21.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_new_nt_crypted, + { "New Nt Crypted", "samr.samr_ChangePasswordUser.new_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info6, + { "Info6", "samr.samr_DomainInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_nt_present, + { "Nt Present", "samr.samr_ChangePasswordUser.nt_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq_req2, + { "Req2", "samr.samr_ValidatePasswordReq.req2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDomainInfo_level, + { "Level", "samr.samr_SetDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_lm_password, + { "Lm Password", "samr.samr_UserInfo21.lm_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_description, + { "Description", "samr.samr_GroupInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_idx, + { "Idx", "samr.samr_DispEntryFull.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_resume_handle, + { "Resume Handle", "samr.samr_EnumDomains.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_num_users, + { "Num Users", "samr.samr_DomGeneralInformation.num_users", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY, + { "Samr Field Home Directory", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DIRECTORY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_level, + { "Level", "samr.samr_QueryDisplayInfo3.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED, + { "Se Group Enabled", "samr.samr_GroupAttrs.SE_GROUP_ENABLED", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_SVRTRUST, + { "Acb Svrtrust", "samr.samr_AcctFlags.ACB_SVRTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SVRTRUST_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_SetMemberAttributesOfGroup_unknown2, + { "Unknown2", "samr.samr_SetMemberAttributesOfGroup.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_comment, + { "Comment", "samr.samr_UserInfo1.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY, + { "Acb Use Des Key Only", "samr.samr_AcctFlags.ACB_USE_DES_KEY_ONLY", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_USE_DES_KEY_ONLY_tfs), ( 0x00008000 ), NULL, HFILL }}, + { &hf_samr_samr_RemoveMultipleMembersFromAlias_sids, + { "Sids", "samr.samr_RemoveMultipleMembersFromAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info7, + { "Info7", "samr.samr_DomainInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_lockout_duration, + { "Lockout Duration", "samr.samr_DomGeneralInformation2.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER, + { "Samr Alias Access Remove Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER, + { "Samr Group Access Add Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS, + { "Samr Field Num Logons", "samr.samr_FieldsPresent.SAMR_FIELD_NUM_LOGONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS_tfs), ( 0x00008000 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_info, + { "Info", "samr.samr_ValidatePasswordReq2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_buf_size, + { "Buf Size", "samr.samr_EnumDomains.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_lockout_threshold, + { "Lockout Threshold", "samr.samr_DomGeneralInformation2.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_sam, + { "Sam", "samr.samr_EnumDomainGroups.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD, + { "Samr User Access Change Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_unknown4, + { "Unknown4", "samr.samr_UserInfo21.unknown4", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_PWNOEXP, + { "Acb Pwnoexp", "samr.samr_AcctFlags.ACB_PWNOEXP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOEXP_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_CreateDomAlias_alias_name, + { "Alias Name", "samr.samr_CreateDomAlias.alias_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2, + { "Samr Domain Access Set Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info25, + { "Info25", "samr.samr_UserInfo.info25", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT, + { "Se Group Enabled By Default", "samr.samr_GroupAttrs.SE_GROUP_ENABLED_BY_DEFAULT", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_Connect3_system_name, + { "System Name", "samr.samr_Connect3.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo3_force_logoff_time, + { "Force Logoff Time", "samr.samr_DomInfo3.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME, + { "Samr Validate Field Bad Password Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_DomInfo13_modified_count_at_last_promotion, + { "Modified Count At Last Promotion", "samr.samr_DomInfo13.modified_count_at_last_promotion", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidTypeArray_types, + { "Types", "samr.samr_RidTypeArray.types", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_max_entries, + { "Max Entries", "samr.samr_QueryDisplayInfo2.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_force_logoff_time, + { "Force Logoff Time", "samr.samr_DomGeneralInformation.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoFull_entries, + { "Entries", "samr.samr_DispInfoFull.