diff options
| author | Michael Mann <mmann78@netscape.net> | 2014-09-19 22:23:27 -0400 |
|---|---|---|
| committer | Michael Mann <mmann78@netscape.net> | 2014-09-20 11:59:25 +0000 |
| commit | 06237e487885387591087646b788925ff38e773b (patch) | |
| tree | 07dc54c02e926b8b8a2238676699b4234e518d71 /epan/dissectors/packet-dcerpc-samr.c | |
| parent | 1e47e050dcdf30eced478e6909408d79548975c6 (diff) | |
proto_tree_add_text -> proto_tree_add_subtree[_format] for DCE/RPC dissectors.
Change-Id: I84755d059ef70ca98b0e7626b6425360daf0529d
Reviewed-on: https://code.wireshark.org/review/4199
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'epan/dissectors/packet-dcerpc-samr.c')
| -rw-r--r-- | epan/dissectors/packet-dcerpc-samr.c | 3382 |
1 files changed, 1687 insertions, 1695 deletions
diff --git a/epan/dissectors/packet-dcerpc-samr.c b/epan/dissectors/packet-dcerpc-samr.c index c12d787cc3..e9c5ff1431 100644 --- a/epan/dissectors/packet-dcerpc-samr.c +++ b/epan/dissectors/packet-dcerpc-samr.c @@ -116,559 +116,559 @@ static gint ett_samr_samr_ValidatePasswordReq = -1; /* Header field declarations */ -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET = -1; -static gint hf_samr_samr_UserInfo23_password = -1; -static gint hf_samr_samr_UserInfo21_description = -1; -static gint hf_samr_samr_QueryDisplayInfo3_total_size = -1; -static gint hf_samr_samr_UserInfo20_parameters = -1; -static gint hf_samr_samr_DomainInfo_info5 = -1; -static gint hf_samr_samr_QueryDisplayInfo_buf_size = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER = -1; -static gint hf_samr_samr_RemoveMemberFromForeignDomain_sid = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE = -1; -static gint hf_samr_samr_UserInfo5_full_name = -1; -static gint hf_samr_samr_QueryDisplayInfo3_max_entries = -1; -static gint hf_samr_samr_DispInfoAscii_count = -1; -static gint hf_samr_samr_ChangePasswordUser3_lm_verifier = -1; -static gint hf_samr_samr_ChangePasswordUser2_nt_password = -1; -static gint hf_samr_samr_SetDomainInfo_info = -1; -static gint hf_samr_samr_AddMultipleMembersToAlias_sids = -1; -static gint hf_samr_samr_DispInfo_info3 = -1; -static gint hf_samr_samr_ValidatePasswordReq1_password_matched = -1; -static gint hf_samr_samr_DispEntryFull_acct_flags = -1; -static gint hf_samr_samr_AcctFlags_ACB_WSTRUST = -1; -static gint hf_samr_samr_UserInfo21_profile_path = -1; -static gint hf_samr_samr_UserInfo21_last_logoff = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS = -1; -static gint hf_samr_samr_PwInfo_min_password_length = -1; -static gint hf_samr_samr_QueryGroupMember_rids = -1; -static gint hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED = -1; -static gint hf_samr_samr_UserInfo21_workstations = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE = -1; +static gint hf_samr_samr_UserInfo18_nt_pwd_active = -1; +static gint hf_samr_samr_UserInfo21_last_password_change = -1; +static gint hf_samr_samr_UserInfo_info6 = -1; +static gint hf_samr_opnum = -1; +static gint hf_samr_samr_LogonHours_bits = -1; +static gint hf_samr_samr_EnumDomains_sam = -1; +static gint hf_samr_samr_QuerySecurity_sec_info = -1; +static gint hf_samr_samr_RidTypeArray_count = -1; +static gint hf_samr_samr_DispInfo_info4 = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT = -1; static gint hf_samr_samr_AcctFlags_ACB_NORMAL = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER = -1; -static gint hf_samr_samr_UserInfo_info7 = -1; -static gint hf_samr_samr_GroupInfoAttributes_attributes = -1; -static gint hf_samr_samr_ChangePasswordUser3_server = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO = -1; -static gint hf_samr_samr_ConnectInfo1_unknown2 = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex2_idx = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME = -1; +static gint hf_samr_samr_Connect5_level_in = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET = -1; +static gint hf_samr_samr_AcctFlags_ACB_SVRTRUST = -1; +static gint hf_samr_samr_RemoveMultipleMembersFromAlias_sids = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT = -1; +static gint hf_samr_samr_QueryDisplayInfo2_start_idx = -1; +static gint hf_samr_samr_SetAliasInfo_info = -1; +static gint hf_samr_samr_UserInfo9_primary_gid = -1; static gint hf_samr_samr_EnumDomainGroups_max_size = -1; -static gint hf_samr_samr_UserInfo3_acct_flags = -1; -static gint hf_samr_samr_DomInfo6_primary = -1; -static gint hf_samr_samr_SetUserInfo_level = -1; -static gint hf_samr_samr_SetUserInfo2_level = -1; -static gint hf_samr_samr_UserInfo5_acct_expiry = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE = -1; -static gint hf_samr_samr_ChangePasswordUser_cross2_present = -1; -static gint hf_samr_samr_CreateUser_account_name = -1; +static gint hf_samr_domain_handle = -1; +static gint hf_samr_samr_ChangePasswordUser3_nt_password = -1; +static gint hf_samr_samr_AcctFlags_ACB_AUTOLOCK = -1; +static gint hf_samr_samr_ChangePasswordUser2_lm_verifier = -1; +static gint hf_samr_samr_UserInfo_info25 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA = -1; +static gint hf_samr_samr_GroupInfoAll_num_members = -1; +static gint hf_samr_samr_DomGeneralInformation2_general = -1; +static gint hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY = -1; +static gint hf_samr_samr_UserInfo21_full_name = -1; +static gint hf_samr_samr_GroupInfo_attributes = -1; +static gint hf_samr_samr_QueryDisplayInfo3_returned_size = -1; +static gint hf_samr_samr_UserInfo21_buf_count = -1; +static gint hf_samr_samr_EnumDomainAliases_sam = -1; +static gint hf_samr_samr_ValidationBlob_length = -1; +static gint hf_samr_samr_DomGeneralInformation_domain_server_state = -1; +static gint hf_samr_user_handle = -1; +static gint hf_samr_samr_UserInfo21_code_page = -1; +static gint hf_samr_samr_QueryDomainInfo_info = -1; +static gint hf_samr_samr_ValidatePasswordReq2_password_matched = -1; +static gint hf_samr_samr_DomInfo12_lockout_threshold = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH = -1; +static gint hf_samr_samr_RidWithAttributeArray_rids = -1; +static gint hf_samr_samr_DispEntryFull_account_name = -1; +static gint hf_samr_samr_GetAliasMembership_rids = -1; +static gint hf_samr_samr_UserInfo3_full_name = -1; static gint hf_samr_samr_DomGeneralInformation_oem_information = -1; -static gint hf_samr_samr_ChangePasswordUser_lm_cross = -1; -static gint hf_samr_samr_DomOEMInformation_oem_information = -1; -static gint hf_samr_rid = -1; -static gint hf_samr_samr_UserInfo2_country_code = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO = -1; -static gint hf_samr_samr_QueryDisplayInfo2_buf_size = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER = -1; -static gint hf_samr_samr_UserInfo6_account_name = -1; -static gint hf_samr_samr_UserInfo21_home_directory = -1; -static gint hf_samr_samr_UserInfo21_logon_count = -1; -static gint hf_samr_samr_ChangePasswordUser2_lm_password = -1; -static gint hf_samr_samr_QueryDisplayInfo2_total_size = -1; -static gint hf_samr_samr_DomInfo1_min_password_age = -1; -static gint hf_samr_samr_RidWithAttribute_attributes = -1; -static gint hf_samr_samr_QueryDisplayInfo2_level = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT = -1; -static gint hf_samr_samr_UserInfo4_logon_hours = -1; -static gint hf_samr_samr_ChangePasswordUser_lm_present = -1; -static gint hf_samr_alias_access_mask = -1; -static gint hf_samr_samr_DomInfo12_lockout_duration = -1; -static gint hf_samr_samr_LookupDomain_domain_name = -1; -static gint hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED = -1; -static gint hf_samr_samr_ChangePasswordUser3_password3 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT = -1; -static gint hf_samr_samr_GroupInfoAll_attributes = -1; -static gint hf_samr_samr_QueryDisplayInfo_start_idx = -1; -static gint hf_samr_samr_DispEntryAscii_account_name = -1; -static gint hf_samr_samr_SetGroupInfo_level = -1; -static gint hf_samr_samr_SetUserInfo2_info = -1; -static gint hf_samr_samr_DispEntryGeneral_idx = -1; -static gint hf_samr_samr_GroupInfo_name = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex2_level = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER = -1; -static gint hf_samr_samr_UserInfo3_account_name = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS = -1; -static gint hf_samr_samr_DomainInfo_oem = -1; -static gint hf_samr_samr_DomainInfo_info8 = -1; -static gint hf_samr_samr_QueryDisplayInfo3_info = -1; -static gint hf_samr_samr_UserInfo3_force_password_change = -1; -static gint hf_samr_samr_DomInfo9_domain_server_state = -1; -static gint hf_samr_samr_UserInfo3_logon_count = -1; +static gint hf_samr_samr_UserInfo5_bad_password_count = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex_name = -1; +static gint hf_samr_samr_QueryDisplayInfo3_max_entries = -1; +static gint hf_samr_samr_RidToSid_sid = -1; static gint hf_samr_samr_AliasInfoAll_num_members = -1; +static gint hf_samr_samr_UserInfo26_password_expired = -1; +static gint hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH = -1; +static gint hf_samr_samr_UserInfo2_code_page = -1; +static gint hf_samr_samr_DispInfo_info1 = -1; +static gint hf_samr_samr_UserInfo3_logon_script = -1; +static gint hf_samr_samr_DispEntryGeneral_acct_flags = -1; +static gint hf_samr_group_access_mask = -1; +static gint hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE = -1; +static gint hf_samr_alias_handle = -1; +static gint hf_samr_samr_ChangePasswordUser3_account = -1; +static gint hf_samr_samr_UserInfo5_workstations = -1; static gint hf_samr_samr_EnumDomainUsers_max_size = -1; -static gint hf_samr_samr_UserInfo2_unknown = -1; -static gint hf_samr_samr_DomainInfo_general2 = -1; -static gint hf_samr_samr_ChangePasswordUser2_server = -1; -static gint hf_samr_samr_LookupNames_types = -1; -static gint hf_samr_samr_UserInfo5_acct_flags = -1; -static gint hf_samr_samr_LookupNames_rids = -1; -static gint hf_samr_samr_QueryDisplayInfo_returned_size = -1; -static gint hf_samr_samr_OemChangePasswordUser2_server = -1; -static gint hf_samr_samr_QueryDomainInfo_info = -1; -static gint hf_samr_samr_QueryUserInfo2_level = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS = -1; -static gint hf_samr_samr_DomainInfo_info12 = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER = -1; -static gint hf_samr_samr_ValidatePasswordReq2_account = -1; -static gint hf_samr_handle = -1; -static gint hf_samr_samr_ValidatePasswordReq2_password = -1; -static gint hf_samr_samr_UserInfo_info5 = -1; -static gint hf_samr_samr_UserInfo5_logon_hours = -1; -static gint hf_samr_samr_UserInfo3_allow_password_change = -1; -static gint hf_samr_samr_RidWithAttributeArray_count = -1; +static gint hf_samr_samr_DomInfo6_primary = -1; +static gint hf_samr_samr_DomInfo1_max_password_age = -1; +static gint hf_samr_samr_PwInfo_min_password_length = -1; +static gint hf_samr_samr_ValidatePasswordInfo_last_password_change = -1; +static gint hf_samr_samr_DomGeneralInformation_sequence_num = -1; +static gint hf_samr_samr_QueryDisplayInfo_level = -1; +static gint hf_samr_samr_DispEntryFull_acct_flags = -1; +static gint hf_samr_samr_DomGeneralInformation_primary = -1; +static gint hf_samr_samr_UserInfo5_home_drive = -1; +static gint hf_samr_samr_DomainInfo_info1 = -1; +static gint hf_samr_samr_UserInfo_info13 = -1; +static gint hf_samr_samr_UserInfo21_last_logoff = -1; +static gint hf_samr_samr_AddMultipleMembersToAlias_sids = -1; +static gint hf_samr_samr_UserInfo5_home_directory = -1; +static gint hf_samr_samr_DomInfo9_domain_server_state = -1; +static gint hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED = -1; +static gint hf_samr_samr_QueryDisplayInfo2_info = -1; +static gint hf_samr_samr_SetDomainInfo_level = -1; +static gint hf_samr_samr_SetDsrmPassword_name = -1; +static gint hf_samr_samr_QueryDisplayInfo2_total_size = -1; +static gint hf_samr_samr_QueryDisplayInfo2_max_entries = -1; +static gint hf_samr_samr_UserInfo21_country_code = -1; +static gint hf_samr_samr_SetBootKeyInformation_unknown3 = -1; +static gint hf_samr_samr_UserInfo5_last_password_change = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER = -1; +static gint hf_samr_samr_ChangePasswordUser2_lm_change = -1; +static gint hf_samr_samr_QueryAliasInfo_info = -1; +static gint hf_samr_samr_SetDsrmPassword_hash = -1; +static gint hf_samr_samr_ChangePasswordUser3_lm_change = -1; +static gint hf_samr_samr_DomInfo12_lockout_window = -1; +static gint hf_samr_samr_AcctFlags_ACB_DOMTRUST = -1; +static gint hf_samr_samr_UserInfo14_workstations = -1; +static gint hf_samr_samr_DispEntryFull_idx = -1; +static gint hf_samr_samr_DispEntryFullGroup_idx = -1; +static gint hf_samr_samr_UserInfo21_bad_password_count = -1; static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES = -1; -static gint hf_samr_samr_UserInfo_info12 = -1; -static gint hf_samr_samr_EnumDomainGroups_resume_handle = -1; +static gint hf_samr_samr_QueryDisplayInfo3_level = -1; +static gint hf_samr_samr_DomInfo8_sequence_num = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD = -1; +static gint hf_samr_samr_LookupNames_names = -1; +static gint hf_samr_alias_access_mask = -1; +static gint hf_samr_samr_UserInfo_info14 = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER = -1; +static gint hf_samr_samr_DispEntryFullGroup_description = -1; static gint hf_samr_samr_UserInfo17_acct_expiry = -1; -static gint hf_samr_samr_ConnectInfo_info1 = -1; -static gint hf_samr_samr_EnumDomainAliases_num_entries = -1; -static gint hf_samr_samr_UserInfo21_lm_password_set = -1; +static gint hf_samr_samr_QueryDisplayInfo_info = -1; +static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown1 = -1; +static gint hf_samr_samr_UserInfo21_logon_count = -1; +static gint hf_samr_samr_UserInfo_info10 = -1; +static gint hf_samr_samr_ValidatePasswordRepCtr_status = -1; +static gint hf_samr_samr_DomainInfo_general = -1; +static gint hf_samr_samr_UserInfo_info1 = -1; static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME = -1; -static gint hf_samr_samr_EnumDomains_connect_handle = -1; +static gint hf_samr_samr_ValidatePassword_req = -1; +static gint hf_samr_samr_ChangePasswordUser2_account = -1; +static gint hf_samr_samr_UserInfo21_fields_present = -1; +static gint hf_samr_samr_QueryDisplayInfo_max_entries = -1; +static gint hf_samr_samr_UserInfo4_logon_hours = -1; +static gint hf_samr_samr_EnumDomainUsers_resume_handle = -1; +static gint hf_samr_samr_UserInfo_info20 = -1; +static gint hf_samr_samr_Connect5_info_in = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH = -1; +static gint hf_samr_samr_UserInfo1_description = -1; +static gint hf_samr_samr_ChangePasswordUser3_nt_verifier = -1; +static gint hf_samr_samr_CreateUser2_account_name = -1; +static gint hf_samr_samr_ConnectInfo_info1 = -1; +static gint hf_samr_samr_ChangePasswordUser_new_nt_crypted = -1; +static gint hf_samr_samr_DispEntryAscii_account_name = -1; +static gint hf_samr_samr_ValidatePasswordReq1_info = -1; static gint hf_samr_samr_SetUserInfo_info = -1; -static gint hf_samr_samr_QueryDomainInfo_level = -1; -static gint hf_samr_samr_ValidatePassword_level = -1; -static gint hf_samr_samr_EnumDomainUsers_sam = -1; -static gint hf_samr_samr_UserInfo26_password_expired = -1; -static gint hf_samr_samr_ValidatePasswordReq3_password = -1; -static gint hf_samr_samr_DeleteAliasMember_sid = -1; -static gint hf_samr_samr_UserInfo26_password = -1; -static gint hf_samr_samr_UserInfo5_home_drive = -1; -static gint hf_samr_samr_AliasInfoAll_description = -1; -static gint hf_samr_samr_ChangePasswordUser3_nt_password = -1; -static gint hf_samr_samr_OemChangePasswordUser2_account = -1; -static gint hf_samr_samr_DispInfo_info4 = -1; -static gint hf_samr_samr_GroupInfo_attributes = -1; static gint hf_samr_samr_AcctFlags_ACB_PWNOTREQ = -1; -static gint hf_samr_samr_AliasInfo_all = -1; -static gint hf_samr_samr_DomGeneralInformation_num_aliases = -1; -static gint hf_samr_samr_ValidatePasswordRep_ctr1 = -1; -static gint hf_samr_samr_UserInfo21_password_expired = -1; -static gint hf_samr_samr_DispEntryFullGroup_idx = -1; -static gint hf_samr_samr_UserInfo21_country_code = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS = -1; -static gint hf_samr_samr_UserInfo14_workstations = -1; -static gint hf_samr_samr_GroupInfoDescription_description = -1; -static gint hf_samr_samr_RidWithAttributeArray_rids = -1; -static gint hf_samr_samr_UserInfo21_acct_flags = -1; -static gint hf_samr_samr_CreateUser2_acct_flags = -1; +static gint hf_samr_samr_UserInfo5_last_logoff = -1; static gint hf_samr_samr_CryptPasswordEx_data = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC = -1; -static gint hf_samr_samr_ValidatePasswordReq3_info = -1; -static gint hf_samr_samr_DispInfoGeneral_entries = -1; -static gint hf_samr_samr_GetMembersInAlias_sids = -1; -static gint hf_samr_samr_EnumDomainGroups_num_entries = -1; -static gint hf_samr_samr_SetBootKeyInformation_unknown1 = -1; -static gint hf_samr_samr_ValidatePasswordReq2_password_matched = -1; -static gint hf_samr_samr_DispEntryFull_description = -1; -static gint hf_samr_samr_UserInfo21_parameters = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT = -1; -static gint hf_samr_samr_DispEntryAscii_idx = -1; -static gint hf_samr_samr_ValidatePasswordReq3_clear_lockout = -1; -static gint hf_samr_samr_DomGeneralInformation_role = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS = -1; +static gint hf_samr_samr_LookupRids_num_rids = -1; static gint hf_samr_samr_DomInfo5_domain_name = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP = -1; -static gint hf_samr_samr_EnumDomainUsers_resume_handle = -1; -static gint hf_samr_samr_UserInfo5_primary_gid = -1; -static gint hf_samr_samr_UserInfo5_workstations = -1; -static gint hf_samr_samr_Connect3_unknown = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS = -1; -static gint hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED = -1; -static gint hf_samr_samr_UserInfo5_last_logon = -1; -static gint hf_samr_samr_UserInfo16_acct_flags = -1; -static gint hf_samr_samr_DomInfo12_lockout_window = -1; -static gint hf_samr_samr_ValidatePasswordRep_ctr3 = -1; -static gint hf_samr_samr_GroupInfo_all2 = -1; -static gint hf_samr_samr_LookupDomain_sid = -1; -static gint hf_samr_samr_UserInfo3_home_drive = -1; -static gint hf_samr_samr_LogonHours_units_per_week = -1; -static gint hf_samr_samr_EnumDomainAliases_max_size = -1; -static gint hf_samr_samr_UserInfo21_nt_password_set = -1; -static gint hf_samr_samr_ValidatePassword_req = -1; -static gint hf_samr_samr_DomGeneralInformation_num_groups = -1; static gint hf_samr_samr_SamArray_entries = -1; -static gint hf_samr_samr_ValidationBlob_data = -1; -static gint hf_samr_samr_UserInfo21_code_page = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO = -1; -static gint hf_samr_samr_DispInfoFullGroups_count = -1; -static gint hf_samr_samr_ValidatePasswordRep_ctr2 = -1; -static gint hf_samr_samr_GetBootKeyInformation_domain_handle = -1; -static gint hf_samr_samr_UserInfo_info18 = -1; static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS = -1; -static gint hf_samr_samr_ChangePasswordUser3_nt_verifier = -1; -static gint hf_samr_samr_UserInfo_info13 = -1; -static gint hf_samr_samr_UserInfo21_fields_present = -1; -static gint hf_samr_samr_UserInfo21_primary_gid = -1; -static gint hf_samr_samr_GroupInfo_all = -1; -static gint hf_samr_samr_Connect5_system_name = -1; -static gint hf_samr_samr_QueryDisplayInfo3_buf_size = -1; -static gint hf_samr_samr_ChangePasswordUser_old_lm_crypted = -1; -static gint hf_samr_samr_AcctFlags_ACB_DOMTRUST = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE = -1; -static gint hf_samr_samr_QueryDisplayInfo_max_entries = -1; -static gint hf_samr_samr_UserInfo3_last_password_change = -1; -static gint hf_samr_samr_ValidatePasswordReq2_hash = -1; -static gint hf_samr_samr_UserInfo5_account_name = -1; -static gint hf_samr_samr_GetDomPwInfo_info = -1; -static gint hf_samr_samr_ChangeReject_unknown1 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH = -1; -static gint hf_samr_samr_UserInfo_info16 = -1; -static gint hf_samr_samr_UserInfo21_logon_script = -1; -static gint hf_samr_sec_desc_buf_len = -1; -static gint hf_samr_samr_LookupNames_names = -1; -static gint hf_samr_samr_UserInfo_info14 = -1; -static gint hf_samr_samr_SetDsrmPassword_name = -1; -static gint hf_samr_samr_DispEntryGeneral_acct_flags = -1; -static gint hf_samr_samr_AcctFlags_ACB_PW_EXPIRED = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 = -1; -static gint hf_samr_samr_UserInfo3_last_logoff = -1; -static gint hf_samr_samr_QueryUserInfo2_info = -1; -static gint hf_samr_samr_ValidatePasswordRepCtr_status = -1; -static gint hf_samr_samr_DomInfo1_max_password_age = -1; -static gint hf_samr_samr_DispEntryGeneral_full_name = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex_name = -1; -static gint hf_samr_samr_DomInfo13_sequence_num = -1; -static gint hf_samr_samr_QueryDisplayInfo2_returned_size = -1; -static gint hf_samr_samr_UserInfo6_full_name = -1; -static gint hf_samr_samr_ChangePasswordUser2_lm_change = -1; -static gint hf_samr_samr_LogonHours_bits = -1; -static gint hf_samr_samr_ChangePasswordUser3_lm_change = -1; -static gint hf_samr_samr_LookupNames_num_names = -1; -static gint hf_samr_samr_UserInfo21_logon_hours = -1; -static gint hf_samr_lsa_Strings_count = -1; -static gint hf_samr_samr_UserInfo11_logon_script = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN = -1; -static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown1 = -1; -static gint hf_samr_lsa_Strings_names = -1; -static gint hf_samr_samr_UserInfo21_bad_password_count = -1; +static gint hf_samr_samr_UserInfo3_account_name = -1; +static gint hf_samr_samr_AliasInfoAll_description = -1; static gint hf_samr_samr_EnumDomains_num_entries = -1; static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS = -1; -static gint hf_samr_samr_UserInfo5_last_password_change = -1; -static gint hf_samr_samr_AcctFlags_ACB_TEMPDUP = -1; -static gint hf_samr_samr_ChangePasswordUser_new_lm_crypted = -1; -static gint hf_samr_samr_UserInfo3_primary_gid = -1; -static gint hf_samr_samr_UserInfo_info3 = -1; -static gint hf_samr_samr_UserInfo_info23 = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY = -1; -static gint hf_samr_samr_UserInfo_info17 = -1; -static gint hf_samr_samr_UserInfo5_home_directory = -1; -static gint hf_samr_samr_SetDsrmPassword_hash = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE = -1; -static gint hf_samr_samr_UserInfo21_private = -1; -static gint hf_samr_samr_QueryDisplayInfo2_info = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME = -1; -static gint hf_samr_samr_QueryAliasInfo_info = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD = -1; -static gint hf_samr_samr_DomainInfo_info1 = -1; -static gint hf_samr_samr_SetSecurity_sdbuf = -1; -static gint hf_samr_samr_ChangePasswordUser3_dominfo = -1; -static gint hf_samr_samr_CreateUser2_account_name = -1; -static gint hf_samr_connect_access_mask = -1; -static gint hf_samr_samr_CreateDomainGroup_name = -1; -static gint hf_samr_samr_DispEntryGeneral_account_name = -1; -static gint hf_samr_samr_ValidatePasswordRepCtr_info = -1; -static gint hf_samr_samr_ChangePasswordUser2_nt_verifier = -1; -static gint hf_samr_samr_AddGroupMember_flags = -1; -static gint hf_samr_samr_UserInfo_info1 = -1; -static gint hf_samr_samr_UserInfo3_home_directory = -1; -static gint hf_samr_samr_QueryGroupInfo_level = -1; -static gint hf_samr_samr_ChangePasswordUser2_account = -1; -static gint hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION = -1; -static gint hf_samr_samr_DomInfo1_password_properties = -1; -static gint hf_samr_samr_ChangePasswordUser3_lm_password = -1; -static gint hf_samr_samr_DispInfo_info1 = -1; -static gint hf_samr_samr_Connect_system_name = -1; -static gint hf_samr_samr_DomInfo8_sequence_num = -1; -static gint hf_samr_samr_UserInfo1_account_name = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_RID = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE = -1; -static gint hf_samr_samr_UserInfo24_password = -1; -static gint hf_samr_samr_DomInfo12_lockout_threshold = -1; +static gint hf_samr_samr_ConnectInfo1_client_version = -1; +static gint hf_samr_samr_UserInfo3_acct_flags = -1; +static gint hf_samr_samr_EnumDomains_buf_size = -1; static gint hf_samr_samr_DomGeneralInformation2_lockout_window = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE = -1; -static gint hf_samr_alias_handle = -1; -static gint hf_samr_samr_DispInfoGeneral_count = -1; -static gint hf_samr_samr_UserInfo3_profile_path = -1; -static gint hf_samr_samr_AcctFlags_ACB_HOMDIRREQ = -1; +static gint hf_samr_samr_ChangePasswordUser_new_lm_crypted = -1; +static gint hf_samr_samr_UserInfo11_logon_script = -1; +static gint hf_samr_samr_Connect4_client_version = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT = -1; +static gint hf_samr_samr_DispInfo_info2 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON = -1; +static gint hf_samr_samr_QueryDisplayInfo2_level = -1; +static gint hf_samr_samr_UserInfo3_workstations = -1; +static gint hf_samr_samr_UserInfo1_primary_gid = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT = -1; +static gint hf_samr_samr_UserInfo5_account_name = -1; +static gint hf_samr_samr_ChangePasswordUser3_password3 = -1; +static gint hf_samr_samr_UserInfo21_home_directory = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO = -1; static gint hf_samr_samr_Ids_count = -1; -static gint hf_samr_samr_ChangePasswordUser3_reject = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY = -1; -static gint hf_samr_samr_GetGroupsForUser_rids = -1; -static gint hf_samr_samr_UserInfo23_info = -1; -static gint hf_samr_samr_UserInfo18_password_expired = -1; -static gint hf_samr_samr_UserInfo25_info = -1; -static gint hf_samr_samr_OpenDomain_sid = -1; -static gint hf_samr_samr_GetAliasMembership_sids = -1; -static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE = -1; -static gint hf_samr_samr_DispEntryFullGroup_account_name = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT = -1; -static gint hf_samr_samr_AddAliasMember_sid = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD = -1; -static gint hf_samr_samr_GetBootKeyInformation_unknown = -1; -static gint hf_samr_samr_Connect2_system_name = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER = -1; +static gint hf_samr_samr_UserInfo1_full_name = -1; static gint hf_samr_samr_DomInfo1_password_history_length = -1; -static gint hf_samr_samr_UserInfo25_password = -1; -static gint hf_samr_samr_ValidatePasswordInfo_fields_present = -1; -static gint hf_samr_samr_ValidatePasswordReq_req3 = -1; -static gint hf_samr_samr_UserInfo7_account_name = -1; -static gint hf_samr_samr_UserInfo9_primary_gid = -1; -static gint hf_samr_samr_DomainInfo_info3 = -1; -static gint hf_samr_samr_UserInfo3_logon_hours = -1; -static gint hf_samr_samr_UserInfo21_acct_expiry = -1; -static gint hf_samr_samr_ChangePasswordUser_new_nt_crypted = -1; -static gint hf_samr_samr_DomainInfo_info6 = -1; -static gint hf_samr_samr_ChangePasswordUser_nt_present = -1; -static gint hf_samr_samr_ValidatePasswordReq_req2 = -1; -static gint hf_samr_samr_SetDomainInfo_level = -1; -static gint hf_samr_samr_UserInfo21_lm_password = -1; -static gint hf_samr_samr_GroupInfo_description = -1; -static gint hf_samr_samr_DispEntryFull_idx = -1; -static gint hf_samr_samr_EnumDomains_resume_handle = -1; -static gint hf_samr_samr_DomGeneralInformation_num_users = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY = -1; -static gint hf_samr_samr_QueryDisplayInfo3_level = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED = -1; -static gint hf_samr_samr_AcctFlags_ACB_SVRTRUST = -1; -static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown2 = -1; -static gint hf_samr_samr_UserInfo1_comment = -1; -static gint hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY = -1; -static gint hf_samr_samr_RemoveMultipleMembersFromAlias_sids = -1; -static gint hf_samr_samr_DomainInfo_info7 = -1; -static gint hf_samr_samr_DomGeneralInformation2_lockout_duration = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS = -1; -static gint hf_samr_samr_ValidatePasswordReq2_info = -1; -static gint hf_samr_samr_EnumDomains_buf_size = -1; -static gint hf_samr_samr_DomGeneralInformation2_lockout_threshold = -1; -static gint hf_samr_samr_EnumDomainGroups_sam = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD = -1; -static gint hf_samr_samr_UserInfo21_unknown4 = -1; -static gint hf_samr_samr_AcctFlags_ACB_PWNOEXP = -1; -static gint hf_samr_samr_CreateDomAlias_alias_name = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2 = -1; -static gint hf_samr_samr_UserInfo_info25 = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT = -1; -static gint hf_samr_samr_Connect3_system_name = -1; -static gint hf_samr_samr_DomInfo3_force_logoff_time = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME = -1; -static gint hf_samr_samr_DomInfo13_modified_count_at_last_promotion = -1; -static gint hf_samr_samr_RidTypeArray_types = -1; -static gint hf_samr_samr_QueryDisplayInfo2_max_entries = -1; -static gint hf_samr_samr_DomGeneralInformation_force_logoff_time = -1; -static gint hf_samr_samr_DispInfoFull_entries = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS = -1; -static gint hf_samr_samr_ChangeReject_reason = -1; -static gint hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY = -1; static gint hf_samr_samr_ChangePasswordUser_nt_cross = -1; -static gint hf_samr_samr_ChangePasswordUser_cross1_present = -1; +static gint hf_samr_samr_Password_hash = -1; +static gint hf_samr_samr_UserInfo_info16 = -1; +static gint hf_samr_samr_UserInfo21_last_logon = -1; static gint hf_samr_samr_UserInfo8_full_name = -1; -static gint hf_samr_samr_DispInfo_info2 = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID = -1; -static gint hf_samr_samr_SetBootKeyInformation_unknown2 = -1; -static gint hf_samr_samr_DomGeneralInformation2_general = -1; -static gint hf_samr_samr_EnumDomainAliases_sam = -1; -static gint hf_samr_samr_DomGeneralInformation_sequence_num = -1; -static gint hf_samr_samr_UserInfo21_account_name = -1; -static gint hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD = -1; -static gint hf_samr_samr_Connect5_info_in = -1; -static gint hf_samr_samr_Connect5_level_in = -1; -static gint hf_samr_samr_UserInfo13_description = -1; -static gint hf_samr_samr_UserInfo18_nt_pwd_active = -1; -static gint hf_samr_samr_UserInfo_info2 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF = -1; -static gint hf_samr_samr_EnumDomainAliases_resume_handle = -1; -static gint hf_samr_samr_SetBootKeyInformation_unknown3 = -1; -static gint hf_samr_samr_DispInfoAscii_entries = -1; -static gint hf_samr_samr_CreateUser2_access_granted = -1; -static gint hf_samr_samr_GroupInfoAll_num_members = -1; -static gint hf_samr_samr_UserInfo12_profile_path = -1; -static gint hf_samr_samr_AcctFlags_ACB_MNS = -1; -static gint hf_samr_samr_UserInfo1_description = -1; -static gint hf_samr_samr_UserInfo21_nt_password = -1; +static gint hf_samr_samr_ChangePasswordUser_cross1_present = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex2_name = -1; +static gint hf_samr_samr_DomInfo13_modified_count_at_last_promotion = -1; +static gint hf_samr_samr_ChangePasswordUser2_lm_password = -1; +static gint hf_samr_samr_OemChangePasswordUser2_password = -1; +static gint hf_samr_samr_QueryDisplayInfo2_buf_size = -1; +static gint hf_samr_samr_ValidatePasswordReq_req2 = -1; +static gint hf_samr_samr_RidTypeArray_types = -1; +static gint hf_samr_samr_QueryDisplayInfo3_info = -1; static gint hf_samr_samr_UserInfo_info8 = -1; -static gint hf_samr_samr_UserInfo_info20 = -1; +static gint hf_samr_samr_QueryAliasInfo_level = -1; +static gint hf_samr_samr_UserInfo21_password_expired = -1; +static gint hf_samr_samr_DomainInfo_info9 = -1; +static gint hf_samr_samr_UserInfo3_bad_password_count = -1; +static gint hf_samr_samr_ChangePasswordUser_old_nt_crypted = -1; +static gint hf_samr_samr_DispEntryGeneral_full_name = -1; static gint hf_samr_samr_UserInfo21_buffer = -1; -static gint hf_samr_status = -1; +static gint hf_samr_samr_ConnectInfo1_unknown2 = -1; +static gint hf_samr_samr_LookupDomain_sid = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN = -1; +static gint hf_samr_samr_DeleteAliasMember_sid = -1; +static gint hf_samr_samr_SetUserInfo2_level = -1; +static gint hf_samr_samr_SamArray_count = -1; +static gint hf_samr_samr_DispEntryGeneral_idx = -1; +static gint hf_samr_samr_ValidatePasswordRep_ctr2 = -1; +static gint hf_samr_samr_QueryDomainInfo2_info = -1; static gint hf_samr_samr_ValidatePasswordInfo_pwd_history_len = -1; -static gint hf_samr_samr_UserInfo5_logon_count = -1; -static gint hf_samr_samr_UserInfo21_last_password_change = -1; -static gint hf_samr_samr_EnumDomains_sam = -1; -static gint hf_samr_samr_ValidatePasswordReq_req1 = -1; -static gint hf_samr_group_handle = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS = -1; -static gint hf_samr_samr_DispEntryFullGroup_acct_flags = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA = -1; -static gint hf_samr_samr_UserInfo5_description = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID = -1; -static gint hf_samr_samr_DispInfoFullGroups_entries = -1; +static gint hf_samr_samr_UserInfo_info3 = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS = -1; +static gint hf_samr_samr_ValidatePasswordReq3_info = -1; +static gint hf_samr_status = -1; +static gint hf_samr_samr_DispInfoFullGroups_count = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT = -1; +static gint hf_samr_samr_Connect_system_name = -1; +static gint hf_samr_samr_OemChangePasswordUser2_hash = -1; +static gint hf_samr_samr_UserInfo21_parameters = -1; +static gint hf_samr_samr_GroupInfo_all2 = -1; +static gint hf_samr_samr_DomainInfo_general2 = -1; +static gint hf_samr_samr_DispEntryFullGroup_account_name = -1; +static gint hf_samr_samr_QueryUserInfo_level = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION = -1; +static gint hf_samr_samr_LookupDomain_domain_name = -1; +static gint hf_samr_samr_DomainInfo_info7 = -1; +static gint hf_samr_samr_UserInfo3_profile_path = -1; +static gint hf_samr_samr_ValidatePasswordRep_ctr3 = -1; static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE = -1; -static gint hf_samr_samr_ValidatePasswordInfo_pwd_history = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex2_name = -1; -static gint hf_samr_samr_OemChangePasswordUser2_password = -1; -static gint hf_samr_samr_QueryDisplayInfo_info = -1; -static gint hf_samr_samr_UserInfo_info9 = -1; -static gint hf_samr_samr_UserInfo_info26 = -1; -static gint hf_samr_samr_ChangePasswordUser2_lm_verifier = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT = -1; +static gint hf_samr_samr_QueryUserInfo2_level = -1; +static gint hf_samr_samr_CreateDomainGroup_name = -1; +static gint hf_samr_samr_EnumDomainGroups_sam = -1; +static gint hf_samr_samr_CreateUser2_access_granted = -1; +static gint hf_samr_samr_SetAliasInfo_level = -1; +static gint hf_samr_samr_DomGeneralInformation_num_users = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE = -1; +static gint hf_samr_samr_UserInfo_info2 = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO = -1; +static gint hf_samr_samr_EnumDomainUsers_acct_flags = -1; static gint hf_samr_samr_UserInfo10_home_directory = -1; -static gint hf_samr_samr_CryptPassword_data = -1; -static gint hf_samr_samr_SetGroupInfo_info = -1; -static gint hf_samr_samr_UserInfo2_code_page = -1; -static gint hf_samr_samr_UserInfo5_profile_path = -1; +static gint hf_samr_samr_ChangeReject_reason = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN = -1; +static gint hf_samr_samr_AddAliasMember_sid = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3 = -1; +static gint hf_samr_samr_QueryDisplayInfo2_returned_size = -1; +static gint hf_samr_samr_EnumDomainUsers_num_entries = -1; +static gint hf_samr_connect_access_mask = -1; +static gint hf_samr_samr_EnumDomainAliases_resume_handle = -1; +static gint hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED = -1; +static gint hf_samr_samr_DispInfoAscii_entries = -1; +static gint hf_samr_samr_DomGeneralInformation2_lockout_threshold = -1; +static gint hf_samr_samr_AcctFlags_ACB_DISABLED = -1; static gint hf_samr_samr_AliasInfoAll_name = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex_idx = -1; -static gint hf_samr_samr_RidToSid_sid = -1; -static gint hf_samr_samr_DomInfo1_min_password_length = -1; -static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO = -1; -static gint hf_samr_samr_UserInfo5_last_logoff = -1; +static gint hf_samr_samr_GroupInfoAll_description = -1; +static gint hf_samr_samr_ValidatePasswordReq2_hash = -1; +static gint hf_samr_samr_UserInfo24_password_expired = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID = -1; static gint hf_samr_samr_UserInfo18_lm_pwd_active = -1; -static gint hf_samr_samr_EnumDomainUsers_num_entries = -1; -static gint hf_samr_samr_Connect4_client_version = -1; -static gint hf_samr_samr_UserInfo18_lm_pwd = -1; -static gint hf_samr_samr_UserInfo5_bad_password_count = -1; -static gint hf_samr_samr_RidTypeArray_count = -1; -static gint hf_samr_samr_AliasInfo_name = -1; -static gint hf_samr_samr_UserInfo18_nt_pwd = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO = -1; -static gint hf_samr_connect_handle = -1; -static gint hf_samr_samr_DomainInfo_info9 = -1; -static gint hf_samr_samr_GroupAttrs_SE_GROUP_OWNER = -1; -static gint hf_samr_samr_GetDisplayEnumerationIndex_level = -1; -static gint hf_samr_samr_Connect5_level_out = -1; -static gint hf_samr_samr_UserInfo21_comment = -1; -static gint hf_samr_samr_DispInfo_info5 = -1; -static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER = -1; -static gint hf_samr_samr_QueryDomainInfo2_info = -1; -static gint hf_samr_samr_UserInfo5_logon_script = -1; -static gint hf_samr_samr_DomainInfo_general = -1; +static gint hf_samr_samr_ValidatePasswordInfo_bad_pwd_count = -1; +static gint hf_samr_samr_ValidatePasswordReq1_password_matched = -1; +static gint hf_samr_samr_UserInfo5_description = -1; +static gint hf_samr_samr_UserInfo21_logon_script = -1; +static gint hf_samr_samr_UserInfo5_full_name = -1; +static gint hf_samr_samr_DomGeneralInformation_role = -1; static gint hf_samr_samr_UserInfo_info11 = -1; -static gint hf_samr_samr_DomGeneralInformation_primary = -1; -static gint hf_samr_samr_UserInfo21_last_logon = -1; -static gint hf_samr_samr_DomInfo13_domain_create_time = -1; -static gint hf_samr_samr_UserInfo24_password_expired = -1; -static gint hf_samr_samr_UserInfo3_full_name = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION = -1; -static gint hf_samr_samr_GetAliasMembership_rids = -1; -static gint hf_samr_samr_ValidationBlob_length = -1; -static gint hf_samr_samr_Connect4_system_name = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG = -1; -static gint hf_samr_samr_DomainInfo_info13 = -1; -static gint hf_samr_samr_ValidatePasswordInfo_last_password_change = -1; -static gint hf_samr_samr_DomInfo8_domain_create_time = -1; -static gint hf_samr_samr_Connect5_info_out = -1; -static gint hf_samr_samr_DispEntryGeneral_description = -1; -static gint hf_samr_samr_QueryDisplayInfo2_start_idx = -1; +static gint hf_samr_lsa_Strings_count = -1; +static gint hf_samr_samr_EnumDomainUsers_sam = -1; +static gint hf_samr_samr_UserInfo3_home_directory = -1; +static gint hf_samr_samr_GroupInfo_description = -1; +static gint hf_samr_samr_SetBootKeyInformation_unknown1 = -1; +static gint hf_samr_samr_Connect3_system_name = -1; +static gint hf_samr_samr_SetGroupInfo_level = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS = -1; +static gint hf_samr_samr_QueryGroupMember_rids = -1; +static gint hf_samr_samr_UserInfo_info12 = -1; +static gint hf_samr_samr_UserInfo5_acct_expiry = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS = -1; +static gint hf_samr_samr_UserInfo21_lm_password_set = -1; +static gint hf_samr_samr_EnumDomainGroups_resume_handle = -1; +static gint hf_samr_samr_QueryDomainInfo_level = -1; static gint hf_samr_samr_GroupInfoAll_name = -1; -static gint hf_samr_samr_UserInfo_info24 = -1; +static gint hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon = -1; +static gint hf_samr_samr_ChangePasswordUser_cross2_present = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF = -1; +static gint hf_samr_samr_DomainInfo_info8 = -1; static gint hf_samr_samr_QueryDisplayInfo3_start_idx = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON = -1; -static gint hf_samr_samr_UserInfo3_workstations = -1; -static