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS, + { "Samr Domain Access Lookup Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS_tfs), ( 0x00000080 ), NULL, HFILL }}, + { &hf_samr_samr_ChangeReject_reason, + { "Reason", "samr.samr_ChangeReject.reason", FT_UINT32, BASE_DEC, VALS(samr_samr_RejectReason_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon, + { "Pwd Must Change At Next Logon", "samr.samr_ValidatePasswordReq3.pwd_must_change_at_next_logon", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_nt_cross, + { "Nt Cross", "samr.samr_ChangePasswordUser.nt_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_cross1_present, + { "Cross1 Present", "samr.samr_ChangePasswordUser.cross1_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo8_full_name, + { "Full Name", "samr.samr_UserInfo8.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info2, + { "Info2", "samr.samr_DispInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID, + { "Se Group Logon Id", "samr.samr_GroupAttrs.SE_GROUP_LOGON_ID", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_LOGON_ID_tfs), ( 0xC0000000 ), NULL, HFILL }}, + { &hf_samr_samr_SetBootKeyInformation_unknown2, + { "Unknown2", "samr.samr_SetBootKeyInformation.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_general, + { "General", "samr.samr_DomGeneralInformation2.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_sam, + { "Sam", "samr.samr_EnumDomainAliases.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_sequence_num, + { "Sequence Num", "samr.samr_DomGeneralInformation.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_account_name, + { "Account Name", "samr.samr_UserInfo21.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD, + { "Acb No Auth Data Reqd", "samr.samr_AcctFlags.ACB_NO_AUTH_DATA_REQD", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NO_AUTH_DATA_REQD_tfs), ( 0x00080000 ), NULL, HFILL }}, + { &hf_samr_samr_Connect5_info_in, { "Info In", "samr.samr_Connect5.info_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_nt_password_set, - { "Nt Password Set", "samr.samr_UserInfo21.nt_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info20, + { &hf_samr_samr_Connect5_level_in, + { "Level In", "samr.samr_Connect5.level_in", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo13_description, + { "Description", "samr.samr_UserInfo13.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_nt_pwd_active, + { "Nt Pwd Active", "samr.samr_UserInfo18.nt_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info2, + { "Info2", "samr.samr_UserInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF, + { "Samr Field Last Logoff", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGOFF", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF_tfs), ( 0x00001000 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_resume_handle, + { "Resume Handle", "samr.samr_EnumDomainAliases.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetBootKeyInformation_unknown3, + { "Unknown3", "samr.samr_SetBootKeyInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoAscii_entries, + { "Entries", "samr.samr_DispInfoAscii.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser2_access_granted, + { "Access Granted", "samr.samr_CreateUser2.access_granted", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_num_members, + { "Num Members", "samr.samr_GroupInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo12_profile_path, + { "Profile Path", "samr.samr_UserInfo12.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_MNS, + { "Acb Mns", "samr.samr_AcctFlags.ACB_MNS", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_MNS_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_description, + { "Description", "samr.samr_UserInfo1.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_nt_password, + { "Nt Password", "samr.samr_UserInfo21.nt_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info8, + { "Info8", "samr.samr_UserInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info20, { "Info20", "samr.samr_UserInfo.info20", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_alias_handle, - { "Alias Handle", "samr.alias_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_account_name, - { "Account Name", "samr.samr_UserInfo5.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoFull_entries, - { "Entries", "samr.samr_DispInfoFull.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_full_name, - { "Full Name", "samr.samr_UserInfo5.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_lm_verifier, - { "Lm Verifier", "samr.samr_ChangePasswordUser3.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID, + { &hf_samr_samr_UserInfo21_buffer, + { "Buffer", "samr.samr_UserInfo21.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_status, + { "NT Error", "samr.status", FT_UINT32, BASE_HEX, VALS(NT_errors), 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_pwd_history_len, + { "Pwd History Len", "samr.samr_ValidatePasswordInfo.pwd_history_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_logon_count, + { "Logon Count", "samr.samr_UserInfo5.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_last_password_change, + { "Last Password Change", "samr.samr_UserInfo21.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_sam, + { "Sam", "samr.samr_EnumDomains.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq_req1, + { "Req1", "samr.samr_ValidatePasswordReq.req1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_group_handle, + { "Group Handle", "samr.group_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS, + { "Samr Field Acct Flags", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_FLAGS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS_tfs), ( 0x00100000 ), NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_acct_flags, + { "Acct Flags", "samr.samr_DispEntryFullGroup.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA, + { "Samr Field Private Data", "samr.samr_FieldsPresent.SAMR_FIELD_PRIVATE_DATA", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA_tfs), ( 0x04000000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_description, + { "Description", "samr.samr_UserInfo5.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID, { "Samr Field Primary Gid", "samr.samr_FieldsPresent.SAMR_FIELD_PRIMARY_GID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3, - { "Samr Domain Access Set Info 3", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_3", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY, - { "Se Group Use For Deny Only", "samr.samr_GroupAttrs.SE_GROUP_USE_FOR_DENY_ONLY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_DispInfoAscii_count, - { "Count", "samr.samr_DispInfoAscii.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetMembersInAlias_sids, - { "Sids", "samr.samr_GetMembersInAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_info, - { "Info", "samr.samr_QueryDisplayInfo3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_hash, - { "Hash", "samr.samr_OemChangePasswordUser2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo2_level, - { "Level", "samr.samr_QueryUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT, - { "Samr Field Bad Pwd Count", "samr.samr_FieldsPresent.SAMR_FIELD_BAD_PWD_COUNT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT_tfs), ( 0x00004000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_clear_lockout, - { "Clear Lockout", "samr.samr_ValidatePasswordReq3.clear_lockout", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect4_client_version, + { &hf_samr_samr_DispInfoFullGroups_entries, + { "Entries", "samr.samr_DispInfoFullGroups.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE, + { "Domain Password No Clear Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_CLEAR_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_pwd_history, + { "Pwd History", "samr.samr_ValidatePasswordInfo.pwd_history", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex2_name, + { "Name", "samr.samr_GetDisplayEnumerationIndex2.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_password, + { "Password", "samr.samr_OemChangePasswordUser2.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_info, + { "Info", "samr.samr_QueryDisplayInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info9, + { "Info9", "samr.samr_UserInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info26, + { "Info26", "samr.samr_UserInfo.info26", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_lm_verifier, + { "Lm Verifier", "samr.samr_ChangePasswordUser2.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo10_home_directory, + { "Home Directory", "samr.samr_UserInfo10.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CryptPassword_data, + { "Data", "samr.samr_CryptPassword.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetGroupInfo_info, + { "Info", "samr.samr_SetGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_code_page, + { "Code Page", "samr.samr_UserInfo2.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_profile_path, + { "Profile Path", "samr.samr_UserInfo5.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfoAll_name, + { "Name", "samr.samr_AliasInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex_idx, + { "Idx", "samr.samr_GetDisplayEnumerationIndex.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidToSid_sid, + { "Sid", "samr.samr_RidToSid.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_min_password_length, + { "Min Password Length", "samr.samr_DomInfo1.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO, + { "Samr Alias Access Set Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_last_logoff, + { "Last Logoff", "samr.samr_UserInfo5.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_lm_pwd_active, + { "Lm Pwd Active", "samr.samr_UserInfo18.lm_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_num_entries, + { "Num Entries", "samr.samr_EnumDomainUsers.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect4_client_version, { "Client Version", "samr.samr_Connect4.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex_level, + { &hf_samr_samr_UserInfo18_lm_pwd, + { "Lm Pwd", "samr.samr_UserInfo18.lm_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_bad_password_count, + { "Bad Password Count", "samr.samr_UserInfo5.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidTypeArray_count, + { "Count", "samr.samr_RidTypeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfo_name, + { "Name", "samr.samr_AliasInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_nt_pwd, + { "Nt Pwd", "samr.samr_UserInfo18.nt_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO, + { "Samr User Access Get Logoninfo", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOGONINFO", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_connect_handle, + { "Connect Handle", "samr.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info9, + { "Info9", "samr.samr_DomainInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_OWNER, + { "Se Group Owner", "samr.samr_GroupAttrs.SE_GROUP_OWNER", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_OWNER_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex_level, { "Level", "samr.samr_GetDisplayEnumerationIndex.level", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_workstations, - { "Workstations", "samr.samr_UserInfo5.