gint hf_samr_samr_ChangePasswordUser_old_nt_crypted = -1; -static gint hf_samr_samr_QueryDisplayInfo3_returned_size = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3 = -1; -static gint hf_samr_samr_QueryAliasInfo_level = -1; -static gint hf_samr_samr_SamArray_count = -1; -static gint hf_samr_samr_QuerySecurity_sdbuf = -1; -static gint hf_samr_samr_DispEntryFullGroup_description = -1; -static gint hf_samr_samr_ConnectInfo1_client_version = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES = -1; -static gint hf_samr_samr_Shutdown_connect_handle = -1; -static gint hf_samr_samr_UserInfo10_home_drive = -1; -static gint hf_samr_samr_QueryUserInfo_level = -1; -static gint hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT = -1; -static gint hf_samr_samr_DomInfo7_role = -1; -static gint hf_samr_samr_DomGeneralInformation_domain_server_state = -1; -static gint hf_samr_samr_OemChangePasswordUser2_hash = -1; -static gint hf_samr_samr_UserInfo1_full_name = -1; -static gint hf_samr_samr_AcctFlags_ACB_AUTOLOCK = -1; -static gint hf_samr_opnum = -1; -static gint hf_samr_samr_UserInfo3_logon_script = -1; -static gint hf_samr_samr_ValidatePasswordReq3_hash = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT = -1; -static gint hf_samr_samr_EnumDomainUsers_acct_flags = -1; -static gint hf_samr_samr_SetAliasInfo_info = -1; -static gint hf_samr_domain_access_mask = -1; -static gint hf_samr_samr_LookupRids_names = -1; -static gint hf_samr_user_access_mask = -1; -static gint hf_samr_samr_DomGeneralInformation_unknown3 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME = -1; -static gint hf_samr_samr_DomGeneralInformation_domain_name = -1; -static gint hf_samr_samr_SamEntry_idx = -1; -static gint hf_samr_samr_UserInfo21_buf_count = -1; +static gint hf_samr_samr_UserInfo5_last_logon = -1; +static gint hf_samr_samr_UserInfo2_comment = -1; +static gint hf_samr_samr_AcctFlags_ACB_PW_EXPIRED = -1; +static gint hf_samr_samr_UserInfo21_private = -1; +static gint hf_samr_samr_AcctFlags_ACB_WSTRUST = -1; static gint hf_samr_samr_ChangeReject_unknown2 = -1; -static gint hf_samr_samr_UserInfo21_full_name = -1; -static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH = -1; -static gint hf_samr_samr_UserInfo21_allow_password_change = -1; -static gint hf_samr_samr_GetUserPwInfo_info = -1; +static gint hf_samr_samr_DispEntryAscii_idx = -1; +static gint hf_samr_samr_UserInfo13_description = -1; +static gint hf_samr_samr_ValidatePassword_rep = -1; +static gint hf_samr_samr_UserInfo_info21 = -1; +static gint hf_samr_samr_AliasInfo_description = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY = -1; +static gint hf_samr_samr_ValidatePasswordReq2_info = -1; +static gint hf_samr_samr_ChangePasswordUser_lm_cross = -1; +static gint hf_samr_samr_SetBootKeyInformation_unknown2 = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD = -1; +static gint hf_samr_samr_ValidationBlob_data = -1; +static gint hf_samr_samr_UserInfo3_last_password_change = -1; +static gint hf_samr_samr_DomGeneralInformation2_lockout_duration = -1; +static gint hf_samr_samr_DomainInfo_info5 = -1; +static gint hf_samr_samr_ChangePasswordUser_lm_present = -1; +static gint hf_samr_samr_AcctFlags_ACB_MNS = -1; +static gint hf_samr_samr_ChangePasswordUser3_server = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex_level = -1; +static gint hf_samr_samr_QueryDisplayInfo_total_size = -1; +static gint hf_samr_rid = -1; +static gint hf_samr_samr_UserInfo_info23 = -1; +static gint hf_samr_samr_UserInfo_info4 = -1; +static gint hf_samr_samr_UserInfo21_lm_password = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD = -1; +static gint hf_samr_samr_LookupNames_types = -1; +static gint hf_samr_samr_Connect5_level_out = -1; +static gint hf_samr_samr_DomainInfo_info13 = -1; +static gint hf_samr_samr_QueryDisplayInfo3_total_size = -1; +static gint hf_samr_samr_ChangePasswordUser3_reject = -1; +static gint hf_samr_samr_GroupInfoDescription_description = -1; +static gint hf_samr_samr_ChangePasswordUser2_nt_password = -1; +static gint hf_samr_handle = -1; +static gint hf_samr_samr_QueryUserInfo2_info = -1; +static gint hf_samr_samr_DomGeneralInformation_force_logoff_time = -1; +static gint hf_samr_samr_GetMembersInAlias_sids = -1; +static gint hf_samr_samr_PwInfo_password_properties = -1; +static gint hf_samr_samr_ValidatePasswordInfo_pwd_history = -1; +static gint hf_samr_samr_DispEntryGeneral_account_name = -1; +static gint hf_samr_samr_ChangePasswordUser3_dominfo = -1; +static gint hf_samr_samr_DomGeneralInformation_num_aliases = -1; +static gint hf_samr_samr_UserInfo5_logon_count = -1; +static gint hf_samr_samr_UserInfo21_account_name = -1; +static gint hf_samr_samr_UserInfo6_account_name = -1; static gint hf_samr_samr_SetSecurity_sec_info = -1; -static gint hf_samr_samr_UserInfo3_last_logon = -1; -static gint hf_samr_samr_UserInfo3_bad_password_count = -1; -static gint hf_samr_samr_ChangePasswordUser3_account = -1; +static gint hf_samr_samr_GroupInfo_name = -1; +static gint hf_samr_samr_CreateUser_account_name = -1; +static gint hf_samr_samr_OemChangePasswordUser2_server = -1; +static gint hf_samr_samr_DomInfo1_password_properties = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER = -1; +static gint hf_samr_samr_SamEntry_name = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2 = -1; +static gint hf_samr_samr_ValidatePasswordReq3_account = -1; +static gint hf_samr_samr_UserInfo21_nt_password = -1; +static gint hf_samr_samr_UserInfo3_allow_password_change = -1; +static gint hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED = -1; +static gint hf_samr_samr_UserInfo26_password = -1; static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP = -1; +static gint hf_samr_samr_ValidatePassword_level = -1; +static gint hf_samr_samr_DomGeneralInformation_num_groups = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS = -1; +static gint hf_samr_samr_UserInfo3_primary_gid = -1; +static gint hf_samr_samr_UserInfo_info24 = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM = -1; +static gint hf_samr_samr_UserInfo2_unknown = -1; +static gint hf_samr_samr_DispEntryFull_description = -1; +static gint hf_samr_samr_UserInfo21_acct_flags = -1; +static gint hf_samr_samr_UserInfo_info5 = -1; static gint hf_samr_samr_ValidatePasswordInfo_lockout_time = -1; -static gint hf_samr_samr_ValidatePasswordInfo_bad_pwd_count = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1 = -1; +static gint hf_samr_samr_UserInfo25_info = -1; +static gint hf_samr_samr_SetDomainInfo_info = -1; +static gint hf_samr_samr_ValidatePasswordReq3_password = -1; +static gint hf_samr_samr_QuerySecurity_sdbuf = -1; +static gint hf_samr_samr_UserInfo25_password = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO = -1; +static gint hf_samr_samr_EnumDomains_connect_handle = -1; +static gint hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED = -1; +static gint hf_samr_samr_Shutdown_connect_handle = -1; +static gint hf_samr_samr_SamEntry_idx = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER = -1; +static gint hf_samr_samr_UserInfo21_logon_hours = -1; +static gint hf_samr_samr_LookupNames_num_names = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 = -1; +static gint hf_samr_samr_UserInfo21_profile_path = -1; +static gint hf_samr_samr_GetDomPwInfo_domain_name = -1; +static gint hf_samr_samr_GetBootKeyInformation_domain_handle = -1; +static gint hf_samr_samr_UserInfo21_nt_password_set = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY = -1; +static gint hf_samr_samr_UserInfo3_logon_count = -1; +static gint hf_samr_samr_QueryUserInfo_info = -1; +static gint hf_samr_samr_UserInfo3_force_password_change = -1; +static gint hf_samr_samr_UserInfo21_description = -1; +static gint hf_samr_samr_UserInfo_info26 = -1; static gint hf_samr_samr_DispInfoFull_count = -1; -static gint hf_samr_samr_ValidatePasswordReq1_info = -1; -static gint hf_samr_samr_UserInfo_info4 = -1; -static gint hf_samr_samr_AcctFlags_ACB_DISABLED = -1; +static gint hf_samr_samr_EnumDomainAliases_max_size = -1; +static gint hf_samr_samr_GetAliasMembership_sids = -1; +static gint hf_samr_samr_UserInfo18_lm_pwd = -1; +static gint hf_samr_samr_UserInfo_info9 = -1; +static gint hf_samr_samr_CryptPassword_data = -1; +static gint hf_samr_samr_UserInfo16_acct_flags = -1; +static gint hf_samr_samr_DispInfo_info3 = -1; +static gint hf_samr_samr_UserInfo_info18 = -1; +static gint hf_samr_samr_UserInfo21_workstations = -1; +static gint hf_samr_samr_DispEntryFullGroup_acct_flags = -1; +static gint hf_samr_samr_DomainInfo_info12 = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS = -1; +static gint hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME = -1; +static gint hf_samr_samr_Connect5_system_name = -1; +static gint hf_samr_samr_Connect4_system_name = -1; +static gint hf_samr_samr_Connect3_unknown = -1; +static gint hf_samr_group_handle = -1; +static gint hf_samr_samr_ChangePasswordUser_old_lm_crypted = -1; +static gint hf_samr_samr_ValidatePasswordReq3_hash = -1; +static gint hf_samr_samr_DomOEMInformation_oem_information = -1; +static gint hf_samr_samr_ChangePasswordUser2_nt_verifier = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT = -1; static gint hf_samr_samr_SetDsrmPassword_unknown = -1; -static gint hf_samr_samr_UserInfo_info6 = -1; -static gint hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH = -1; -static gint hf_samr_samr_UserInfo_info21 = -1; -static gint hf_samr_samr_LookupRids_types = -1; -static gint hf_samr_group_access_mask = -1; -static gint hf_samr_samr_UserInfo_info10 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY = -1; +static gint hf_samr_samr_EnumDomains_resume_handle = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO = -1; +static gint hf_samr_sec_desc_buf_len = -1; +static gint hf_samr_samr_SetUserInfo_level = -1; +static gint hf_samr_samr_RidWithAttribute_attributes = -1; +static gint hf_samr_samr_SetSecurity_sdbuf = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE = -1; +static gint hf_samr_samr_DomInfo13_sequence_num = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS = -1; +static gint hf_samr_samr_UserInfo5_acct_flags = -1; +static gint hf_samr_domain_access_mask = -1; +static gint hf_samr_samr_ChangeReject_unknown1 = -1; static gint hf_samr_samr_ValidatePasswordInfo_bad_password_time = -1; -static gint hf_samr_samr_SetAliasInfo_level = -1; -static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP = -1; -static gint hf_samr_samr_UserInfo21_force_password_change = -1; -static gint hf_samr_samr_PwInfo_password_properties = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE = -1; -static gint hf_samr_samr_UserInfo1_primary_gid = -1; -static gint hf_samr_samr_GroupInfoAll_description = -1; -static gint hf_samr_samr_LookupRids_num_rids = -1; -static gint hf_samr_samr_AliasInfo_description = -1; -static gint hf_samr_domain_handle = -1; -static gint hf_samr_samr_QueryUserInfo_info = -1; -static gint hf_samr_samr_SamEntry_name = -1; -static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN = -1; -static gint hf_samr_samr_QueryDisplayInfo_total_size = -1; +static gint hf_samr_samr_ValidatePasswordReq_req3 = -1; +static gint hf_samr_samr_UserInfo3_last_logon = -1; +static gint hf_samr_samr_UserInfo5_primary_gid = -1; +static gint hf_samr_samr_DomInfo1_min_password_age = -1; +static gint hf_samr_samr_GetGroupsForUser_rids = -1; +static gint hf_samr_samr_DispInfoFullGroups_entries = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS = -1; static gint hf_samr_samr_QueryDomainInfo2_level = -1; -static gint hf_samr_samr_ValidatePassword_rep = -1; -static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1 = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE = -1; -static gint hf_samr_samr_DispEntryFull_account_name = -1; -static gint hf_samr_samr_QuerySecurity_sec_info = -1; +static gint hf_samr_samr_GroupInfo_all = -1; +static gint hf_samr_samr_UserInfo21_allow_password_change = -1; +static gint hf_samr_samr_ChangePasswordUser2_server = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID = -1; +static gint hf_samr_samr_UserInfo23_password = -1; +static gint hf_samr_samr_DispInfoGeneral_count = -1; +static gint hf_samr_samr_LookupRids_types = -1; +static gint hf_samr_samr_RemoveMemberFromForeignDomain_sid = -1; +static gint hf_samr_samr_UserInfo3_last_logoff = -1; static gint hf_samr_samr_QueryGroupInfo_info = -1; -static gint hf_samr_samr_ValidatePasswordReq3_account = -1; -static gint hf_samr_user_handle = -1; -static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC = -1; -static gint hf_samr_samr_Password_hash = -1; -static gint hf_samr_samr_GetDomPwInfo_domain_name = -1; -static gint hf_samr_samr_QueryDisplayInfo_level = -1; -static gint hf_samr_samr_UserInfo2_comment = -1; +static gint hf_samr_samr_UserInfo21_comment = -1; +static gint hf_samr_samr_UserInfo_info17 = -1; +static gint hf_samr_samr_ChangePasswordUser3_lm_password = -1; +static gint hf_samr_samr_UserInfo5_logon_hours = -1; +static gint hf_samr_samr_DomGeneralInformation_unknown3 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT = -1; +static gint hf_samr_samr_GetUserPwInfo_info = -1; +static gint hf_samr_samr_UserInfo3_logon_hours = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES = -1; +static gint hf_samr_samr_EnumDomainGroups_num_entries = -1; +static gint hf_samr_lsa_Strings_names = -1; +static gint hf_samr_samr_OpenDomain_sid = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS = -1; +static gint hf_samr_samr_ValidatePasswordRep_ctr1 = -1; static gint hf_samr_samr_UserInfo21_home_drive = -1; +static gint hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS = -1; +static gint hf_samr_samr_LogonHours_units_per_week = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT = -1; +static gint hf_samr_samr_GroupInfoAll_attributes = -1; +static gint hf_samr_samr_SetUserInfo2_info = -1; +static gint hf_samr_samr_QueryDisplayInfo_returned_size = -1; +static gint hf_samr_samr_UserInfo18_nt_pwd = -1; +static gint hf_samr_samr_ValidatePasswordReq3_clear_lockout = -1; +static gint hf_samr_samr_DomInfo12_lockout_duration = -1; +static gint hf_samr_samr_SetGroupInfo_info = -1; +static gint hf_samr_samr_AliasInfo_all = -1; +static gint hf_samr_samr_AcctFlags_ACB_TEMPDUP = -1; +static gint hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE = -1; +static gint hf_samr_samr_ValidatePasswordReq2_account = -1; +static gint hf_samr_samr_UserInfo5_logon_script = -1; +static gint hf_samr_samr_DispInfo_info5 = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX = -1; +static gint hf_samr_samr_DomainInfo_info3 = -1; +static gint hf_samr_samr_UserInfo7_account_name = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER = -1; +static gint hf_samr_samr_CreateUser2_acct_flags = -1; +static gint hf_samr_samr_ValidatePasswordReq_req1 = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE = -1; +static gint hf_samr_samr_DomInfo3_force_logoff_time = -1; +static gint hf_samr_samr_GroupInfoAttributes_attributes = -1; +static gint hf_samr_samr_UserInfo6_full_name = -1; +static gint hf_samr_samr_AcctFlags_ACB_HOMDIRREQ = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS = -1; +static gint hf_samr_samr_UserInfo_info7 = -1; +static gint hf_samr_user_access_mask = -1; +static gint hf_samr_samr_ValidatePasswordReq2_password = -1; +static gint hf_samr_samr_DomainInfo_oem = -1; +static gint hf_samr_samr_DomGeneralInformation_domain_name = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP = -1; +static gint hf_samr_samr_DomainInfo_info6 = -1; +static gint hf_samr_samr_EnumDomainAliases_num_entries = -1; +static gint hf_samr_samr_DomInfo7_role = -1; +static gint hf_samr_samr_LookupNames_rids = -1; +static gint hf_samr_samr_DispInfoGeneral_entries = -1; +static gint hf_samr_samr_AliasInfo_name = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG = -1; +static gint hf_samr_samr_UserInfo21_primary_gid = -1; +static gint hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY = -1; +static gint hf_samr_samr_CreateDomAlias_alias_name = -1; +static gint hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO = -1; +static gint hf_samr_samr_UserInfo20_parameters = -1; +static gint hf_samr_samr_QueryDisplayInfo_start_idx = -1; +static gint hf_samr_samr_Connect5_info_out = -1; +static gint hf_samr_samr_GetBootKeyInformation_unknown = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex2_level = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex2_idx = -1; +static gint hf_samr_samr_UserInfo1_account_name = -1; +static gint hf_samr_samr_AcctFlags_ACB_PWNOEXP = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY = -1; +static gint hf_samr_samr_OemChangePasswordUser2_account = -1; +static gint hf_samr_samr_UserInfo21_unknown4 = -1; +static gint hf_samr_samr_DispInfoAscii_count = -1; +static gint hf_samr_samr_GetDisplayEnumerationIndex_idx = -1; +static gint hf_samr_samr_QueryGroupInfo_level = -1; +static gint hf_samr_samr_LookupRids_names = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME = -1; +static gint hf_samr_samr_UserInfo10_home_drive = -1; +static gint hf_samr_samr_UserInfo3_home_drive = -1; +static gint hf_samr_samr_QueryDisplayInfo_buf_size = -1; +static gint hf_samr_samr_DomInfo8_domain_create_time = -1; +static gint hf_samr_samr_SetMemberAttributesOfGroup_unknown2 = -1; +static gint hf_samr_samr_AddGroupMember_flags = -1; +static gint hf_samr_samr_UserInfo21_force_password_change = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC = -1; +static gint hf_samr_samr_ValidatePasswordRepCtr_info = -1; +static gint hf_samr_samr_GroupAttrs_SE_GROUP_OWNER = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_RID = -1; +static gint hf_samr_samr_UserInfo18_password_expired = -1; +static gint hf_samr_samr_UserInfo5_profile_path = -1; +static gint hf_samr_samr_DomInfo1_min_password_length = -1; +static gint hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE = -1; +static gint hf_samr_samr_UserInfo12_profile_path = -1; +static gint hf_samr_samr_ChangePasswordUser_nt_present = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS = -1; +static gint hf_samr_samr_RidWithAttributeArray_count = -1; +static gint hf_samr_samr_DispEntryGeneral_description = -1; +static gint hf_samr_samr_UserInfo21_acct_expiry = -1; +static gint hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE = -1; +static gint hf_samr_samr_UserInfo24_password = -1; +static gint hf_samr_samr_GetDomPwInfo_info = -1; +static gint hf_samr_samr_Connect2_system_name = -1; +static gint hf_samr_connect_handle = -1; +static gint hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP = -1; +static gint hf_samr_samr_UserInfo1_comment = -1; +static gint hf_samr_samr_QueryDisplayInfo3_buf_size = -1; +static gint hf_samr_samr_DispInfoFull_entries = -1; +static gint hf_samr_samr_ValidatePasswordInfo_fields_present = -1; +static gint hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS = -1; +static gint hf_samr_samr_ChangePasswordUser3_lm_verifier = -1; +static gint hf_samr_samr_UserInfo23_info = -1; +static gint hf_samr_samr_UserInfo2_country_code = -1; +static gint hf_samr_samr_DomInfo13_domain_create_time = -1; static gint proto_dcerpc_samr = -1; /* Version information */ @@ -3743,8 +3743,7 @@ samr_dissect_DomainInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_DomainInfo"); - tree = proto_item_add_subtree(item, ett_samr_samr_DomainInfo); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_DomainInfo, &item, "samr_DomainInfo"); } offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -3807,7 +3806,7 @@ samr_dissect_DomainInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U /* IDL: struct { */ /* IDL: [range(0,1024)] uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] uint32 *ids; */ +/* IDL: [size_is(count)] [unique(1)] uint32 *ids; */ /* IDL: } */ static int @@ -4208,8 +4207,7 @@ samr_dissect_GroupInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_ old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_GroupInfo"); - tree = proto_item_add_subtree(item, ett_samr_samr_GroupInfo); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_GroupInfo, &item, "samr_GroupInfo"); } offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -4463,8 +4461,7 @@ samr_dissect_AliasInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_ old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_AliasInfo"); - tree = proto_item_add_subtree(item, ett_samr_samr_AliasInfo); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_AliasInfo, &item, "samr_AliasInfo"); } offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -4693,7 +4690,7 @@ samr_dissect_struct_UserInfo2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pi /* IDL: struct { */ /* IDL: uint16 units_per_week; */ -/* IDL: [unique(1)] [size_is(1260)] [length_is(units_per_week/8)] uint8 *bits; */ +/* IDL: [size_is(1260)] [unique(1)] [length_is(units_per_week/8)] uint8 *bits; */ /* IDL: } */ static int @@ -6236,7 +6233,7 @@ samr_dissect_bitmap_FieldsPresent(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: lsa_String nt_password; */ /* IDL: lsa_String private; */ /* IDL: uint32 buf_count; */ -/* IDL: [size_is(buf_count)] [unique(1)] uint8 *buffer; */ +/* IDL: [unique(1)] [size_is(buf_count)] uint8 *buffer; */ /* IDL: uint32 rid; */ /* IDL: uint32 primary_gid; */ /* IDL: samr_AcctFlags acct_flags; */ @@ -7152,8 +7149,7 @@ samr_dissect_UserInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_UserInfo"); - tree = proto_item_add_subtree(item, ett_samr_samr_UserInfo); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_UserInfo, &item, "samr_UserInfo"); } offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -7634,7 +7630,7 @@ samr_dissect_struct_DispEntryFull(tvbuff_t *tvb _U_, int offset _U_, packet_info /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [size_is(count)] [unique(1)] samr_DispEntryFull *entries; */ +/* IDL: [unique(1)] [size_is(count)] samr_DispEntryFull *entries; */ /* IDL: } */ static int @@ -7911,7 +7907,7 @@ samr_dissect_struct_DispEntryAscii(tvbuff_t *tvb _U_, int offset _U_, packet_inf /* IDL: struct { */ /* IDL: uint32 count; */ -/* IDL: [unique(1)] [size_is(count)] samr_DispEntryAscii *entries; */ +/* IDL: [size_is(count)] [unique(1)] samr_DispEntryAscii *entries; */ /* IDL: } */ static int @@ -8059,8 +8055,7 @@ samr_dissect_DispInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_DispInfo"); - tree = proto_item_add_subtree(item, ett_samr_samr_DispInfo); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_DispInfo, &item, "samr_DispInfo"); } offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -8306,8 +8301,7 @@ samr_dissect_ConnectInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _ old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_ConnectInfo"); - tree = proto_item_add_subtree(item, ett_samr_samr_ConnectInfo); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_ConnectInfo, &item, "samr_ConnectInfo"); } offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -8461,7 +8455,7 @@ samr_dissect_enum_ValidationStatus(tvbuff_t *tvb _U_, int offset _U_, packet_inf /* IDL: struct { */ /* IDL: uint32 length; */ -/* IDL: [unique(1)] [size_is(length)] uint8 *data; */ +/* IDL: [size_is(length)] [unique(1)] uint8 *data; */ /* IDL: } */ static int @@ -8535,7 +8529,7 @@ samr_dissect_struct_ValidationBlob(tvbuff_t *tvb _U_, int offset _U_, packet_inf /* IDL: NTTIME_hyper lockout_time; */ /* IDL: uint32 bad_pwd_count; */ /* IDL: uint32 pwd_history_len; */ -/* IDL: [unique(1)] [size_is(pwd_history_len)] samr_ValidationBlob *pwd_history; */ +/* IDL: [size_is(pwd_history_len)] [unique(1)] samr_ValidationBlob *pwd_history; */ /* IDL: } */ static int @@ -8745,8 +8739,7 @@ samr_dissect_ValidatePasswordRep(tvbuff_t *tvb _U_, int offset _U_, packet_info old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_ValidatePasswordRep"); - tree = proto_item_add_subtree(item, ett_samr_samr_ValidatePasswordRep); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_ValidatePasswordRep, &item, "samr_ValidatePasswordRep"); } offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -9047,8 +9040,7 @@ samr_dissect_ValidatePasswordReq(tvbuff_t *tvb _U_, int offset _U_, packet_info old_offset = offset; if (parent_tree) { - item = proto_tree_add_text(parent_tree, tvb, offset, -1, "samr_ValidatePasswordReq"); - tree = proto_item_add_subtree(item, ett_samr_samr_ValidatePasswordReq); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, -1, ett_samr_samr_ValidatePasswordReq, &item, "samr_ValidatePasswordReq"); } offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, di, drep, hf_index, &level); @@ -9113,9 +9105,9 @@ samr_dissect_element_Connect_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect( */ -/* IDL: [unique(1)] [in] uint16 *system_name, */ +/* IDL: [in] [unique(1)] uint16 *system_name, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ -/* IDL: [ref] [out] policy_handle *connect_handle */ +/* IDL: [out] [ref] policy_handle *connect_handle */ /* IDL: ); */ static int @@ -9163,7 +9155,7 @@ samr_dissect_element_Close_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_inf } /* IDL: NTSTATUS samr_Close( */ -/* IDL: [ref] [out] [in] policy_handle *handle */ +/* IDL: [in] [out] [ref] policy_handle *handle */ /* IDL: ); */ static int @@ -9448,7 +9440,7 @@ samr_dissect_element_LookupDomain_sid__(tvbuff_t *tvb _U_, int offset _U_, packe /* IDL: NTSTATUS samr_LookupDomain( */ /* IDL: [in] [ref] policy_handle *connect_handle, */ -/* IDL: [in] [ref] lsa_String *domain_name, */ +/* IDL: [ref] [in] lsa_String *domain_name, */ /* IDL: [out] [ref] dom_sid2 **sid */ /* IDL: ); */ @@ -9561,11 +9553,11 @@ samr_dissect_element_EnumDomains_num_entries_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_EnumDomains( */ -/* IDL: [ref] [in] policy_handle *connect_handle, */ -/* IDL: [ref] [out] [in] uint32 *resume_handle, */ -/* IDL: [ref] [out] samr_SamArray **sam, */ +/* IDL: [in] [ref] policy_handle *connect_handle, */ +/* IDL: [in] [ref] [out] uint32 *resume_handle, */ +/* IDL: [out] [ref] samr_SamArray **sam, */ /* IDL: [in] uint32 buf_size, */ -/* IDL: [out] [ref] uint32 *num_entries */ +/* IDL: [ref] [out] uint32 *num_entries */ /* IDL: ); */ static int @@ -9661,7 +9653,7 @@ samr_dissect_element_OpenDomain_domain_handle_(tvbuff_t *tvb _U_, int offset _U_ } /* IDL: NTSTATUS samr_OpenDomain( */ -/* IDL: [in] [ref] policy_handle *connect_handle, */ +/* IDL: [ref] [in] policy_handle *connect_handle, */ /* IDL: [in] samr_DomainAccessMask access_mask, */ /* IDL: [in] [ref] dom_sid2 *sid, */ /* IDL: [ref] [out] policy_handle *domain_handle */ @@ -9748,7 +9740,7 @@ samr_dissect_element_QueryDomainInfo_info__(tvbuff_t *tvb _U_, int offset _U_, p /* IDL: NTSTATUS samr_QueryDomainInfo( */ /* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainInfoClass level, */ -/* IDL: [switch_is(level)] [ref] [out] samr_DomainInfo **info */ +/* IDL: [out] [ref] [switch_is(level)] samr_DomainInfo **info */ /* IDL: ); */ static int @@ -9820,9 +9812,9 @@ samr_dissect_element_SetDomainInfo_info_(tvbuff_t *tvb _U_, int offset _U_, pack } /* IDL: NTSTATUS samr_SetDomainInfo( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainInfoClass level, */ -/* IDL: [in] [switch_is(level)] [ref] samr_DomainInfo *info */ +/* IDL: [switch_is(level)] [in] [ref] samr_DomainInfo *info */ /* IDL: ); */ static int @@ -9925,10 +9917,10 @@ samr_dissect_element_CreateDomainGroup_rid_(tvbuff_t *tvb _U_, int offset _U_, p } /* IDL: NTSTATUS samr_CreateDomainGroup( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [ref] [in] lsa_String *name, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [in] [ref] lsa_String *name, */ /* IDL: [in] samr_GroupAccessMask access_mask, */ -/* IDL: [ref] [out] policy_handle *group_handle, */ +/* IDL: [out] [ref] policy_handle *group_handle, */ /* IDL: [out] [ref] uint32 *rid */ /* IDL: ); */ @@ -10047,10 +10039,10 @@ samr_dissect_element_EnumDomainGroups_num_entries_(tvbuff_t *tvb _U_, int offset /* IDL: NTSTATUS samr_EnumDomainGroups( */ /* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [in] [out] [ref] uint32 *resume_handle, */ -/* IDL: [out] [ref] samr_SamArray **sam, */ +/* IDL: [in] [ref] [out] uint32 *resume_handle, */ +/* IDL: [ref] [out] samr_SamArray **sam, */ /* IDL: [in] uint32 max_size, */ -/* IDL: [out] [ref] uint32 *num_entries */ +/* IDL: [ref] [out] uint32 *num_entries */ /* IDL: ); */ static int @@ -10165,8 +10157,8 @@ samr_dissect_element_CreateUser_rid_(tvbuff_t *tvb _U_, int offset _U_, packet_i /* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] [ref] lsa_String *account_name, */ /* IDL: [in] samr_UserAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *user_handle, */ -/* IDL: [out] [ref] uint32 *rid */ +/* IDL: [ref] [out] policy_handle *user_handle, */ +/* IDL: [ref] [out] uint32 *rid */ /* IDL: ); */ static int @@ -10291,7 +10283,7 @@ samr_dissect_element_EnumDomainUsers_num_entries_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_EnumDomainUsers( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [ref] [out] [in] uint32 *resume_handle, */ /* IDL: [in] samr_AcctFlags acct_flags, */ /* IDL: [out] [ref] samr_SamArray **sam, */ @@ -10411,7 +10403,7 @@ samr_dissect_element_CreateDomAlias_rid_(tvbuff_t *tvb _U_, int offset _U_, pack /* IDL: NTSTATUS samr_CreateDomAlias( */ /* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [in] [ref] lsa_String *alias_name, */ +/* IDL: [ref] [in] lsa_String *alias_name, */ /* IDL: [in] samr_AliasAccessMask access_mask, */ /* IDL: [ref] [out] policy_handle *alias_handle, */ /* IDL: [ref] [out] uint32 *rid */ @@ -10531,9 +10523,9 @@ samr_dissect_element_EnumDomainAliases_num_entries_(tvbuff_t *tvb _U_, int offse } /* IDL: NTSTATUS samr_EnumDomainAliases( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [in] [ref] [out] uint32 *resume_handle, */ -/* IDL: [ref] [out] samr_SamArray **sam, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [out] [ref] [in] uint32 *resume_handle, */ +/* IDL: [out] [ref] samr_SamArray **sam, */ /* IDL: [in] uint32 max_size, */ /* IDL: [out] [ref] uint32 *num_entries */ /* IDL: ); */ @@ -10739,7 +10731,7 @@ samr_dissect_element_LookupNames_types_(tvbuff_t *tvb _U_, int offset _U_, packe /* IDL: NTSTATUS samr_LookupNames( */ /* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] [range(0,1000)] uint32 num_names, */ -/* IDL: [in] [ref] [length_is(num_names)] [size_is(1000)] lsa_String *names, */ +/* IDL: [size_is(1000)] [ref] [in] [length_is(num_names)] lsa_String *names, */ /* IDL: [ref] [out] samr_Ids *rids, */ /* IDL: [out] [ref] samr_Ids *types */ /* IDL: ); */ @@ -10850,9 +10842,9 @@ samr_dissect_element_LookupRids_types_(tvbuff_t *tvb _U_, int offset _U_, packet } /* IDL: NTSTATUS samr_LookupRids( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [range(0,1000)] [in] uint32 num_rids, */ -/* IDL: [length_is(num_rids)] [size_is(1000)] [in] uint32 rids[*], */ +/* IDL: [size_is(1000)] [in] [length_is(num_rids)] uint32 rids[*], */ /* IDL: [ref] [out] lsa_Strings *names, */ /* IDL: [ref] [out] samr_Ids *types */ /* IDL: ); */ @@ -10939,7 +10931,7 @@ samr_dissect_element_OpenGroup_group_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_OpenGroup( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_GroupAccessMask access_mask, */ /* IDL: [in] uint32 rid, */ /* IDL: [out] [ref] policy_handle *group_handle */ @@ -11026,7 +11018,7 @@ samr_dissect_element_QueryGroupInfo_info__(tvbuff_t *tvb _U_, int offset _U_, pa /* IDL: NTSTATUS samr_QueryGroupInfo( */ /* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [in] samr_GroupInfoEnum level, */ -/* IDL: [ref] [switch_is(level)] [out] samr_GroupInfo **info */ +/* IDL: [switch_is(level)] [out] [ref] samr_GroupInfo **info */ /* IDL: ); */ static int @@ -11098,9 +11090,9 @@ samr_dissect_element_SetGroupInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_SetGroupInfo( */ -/* IDL: [in] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [in] samr_GroupInfoEnum level, */ -/* IDL: [switch_is(level)] [ref] [in] samr_GroupInfo *info */ +/* IDL: [in] [ref] [switch_is(level)] samr_GroupInfo *info */ /* IDL: ); */ static int @@ -11163,7 +11155,7 @@ samr_dissect_element_AddGroupMember_flags(tvbuff_t *tvb _U_, int offset _U_, pac } /* IDL: NTSTATUS samr_AddGroupMember( */ -/* IDL: [ref] [in] policy_handle *group_handle, */ +/* IDL: [in] [ref] policy_handle *group_handle, */ /* IDL: [in] uint32 rid, */ /* IDL: [in] uint32 flags */ /* IDL: ); */ @@ -11212,7 +11204,7 @@ samr_dissect_element_DeleteDomainGroup_group_handle_(tvbuff_t *tvb _U_, int offs } /* IDL: NTSTATUS samr_DeleteDomainGroup( */ -/* IDL: [out] [ref] [in] policy_handle *group_handle */ +/* IDL: [in] [ref] [out] policy_handle *group_handle */ /* IDL: ); */ static int @@ -11266,7 +11258,7 @@ samr_dissect_element_DeleteGroupMember_rid(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_DeleteGroupMember( */ -/* IDL: [in] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [in] uint32 rid */ /* IDL: ); */ @@ -11336,7 +11328,7 @@ samr_dissect_element_QueryGroupMember_rids__(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_QueryGroupMember( */ -/* IDL: [in] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [out] [ref] samr_RidTypeArray **rids */ /* IDL: ); */ @@ -11399,7 +11391,7 @@ samr_dissect_element_SetMemberAttributesOfGroup_unknown2(tvbuff_t *tvb _U_, int } /* IDL: NTSTATUS samr_SetMemberAttributesOfGroup( */ -/* IDL: [in] [ref] policy_handle *group_handle, */ +/* IDL: [ref] [in] policy_handle *group_handle, */ /* IDL: [in] uint32 unknown1, */ /* IDL: [in] uint32 unknown2 */ /* IDL: ); */ @@ -11483,7 +11475,7 @@ samr_dissect_element_OpenAlias_alias_handle_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_AliasAccessMask access_mask, */ /* IDL: [in] uint32 rid, */ -/* IDL: [out] [ref] policy_handle *alias_handle */ +/* IDL: [ref] [out] policy_handle *alias_handle */ /* IDL: ); */ static int @@ -11567,7 +11559,7 @@ samr_dissect_element_QueryAliasInfo_info__(tvbuff_t *tvb _U_, int offset _U_, pa /* IDL: NTSTATUS samr_QueryAliasInfo( */ /* IDL: [ref] [in] policy_handle *alias_handle, */ /* IDL: [in] samr_AliasInfoEnum level, */ -/* IDL: [ref] [switch_is(level)] [out] samr_AliasInfo **info */ +/* IDL: [out] [ref] [switch_is(level)] samr_AliasInfo **info */ /* IDL: ); */ static int @@ -11639,9 +11631,9 @@ samr_dissect_element_SetAliasInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_SetAliasInfo( */ -/* IDL: [ref] [in] policy_handle *alias_handle, */ +/* IDL: [in] [ref] policy_handle *alias_handle, */ /* IDL: [in] samr_AliasInfoEnum level, */ -/* IDL: [in] [switch_is(level)] [ref] samr_AliasInfo *info */ +/* IDL: [switch_is(level)] [ref] [in] samr_AliasInfo *info */ /* IDL: ); */ static int @@ -11688,7 +11680,7 @@ samr_dissect_element_DeleteDomAlias_alias_handle_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_DeleteDomAlias( */ -/* IDL: [ref] [out] [in] policy_handle *alias_handle */ +/* IDL: [in] [out] [ref] policy_handle *alias_handle */ /* IDL: ); */ static int @@ -11751,7 +11743,7 @@ samr_dissect_element_AddAliasMember_sid_(tvbuff_t *tvb _U_, int offset _U_, pack /* IDL: NTSTATUS samr_AddAliasMember( */ /* IDL: [ref] [in] policy_handle *alias_handle, */ -/* IDL: [in] [ref] dom_sid2 *sid */ +/* IDL: [ref] [in] dom_sid2 *sid */ /* IDL: ); */ static int @@ -11813,7 +11805,7 @@ samr_dissect_element_DeleteAliasMember_sid_(tvbuff_t *tvb _U_, int offset _U_, p /* IDL: NTSTATUS samr_DeleteAliasMember( */ /* IDL: [in] [ref] policy_handle *alias_handle, */ -/* IDL: [in] [ref] dom_sid2 *sid */ +/* IDL: [ref] [in] dom_sid2 *sid */ /* IDL: ); */ static int @@ -11875,7 +11867,7 @@ samr_dissect_element_GetMembersInAlias_sids_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: NTSTATUS samr_GetMembersInAlias( */ /* IDL: [in] [ref] policy_handle *alias_handle, */ -/* IDL: [ref] [out] lsa_SidArray *sids */ +/* IDL: [out] [ref] lsa_SidArray *sids */ /* IDL: ); */ static int @@ -12006,7 +11998,7 @@ samr_dissect_element_DeleteUser_user_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_DeleteUser( */ -/* IDL: [ref] [out] [in] policy_handle *user_handle */ +/* IDL: [in] [ref] [out] policy_handle *user_handle */ /* IDL: ); */ static int @@ -12086,7 +12078,7 @@ samr_dissect_element_QueryUserInfo_info__(tvbuff_t *tvb _U_, int offset _U_, pac /* IDL: NTSTATUS samr_QueryUserInfo( */ /* IDL: [ref] [in] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ -/* IDL: [switch_is(level)] [ref] [out] samr_UserInfo **info */ +/* IDL: [out] [ref] [switch_is(level)] samr_UserInfo **info */ /* IDL: ); */ static int @@ -12158,9 +12150,9 @@ samr_dissect_element_SetUserInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packet } /* IDL: NTSTATUS samr_SetUserInfo( */ -/* IDL: [in] [ref] policy_handle *user_handle, */ +/* IDL: [ref] [in] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ -/* IDL: [in] [switch_is(level)] [ref] samr_UserInfo *info */ +/* IDL: [switch_is(level)] [ref] [in] samr_UserInfo *info */ /* IDL: ); */ static int @@ -12335,17 +12327,17 @@ samr_dissect_element_ChangePasswordUser_lm_cross_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_ChangePasswordUser( */ -/* IDL: [in] [ref] policy_handle *user_handle, */ +/* IDL: [ref] [in] policy_handle *user_handle, */ /* IDL: [in] uint8 lm_present, */ /* IDL: [in] [unique(1)] samr_Password *old_lm_crypted, */ /* IDL: [in] [unique(1)] samr_Password *new_lm_crypted, */ /* IDL: [in] uint8 nt_present, */ /* IDL: [unique(1)] [in] samr_Password *old_nt_crypted, */ -/* IDL: [unique(1)] [in] samr_Password *new_nt_crypted, */ +/* IDL: [in] [unique(1)] samr_Password *new_nt_crypted, */ /* IDL: [in] uint8 cross1_present, */ /* IDL: [in] [unique(1)] samr_Password *nt_cross, */ /* IDL: [in] uint8 cross2_present, */ -/* IDL: [in] [unique(1)] samr_Password *lm_cross */ +/* IDL: [unique(1)] [in] samr_Password *lm_cross */ /* IDL: ); */ static int @@ -12433,7 +12425,7 @@ samr_dissect_element_GetGroupsForUser_rids__(tvbuff_t *tvb _U_, int offset _U_, /* IDL: NTSTATUS samr_GetGroupsForUser( */ /* IDL: [in] [ref] policy_handle *user_handle, */ -/* IDL: [out] [ref] samr_RidWithAttributeArray **rids */ +/* IDL: [ref] [out] samr_RidWithAttributeArray **rids */ /* IDL: ); */ static int @@ -12559,12 +12551,12 @@ samr_dissect_element_QueryDisplayInfo_info_(tvbuff_t *tvb _U_, int offset _U_, p } /* IDL: NTSTATUS samr_QueryDisplayInfo( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainDisplayInformation level, */ /* IDL: [in] uint32 start_idx, */ /* IDL: [in] uint32 max_entries, */ /* IDL: [in] uint32 buf_size, */ -/* IDL: [out] [ref] uint32 *total_size, */ +/* IDL: [ref] [out] uint32 *total_size, */ /* IDL: [ref] [out] uint32 *returned_size, */ /* IDL: [switch_is(level)] [ref] [out] samr_DispInfo *info */ /* IDL: ); */ @@ -12666,9 +12658,9 @@ samr_dissect_element_GetDisplayEnumerationIndex_idx_(tvbuff_t *tvb _U_, int offs } /* IDL: NTSTATUS samr_GetDisplayEnumerationIndex( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] uint16 level, */ -/* IDL: [ref] [in] lsa_String *name, */ +/* IDL: [in] [ref] lsa_String *name, */ /* IDL: [ref] [out] uint32 *idx */ /* IDL: ); */ @@ -12822,7 +12814,7 @@ samr_dissect_element_GetUserPwInfo_info_(tvbuff_t *tvb _U_, int offset _U_, pack /* IDL: NTSTATUS samr_GetUserPwInfo( */ /* IDL: [ref] [in] policy_handle *user_handle, */ -/* IDL: [ref] [out] samr_PwInfo *info */ +/* IDL: [out] [ref] samr_PwInfo *info */ /* IDL: ); */ static int @@ -12962,7 +12954,7 @@ samr_dissect_element_QueryDomainInfo2_info__(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_QueryDomainInfo2( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainInfoClass level, */ /* IDL: [out] [ref] [switch_is(level)] samr_DomainInfo **info */ /* IDL: ); */ @@ -13044,7 +13036,7 @@ samr_dissect_element_QueryUserInfo2_info__(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_QueryUserInfo2( */ -/* IDL: [in] [ref] policy_handle *user_handle, */ +/* IDL: [ref] [in] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ /* IDL: [switch_is(level)] [ref] [out] samr_UserInfo **info */ /* IDL: ); */ @@ -13180,8 +13172,8 @@ samr_dissect_element_QueryDisplayInfo2_info_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: [in] uint32 max_entries, */ /* IDL: [in] uint32 buf_size, */ /* IDL: [ref] [out] uint32 *total_size, */ -/* IDL: [ref] [out] uint32 *returned_size, */ -/* IDL: [out] [switch_is(level)] [ref] samr_DispInfo *info */ +/* IDL: [out] [ref] uint32 *returned_size, */ +/* IDL: [out] [ref] [switch_is(level)] samr_DispInfo *info */ /* IDL: ); */ static int @@ -13415,7 +13407,7 @@ samr_dissect_element_CreateUser2_rid_(tvbuff_t *tvb _U_, int