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_account_name, - { "Account Name", "samr.samr_DispEntryFullGroup.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME, - { "Samr Validate Field Lockout Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_LOCKOUT_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_comment, - { "Comment", "samr.samr_UserInfo1.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_total_size, - { "Total Size", "samr.samr_QueryDisplayInfo.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_sam, - { "Sam", "samr.samr_EnumDomains.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_code_page, - { "Code Page", "samr.samr_UserInfo2.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS, - { "Domain Password Lockout Admins", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_LOCKOUT_ADMINS", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_unknown3, + { &hf_samr_samr_Connect5_level_out, + { "Level Out", "samr.samr_Connect5.level_out", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_comment, + { "Comment", "samr.samr_UserInfo21.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info5, + { "Info5", "samr.samr_DispInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER, + { "Samr Group Access Remove Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDomainInfo2_info, + { "Info", "samr.samr_QueryDomainInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_logon_script, + { "Logon Script", "samr.samr_UserInfo5.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_general, + { "General", "samr.samr_DomainInfo.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info11, + { "Info11", "samr.samr_UserInfo.info11", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_primary, + { "Primary", "samr.samr_DomGeneralInformation.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_last_logon, + { "Last Logon", "samr.samr_UserInfo21.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo13_domain_create_time, + { "Domain Create Time", "samr.samr_DomInfo13.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo24_password_expired, + { "Password Expired", "samr.samr_UserInfo24.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_full_name, + { "Full Name", "samr.samr_UserInfo3.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION, + { "Samr Field Description", "samr.samr_FieldsPresent.SAMR_FIELD_DESCRIPTION", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_DESCRIPTION_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_GetAliasMembership_rids, + { "Rids", "samr.samr_GetAliasMembership.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidationBlob_length, + { "Length", "samr.samr_ValidationBlob.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect4_system_name, + { "System Name", "samr.samr_Connect4.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG, + { "Samr Field Expired Flag", "samr.samr_FieldsPresent.SAMR_FIELD_EXPIRED_FLAG", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG_tfs), ( 0x08000000 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info13, + { "Info13", "samr.samr_DomainInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_last_password_change, + { "Last Password Change", "samr.samr_ValidatePasswordInfo.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo8_domain_create_time, + { "Domain Create Time", "samr.samr_DomInfo8.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect5_info_out, + { "Info Out", "samr.samr_Connect5.info_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_description, + { "Description", "samr.samr_DispEntryGeneral.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_start_idx, + { "Start Idx", "samr.samr_QueryDisplayInfo2.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_name, + { "Name", "samr.samr_GroupInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info24, + { "Info24", "samr.samr_UserInfo.info24", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_start_idx, + { "Start Idx", "samr.samr_QueryDisplayInfo3.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON, + { "Samr Field Last Logon", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGON", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGON_tfs), ( 0x00000800 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_workstations, + { "Workstations", "samr.samr_UserInfo3.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_old_nt_crypted, + { "Old Nt Crypted", "samr.samr_ChangePasswordUser.old_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_returned_size, + { "Returned Size", "samr.samr_QueryDisplayInfo3.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3, + { "Samr Domain Access Set Info 3", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_3", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_QueryAliasInfo_level, + { "Level", "samr.samr_QueryAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_SamArray_count, + { "Count", "samr.samr_SamArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QuerySecurity_sdbuf, + { "Sdbuf", "samr.samr_QuerySecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_description, + { "Description", "samr.samr_DispEntryFullGroup.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectInfo1_client_version, + { "Client Version", "samr.samr_ConnectInfo1.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES, + { "Samr User Access Get Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_Shutdown_connect_handle, + { "Connect Handle", "samr.samr_Shutdown.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo10_home_drive, + { "Home Drive", "samr.samr_UserInfo10.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo_level, + { "Level", "samr.samr_QueryUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT, + { "Acb Trust Auth Delegat", "samr.samr_AcctFlags.ACB_TRUST_AUTH_DELEGAT", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT_tfs), ( 0x00040000 ), NULL, HFILL }}, + { &hf_samr_samr_DomInfo7_role, + { "Role", "samr.samr_DomInfo7.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_domain_server_state, + { "Domain Server State", "samr.samr_DomGeneralInformation.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_hash, + { "Hash", "samr.samr_OemChangePasswordUser2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_full_name, + { "Full Name", "samr.samr_UserInfo1.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_AUTOLOCK, + { "Acb Autolock", "samr.samr_AcctFlags.ACB_AUTOLOCK", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_AUTOLOCK_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_opnum, + { "Operation", "samr.opnum", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_logon_script, + { "Logon Script", "samr.samr_UserInfo3.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_hash, + { "Hash", "samr.samr_ValidatePasswordReq3.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT, + { "Samr Field Logon Script", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_SCRIPT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_acct_flags, + { "Acct Flags", "samr.samr_EnumDomainUsers.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetAliasInfo_info, + { "Info", "samr.samr_SetAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_domain_access_mask, + { "Access Mask", "samr.domain.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupRids_names, + { "Names", "samr.samr_LookupRids.names", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_user_access_mask, + { "Access Mask", "samr.user.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_unknown3, { "Unknown3", "samr.samr_DomGeneralInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES, - { "Samr User Access Set Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_buf_size, - { "Buf Size", "samr.samr_QueryDisplayInfo.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER, - { "Samr Alias Access Remove Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_QueryGroupInfo_level, - { "Level", "samr.samr_QueryGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SetAliasInfo_level, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME, + { "Samr Field Full Name", "samr.samr_FieldsPresent.SAMR_FIELD_FULL_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FULL_NAME_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_domain_name, + { "Domain Name", "samr.samr_DomGeneralInformation.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SamEntry_idx, + { "Idx", "samr.samr_SamEntry.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_buf_count, + { "Buf Count", "samr.samr_UserInfo21.buf_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangeReject_unknown2, + { "Unknown2", "samr.samr_ChangeReject.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_full_name, + { "Full Name", "samr.samr_UserInfo21.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH, + { "Samr Validate Field Password History Length", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_allow_password_change, + { "Allow Password Change", "samr.samr_UserInfo21.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetUserPwInfo_info, + { "Info", "samr.samr_GetUserPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetSecurity_sec_info, + { "Sec Info", "samr.samr_SetSecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_last_logon, + { "Last Logon", "samr.samr_UserInfo3.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_bad_password_count, + { "Bad Password Count", "samr.samr_UserInfo3.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_account, + { "Account", "samr.samr_ChangePasswordUser3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP, + { "Samr Domain Access Create Group", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_GROUP", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_lockout_time, + { "Lockout Time", "samr.samr_ValidatePasswordInfo.lockout_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_bad_pwd_count, + { "Bad Pwd Count", "samr.samr_ValidatePasswordInfo.bad_pwd_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE, + { "Samr Field Allow Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_ALLOW_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE_tfs), ( 0x00010000 ), NULL, HFILL }}, + { &hf_samr_samr_DispInfoFull_count, + { "Count", "samr.samr_DispInfoFull.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq1_info, + { "Info", "samr.samr_ValidatePasswordReq1.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info4, + { "Info4", "samr.samr_UserInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_DISABLED, + { "Acb Disabled", "samr.samr_AcctFlags.ACB_DISABLED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DISABLED_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_SetDsrmPassword_unknown, + { "Unknown", "samr.samr_SetDsrmPassword.