offset _U_, packet_ /* IDL: NTSTATUS samr_CreateUser2( */ /* IDL: [ref] [in] policy_handle *domain_handle, */ -/* IDL: [ref] [in] lsa_String *account_name, */ +/* IDL: [in] [ref] lsa_String *account_name, */ /* IDL: [in] samr_AcctFlags acct_flags, */ /* IDL: [in] samr_UserAccessMask access_mask, */ /* IDL: [ref] [out] policy_handle *user_handle, */ @@ -13558,14 +13550,14 @@ samr_dissect_element_QueryDisplayInfo3_info_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_QueryDisplayInfo3( */ -/* IDL: [in] [ref] policy_handle *domain_handle, */ +/* IDL: [ref] [in] policy_handle *domain_handle, */ /* IDL: [in] samr_DomainDisplayInformation level, */ /* IDL: [in] uint32 start_idx, */ /* IDL: [in] uint32 max_entries, */ /* IDL: [in] uint32 buf_size, */ -/* IDL: [out] [ref] uint32 *total_size, */ +/* IDL: [ref] [out] uint32 *total_size, */ /* IDL: [ref] [out] uint32 *returned_size, */ -/* IDL: [out] [switch_is(level)] [ref] samr_DispInfo *info */ +/* IDL: [switch_is(level)] [out] [ref] samr_DispInfo *info */ /* IDL: ); */ static int @@ -13641,8 +13633,8 @@ samr_dissect_element_AddMultipleMembersToAlias_sids_(tvbuff_t *tvb _U_, int offs } /* IDL: NTSTATUS samr_AddMultipleMembersToAlias( */ -/* IDL: [in] [ref] policy_handle *alias_handle, */ -/* IDL: [in] [ref] lsa_SidArray *sids */ +/* IDL: [ref] [in] policy_handle *alias_handle, */ +/* IDL: [ref] [in] lsa_SidArray *sids */ /* IDL: ); */ static int @@ -13703,7 +13695,7 @@ samr_dissect_element_RemoveMultipleMembersFromAlias_sids_(tvbuff_t *tvb _U_, int } /* IDL: NTSTATUS samr_RemoveMultipleMembersFromAlias( */ -/* IDL: [ref] [in] policy_handle *alias_handle, */ +/* IDL: [in] [ref] policy_handle *alias_handle, */ /* IDL: [ref] [in] lsa_SidArray *sids */ /* IDL: ); */ @@ -13797,9 +13789,9 @@ samr_dissect_element_OemChangePasswordUser2_hash_(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_OemChangePasswordUser2( */ -/* IDL: [in] [unique(1)] lsa_AsciiString *server, */ +/* IDL: [unique(1)] [in] lsa_AsciiString *server, */ /* IDL: [ref] [in] lsa_AsciiString *account, */ -/* IDL: [in] [unique(1)] samr_CryptPassword *password, */ +/* IDL: [unique(1)] [in] samr_CryptPassword *password, */ /* IDL: [unique(1)] [in] samr_Password *hash */ /* IDL: ); */ @@ -13937,13 +13929,13 @@ samr_dissect_element_ChangePasswordUser2_lm_verifier_(tvbuff_t *tvb _U_, int off } /* IDL: NTSTATUS samr_ChangePasswordUser2( */ -/* IDL: [in] [unique(1)] lsa_String *server, */ +/* IDL: [unique(1)] [in] lsa_String *server, */ /* IDL: [ref] [in] lsa_String *account, */ -/* IDL: [in] [unique(1)] samr_CryptPassword *nt_password, */ -/* IDL: [in] [unique(1)] samr_Password *nt_verifier, */ +/* IDL: [unique(1)] [in] samr_CryptPassword *nt_password, */ +/* IDL: [unique(1)] [in] samr_Password *nt_verifier, */ /* IDL: [in] uint8 lm_change, */ /* IDL: [unique(1)] [in] samr_CryptPassword *lm_password, */ -/* IDL: [unique(1)] [in] samr_Password *lm_verifier */ +/* IDL: [in] [unique(1)] samr_Password *lm_verifier */ /* IDL: ); */ static int @@ -14014,7 +14006,7 @@ samr_dissect_element_GetDomPwInfo_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_GetDomPwInfo( */ -/* IDL: [in] [unique(1)] lsa_String *domain_name, */ +/* IDL: [unique(1)] [in] lsa_String *domain_name, */ /* IDL: [ref] [out] samr_PwInfo *info */ /* IDL: ); */ @@ -14088,7 +14080,7 @@ samr_dissect_element_Connect2_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect2( */ -/* IDL: [in] [charset(UTF16)] [unique(1)] uint16 *system_name, */ +/* IDL: [unique(1)] [in] [charset(UTF16)] uint16 *system_name, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ /* IDL: [ref] [out] policy_handle *connect_handle */ /* IDL: ); */ @@ -14162,7 +14154,7 @@ samr_dissect_element_SetUserInfo2_info_(tvbuff_t *tvb _U_, int offset _U_, packe } /* IDL: NTSTATUS samr_SetUserInfo2( */ -/* IDL: [ref] [in] policy_handle *user_handle, */ +/* IDL: [in] [ref] policy_handle *user_handle, */ /* IDL: [in] samr_UserInfoLevel level, */ /* IDL: [in] [ref] [switch_is(level)] samr_UserInfo *info */ /* IDL: ); */ @@ -14303,7 +14295,7 @@ samr_dissect_element_GetBootKeyInformation_unknown_(tvbuff_t *tvb _U_, int offse } /* IDL: NTSTATUS samr_GetBootKeyInformation( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [out] [ref] uint32 *unknown */ /* IDL: ); */ @@ -14388,7 +14380,7 @@ samr_dissect_element_Connect3_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, /* IDL: [unique(1)] [in] [charset(UTF16)] uint16 *system_name, */ /* IDL: [in] uint32 unknown, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ -/* IDL: [out] [ref] policy_handle *connect_handle */ +/* IDL: [ref] [out] policy_handle *connect_handle */ /* IDL: ); */ static int @@ -14473,7 +14465,7 @@ samr_dissect_element_Connect4_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect4( */ -/* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */ +/* IDL: [in] [charset(UTF16)] [unique(1)] uint16 *system_name, */ /* IDL: [in] samr_ConnectVersion client_version, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ /* IDL: [out] [ref] policy_handle *connect_handle */ @@ -14678,16 +14670,16 @@ samr_dissect_element_ChangePasswordUser3_reject__(tvbuff_t *tvb _U_, int offset } /* IDL: NTSTATUS samr_ChangePasswordUser3( */ -/* IDL: [unique(1)] [in] lsa_String *server, */ -/* IDL: [in] [ref] lsa_String *account, */ -/* IDL: [unique(1)] [in] samr_CryptPassword *nt_password, */ -/* IDL: [unique(1)] [in] samr_Password *nt_verifier, */ +/* IDL: [in] [unique(1)] lsa_String *server, */ +/* IDL: [ref] [in] lsa_String *account, */ +/* IDL: [in] [unique(1)] samr_CryptPassword *nt_password, */ +/* IDL: [in] [unique(1)] samr_Password *nt_verifier, */ /* IDL: [in] uint8 lm_change, */ /* IDL: [unique(1)] [in] samr_CryptPassword *lm_password, */ /* IDL: [in] [unique(1)] samr_Password *lm_verifier, */ -/* IDL: [in] [unique(1)] samr_CryptPassword *password3, */ +/* IDL: [unique(1)] [in] samr_CryptPassword *password3, */ /* IDL: [ref] [out] samr_DomInfo1 **dominfo, */ -/* IDL: [ref] [out] samr_ChangeReject **reject */ +/* IDL: [out] [ref] samr_ChangeReject **reject */ /* IDL: ); */ static int @@ -14833,12 +14825,12 @@ samr_dissect_element_Connect5_connect_handle_(tvbuff_t *tvb _U_, int offset _U_, } /* IDL: NTSTATUS samr_Connect5( */ -/* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */ +/* IDL: [unique(1)] [in] [charset(UTF16)] uint16 *system_name, */ /* IDL: [in] samr_ConnectAccessMask access_mask, */ /* IDL: [in] uint32 level_in, */ -/* IDL: [ref] [switch_is(level_in)] [in] samr_ConnectInfo *info_in, */ -/* IDL: [ref] [out] uint32 *level_out, */ -/* IDL: [out] [switch_is(*level_out)] [ref] samr_ConnectInfo *info_out, */ +/* IDL: [in] [ref] [switch_is(level_in)] samr_ConnectInfo *info_in, */ +/* IDL: [out] [ref] uint32 *level_out, */ +/* IDL: [ref] [out] [switch_is(*level_out)] samr_ConnectInfo *info_out, */ /* IDL: [ref] [out] policy_handle *connect_handle */ /* IDL: ); */ @@ -14929,7 +14921,7 @@ samr_dissect_element_RidToSid_sid__(tvbuff_t *tvb _U_, int offset _U_, packet_in } /* IDL: NTSTATUS samr_RidToSid( */ -/* IDL: [ref] [in] policy_handle *domain_handle, */ +/* IDL: [in] [ref] policy_handle *domain_handle, */ /* IDL: [in] uint32 rid, */ /* IDL: [out] [ref] dom_sid2 **sid */ /* IDL: ); */ @@ -15003,7 +14995,7 @@ samr_dissect_element_SetDsrmPassword_hash_(tvbuff_t *tvb _U_, int offset _U_, pa } /* IDL: NTSTATUS samr_SetDsrmPassword( */ -/* IDL: [in] [unique(1)] lsa_String *name, */ +/* IDL: [unique(1)] [in] lsa_String *name, */ /* IDL: [in] uint32 unknown, */ /* IDL: [in] [unique(1)] samr_Password *hash */ /* IDL: ); */ @@ -15085,8 +15077,8 @@ samr_dissect_element_ValidatePassword_rep__(tvbuff_t *tvb _U_, int offset _U_, p /* IDL: NTSTATUS samr_ValidatePassword( */ /* IDL: [in] samr_ValidatePasswordLevel level, */ -/* IDL: [switch_is(level)] [ref] [in] samr_ValidatePasswordReq *req, */ -/* IDL: [ref] [switch_is(level)] [out] samr_ValidatePasswordRep **rep */ +/* IDL: [ref] [in] [switch_is(level)] samr_ValidatePasswordReq *req, */ +/* IDL: [ref] [out] [switch_is(level)] samr_ValidatePasswordRep **rep */ /* IDL: ); */ static int @@ -15261,1112 +15253,1112 @@ static dcerpc_sub_dissector samr_dissectors[] = { void proto_register_dcerpc_samr(void) { static hf_register_info hf[] = { - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET, - { "Samr Validate Field Password Last Set", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo23_password, - { "Password", "samr.samr_UserInfo23.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_description, - { "Description", "samr.samr_UserInfo21.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_total_size, - { "Total Size", "samr.samr_QueryDisplayInfo3.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo20_parameters, - { "Parameters", "samr.samr_UserInfo20.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info5, - { "Info5", "samr.samr_DomainInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_buf_size, - { "Buf Size", "samr.samr_QueryDisplayInfo.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER, - { "Samr Alias Access Add Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_RemoveMemberFromForeignDomain_sid, - { "Sid", "samr.samr_RemoveMemberFromForeignDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE, - { "Samr Field Country Code", "samr.samr_FieldsPresent.SAMR_FIELD_COUNTRY_CODE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE_tfs), ( 0x00400000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_full_name, - { "Full Name", "samr.samr_UserInfo5.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_max_entries, - { "Max Entries", "samr.samr_QueryDisplayInfo3.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoAscii_count, - { "Count", "samr.samr_DispInfoAscii.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_lm_verifier, - { "Lm Verifier", "samr.samr_ChangePasswordUser3.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_nt_password, - { "Nt Password", "samr.samr_ChangePasswordUser2.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDomainInfo_info, - { "Info", "samr.samr_SetDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AddMultipleMembersToAlias_sids, - { "Sids", "samr.samr_AddMultipleMembersToAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info3, - { "Info3", "samr.samr_DispInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq1_password_matched, - { "Password Matched", "samr.samr_ValidatePasswordReq1.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_acct_flags, - { "Acct Flags", "samr.samr_DispEntryFull.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_WSTRUST, - { "Acb Wstrust", "samr.samr_AcctFlags.ACB_WSTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_WSTRUST_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_profile_path, - { "Profile Path", "samr.samr_UserInfo21.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_last_logoff, - { "Last Logoff", "samr.samr_UserInfo21.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS, - { "Samr Alias Access Get Members", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS, - { "Samr Domain Access Enum Accounts", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_PwInfo_min_password_length, - { "Min Password Length", "samr.samr_PwInfo.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryGroupMember_rids, - { "Rids", "samr.samr_QueryGroupMember.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED, - { "Acb Smartcard Required", "samr.samr_AcctFlags.ACB_SMARTCARD_REQUIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SMARTCARD_REQUIRED_tfs), ( 0x00001000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_workstations, - { "Workstations", "samr.samr_UserInfo21.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE, + { "Samr Field Code Page", "samr.samr_FieldsPresent.SAMR_FIELD_CODE_PAGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_CODE_PAGE_tfs), ( 0x00800000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_nt_pwd_active, + { "Nt Pwd Active", "samr.samr_UserInfo18.nt_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_last_password_change, + { "Last Password Change", "samr.samr_UserInfo21.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info6, + { "Info6", "samr.samr_UserInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_opnum, + { "Operation", "samr.opnum", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LogonHours_bits, + { "Bits", "samr.samr_LogonHours.bits", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_sam, + { "Sam", "samr.samr_EnumDomains.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QuerySecurity_sec_info, + { "Sec Info", "samr.samr_QuerySecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidTypeArray_count, + { "Count", "samr.samr_RidTypeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info4, + { "Info4", "samr.samr_DispInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT, + { "Domain Password Store Cleartext", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_STORE_CLEARTEXT", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT_tfs), ( 0x00000010 ), NULL, HFILL }}, { &hf_samr_samr_AcctFlags_ACB_NORMAL, - { "Acb Normal", "samr.samr_AcctFlags.ACB_NORMAL", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NORMAL_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM, - { "Samr User Access Set Loc Com", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_LOC_COM", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER, - { "Samr Access Initialize Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_INITIALIZE_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info7, - { "Info7", "samr.samr_UserInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAttributes_attributes, - { "Attributes", "samr.samr_GroupInfoAttributes.