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info6, + { "Info6", "samr.samr_UserInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH, + { "Acb Dont Require Preauth", "samr.samr_AcctFlags.ACB_DONT_REQUIRE_PREAUTH", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH_tfs), ( 0x00010000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info21, + { "Info21", "samr.samr_UserInfo.info21", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupRids_types, + { "Types", "samr.samr_LookupRids.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_group_access_mask, + { "Access Mask", "samr.group.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info10, + { "Info10", "samr.samr_UserInfo.info10", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY, + { "Samr Field Acct Expiry", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_EXPIRY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY_tfs), ( 0x00080000 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_bad_password_time, + { "Bad Password Time", "samr.samr_ValidatePasswordInfo.bad_password_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetAliasInfo_level, { "Level", "samr.samr_SetAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_buffer, - { "Buffer", "samr.samr_UserInfo21.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_level, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP, + { "Samr User Access Get Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_force_password_change, + { "Force Password Change", "samr.samr_UserInfo21.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PwInfo_password_properties, + { "Password Properties", "samr.samr_PwInfo.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE, + { "Samr Field Code Page", "samr.samr_FieldsPresent.SAMR_FIELD_CODE_PAGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_CODE_PAGE_tfs), ( 0x00800000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_primary_gid, + { "Primary Gid", "samr.samr_UserInfo1.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_description, + { "Description", "samr.samr_GroupInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupRids_num_rids, + { "Num Rids", "samr.samr_LookupRids.num_rids", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfo_description, + { "Description", "samr.samr_AliasInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_domain_handle, + { "Domain Handle", "samr.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo_info, + { "Info", "samr.samr_QueryUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SamEntry_name, + { "Name", "samr.samr_SamEntry.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN, + { "Samr Access Create Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CREATE_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_total_size, + { "Total Size", "samr.samr_QueryDisplayInfo.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDomainInfo2_level, + { "Level", "samr.samr_QueryDomainInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePassword_rep, + { "Rep", "samr.samr_ValidatePassword.rep", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1, + { "Samr Domain Access Set Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE, + { "Samr Field Last Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE_tfs), ( 0x00040000 ), NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_account_name, + { "Account Name", "samr.samr_DispEntryFull.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QuerySecurity_sec_info, + { "Sec Info", "samr.samr_QuerySecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryGroupInfo_info, + { "Info", "samr.samr_QueryGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_account, + { "Account", "samr.samr_ValidatePasswordReq3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_user_handle, + { "User Handle", "samr.user_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC, + { "Samr Field Sec Desc", "samr.samr_FieldsPresent.SAMR_FIELD_SEC_DESC", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_SEC_DESC_tfs), ( 0x10000000 ), NULL, HFILL }}, + { &hf_samr_samr_Password_hash, + { "Hash", "samr.samr_Password.hash", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDomPwInfo_domain_name, + { "Domain Name", "samr.samr_GetDomPwInfo.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_level, { "Level", "samr.samr_QueryDisplayInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SetDsrmPassword_unknown, - { "Unknown", "samr.samr_SetDsrmPassword.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_last_password_change, - { "Last Password Change", "samr.samr_UserInfo5.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP, - { "Samr Domain Access Create Group", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_GROUP", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_returned_size, - { "Returned Size", "samr.samr_QueryDisplayInfo.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_allow_password_change, - { "Allow Password Change", "samr.samr_UserInfo21.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectInfo_info1, - { "Info1", "samr.samr_ConnectInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME, - { "Samr Field Full Name", "samr.samr_FieldsPresent.SAMR_FIELD_FULL_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FULL_NAME_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_AliasInfoAll_description, - { "Description", "samr.samr_AliasInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_comment, + { "Comment", "samr.samr_UserInfo2.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_home_drive, + { "Home Drive", "samr.samr_UserInfo21.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, }; |