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_server, - { "Server", "samr.samr_ChangePasswordUser3.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO, - { "Samr Alias Access Lookup Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_ConnectInfo1_unknown2, - { "Unknown2", "samr.samr_ConnectInfo1.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex2_idx, - { "Idx", "samr.samr_GetDisplayEnumerationIndex2.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Acb Normal", "samr.samr_AcctFlags.ACB_NORMAL", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NORMAL_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME, + { "Samr Validate Field Bad Password Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_Connect5_level_in, + { "Level In", "samr.samr_Connect5.level_in", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET, + { "Samr Validate Field Password Last Set", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_LAST_SET_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_SVRTRUST, + { "Acb Svrtrust", "samr.samr_AcctFlags.ACB_SVRTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SVRTRUST_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_RemoveMultipleMembersFromAlias_sids, + { "Sids", "samr.samr_RemoveMultipleMembersFromAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT, + { "Samr Field Logon Script", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_SCRIPT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_start_idx, + { "Start Idx", "samr.samr_QueryDisplayInfo2.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetAliasInfo_info, + { "Info", "samr.samr_SetAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo9_primary_gid, + { "Primary Gid", "samr.samr_UserInfo9.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_EnumDomainGroups_max_size, - { "Max Size", "samr.samr_EnumDomainGroups.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_acct_flags, - { "Acct Flags", "samr.samr_UserInfo3.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo6_primary, - { "Primary", "samr.samr_DomInfo6.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo_level, - { "Level", "samr.samr_SetUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo2_level, - { "Level", "samr.samr_SetUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_acct_expiry, - { "Acct Expiry", "samr.samr_UserInfo5.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE, - { "Se Group Resource", "samr.samr_GroupAttrs.SE_GROUP_RESOURCE", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_RESOURCE_tfs), ( 0x20000000 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_cross2_present, - { "Cross2 Present", "samr.samr_ChangePasswordUser.cross2_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser_account_name, - { "Account Name", "samr.samr_CreateUser.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Max Size", "samr.samr_EnumDomainGroups.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_domain_handle, + { "Domain Handle", "samr.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_nt_password, + { "Nt Password", "samr.samr_ChangePasswordUser3.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_AUTOLOCK, + { "Acb Autolock", "samr.samr_AcctFlags.ACB_AUTOLOCK", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_AUTOLOCK_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_lm_verifier, + { "Lm Verifier", "samr.samr_ChangePasswordUser2.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info25, + { "Info25", "samr.samr_UserInfo.info25", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA, + { "Samr Field Private Data", "samr.samr_FieldsPresent.SAMR_FIELD_PRIVATE_DATA", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA_tfs), ( 0x04000000 ), NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_num_members, + { "Num Members", "samr.samr_GroupInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_general, + { "General", "samr.samr_DomGeneralInformation2.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY, + { "Acb Use Des Key Only", "samr.samr_AcctFlags.ACB_USE_DES_KEY_ONLY", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_USE_DES_KEY_ONLY_tfs), ( 0x00008000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_full_name, + { "Full Name", "samr.samr_UserInfo21.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_attributes, + { "Attributes", "samr.samr_GroupInfo.attributes", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_returned_size, + { "Returned Size", "samr.samr_QueryDisplayInfo3.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_buf_count, + { "Buf Count", "samr.samr_UserInfo21.buf_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_sam, + { "Sam", "samr.samr_EnumDomainAliases.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidationBlob_length, + { "Length", "samr.samr_ValidationBlob.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_domain_server_state, + { "Domain Server State", "samr.samr_DomGeneralInformation.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, + { &hf_samr_user_handle, + { "User Handle", "samr.user_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_code_page, + { "Code Page", "samr.samr_UserInfo21.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDomainInfo_info, + { "Info", "samr.samr_QueryDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_password_matched, + { "Password Matched", "samr.samr_ValidatePasswordReq2.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo12_lockout_threshold, + { "Lockout Threshold", "samr.samr_DomInfo12.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH, + { "Samr Field Profile Path", "samr.samr_FieldsPresent.SAMR_FIELD_PROFILE_PATH", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_RidWithAttributeArray_rids, + { "Rids", "samr.samr_RidWithAttributeArray.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_account_name, + { "Account Name", "samr.samr_DispEntryFull.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetAliasMembership_rids, + { "Rids", "samr.samr_GetAliasMembership.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_full_name, + { "Full Name", "samr.samr_UserInfo3.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DomGeneralInformation_oem_information, - { "Oem Information", "samr.samr_DomGeneralInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_lm_cross, - { "Lm Cross", "samr.samr_ChangePasswordUser.lm_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomOEMInformation_oem_information, - { "Oem Information", "samr.samr_DomOEMInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_rid, - { "RID", "samr.rid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_country_code, - { "Country Code", "samr.samr_UserInfo2.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO, - { "Samr Group Access Set Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_buf_size, - { "Buf Size", "samr.samr_QueryDisplayInfo2.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER, - { "Samr Access Connect To Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CONNECT_TO_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo6_account_name, - { "Account Name", "samr.samr_UserInfo6.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_home_directory, - { "Home Directory", "samr.samr_UserInfo21.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_logon_count, - { "Logon Count", "samr.samr_UserInfo21.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_lm_password, - { "Lm Password", "samr.samr_ChangePasswordUser2.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_total_size, - { "Total Size", "samr.samr_QueryDisplayInfo2.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_min_password_age, - { "Min Password Age", "samr.samr_DomInfo1.min_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidWithAttribute_attributes, - { "Attributes", "samr.samr_RidWithAttribute.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_level, - { "Level", "samr.samr_QueryDisplayInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT, - { "Domain Password Store Cleartext", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_STORE_CLEARTEXT", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_STORE_CLEARTEXT_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo4_logon_hours, - { "Logon Hours", "samr.samr_UserInfo4.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_lm_present, - { "Lm Present", "samr.samr_ChangePasswordUser.lm_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_alias_access_mask, - { "Access Mask", "samr.alias.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo12_lockout_duration, - { "Lockout Duration", "samr.samr_DomInfo12.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupDomain_domain_name, - { "Domain Name", "samr.samr_LookupDomain.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED, - { "Acb Not Delegated", "samr.samr_AcctFlags.ACB_NOT_DELEGATED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NOT_DELEGATED_tfs), ( 0x00004000 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_password3, - { "Password3", "samr.samr_ChangePasswordUser3.password3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT, - { "Samr Field Lm Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_LM_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT_tfs), ( 0x02000000 ), NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_attributes, - { "Attributes", "samr.samr_GroupInfoAll.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_start_idx, - { "Start Idx", "samr.samr_QueryDisplayInfo.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryAscii_account_name, - { "Account Name", "samr.samr_DispEntryAscii.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetGroupInfo_level, - { "Level", "samr.samr_SetGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SetUserInfo2_info, - { "Info", "samr.samr_SetUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_idx, - { "Idx", "samr.samr_DispEntryGeneral.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_name, - { "Name", "samr.samr_GroupInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex2_level, - { "Level", "samr.samr_GetDisplayEnumerationIndex2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER, - { "Samr Domain Access Create User", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_USER", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_account_name, - { "Account Name", "samr.samr_UserInfo3.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS, - { "Samr Field Parameters", "samr.samr_FieldsPresent.SAMR_FIELD_PARAMETERS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PARAMETERS_tfs), ( 0x00200000 ), NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_oem, - { "Oem", "samr.samr_DomainInfo.oem", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info8, - { "Info8", "samr.samr_DomainInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_info, - { "Info", "samr.samr_QueryDisplayInfo3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_force_password_change, - { "Force Password Change", "samr.samr_UserInfo3.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo9_domain_server_state, - { "Domain Server State", "samr.samr_DomInfo9.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_logon_count, - { "Logon Count", "samr.samr_UserInfo3.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Oem Information", "samr.samr_DomGeneralInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_bad_password_count, + { "Bad Password Count", "samr.samr_UserInfo5.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex_name, + { "Name", "samr.samr_GetDisplayEnumerationIndex.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_max_entries, + { "Max Entries", "samr.samr_QueryDisplayInfo3.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidToSid_sid, + { "Sid", "samr.samr_RidToSid.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_AliasInfoAll_num_members, - { "Num Members", "samr.samr_AliasInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Num Members", "samr.samr_AliasInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo26_password_expired, + { "Password Expired", "samr.samr_UserInfo26.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH, + { "Acb Dont Require Preauth", "samr.samr_AcctFlags.ACB_DONT_REQUIRE_PREAUTH", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH_tfs), ( 0x00010000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_code_page, + { "Code Page", "samr.samr_UserInfo2.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info1, + { "Info1", "samr.samr_DispInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_logon_script, + { "Logon Script", "samr.samr_UserInfo3.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_acct_flags, + { "Acct Flags", "samr.samr_DispEntryGeneral.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_group_access_mask, + { "Access Mask", "samr.group.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION, + { "Acb Trusted For Delegation", "samr.samr_AcctFlags.ACB_TRUSTED_FOR_DELEGATION", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION_tfs), ( 0x00002000 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE, + { "Samr Field Allow Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_ALLOW_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE_tfs), ( 0x00010000 ), NULL, HFILL }}, + { &hf_samr_alias_handle, + { "Alias Handle", "samr.alias_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_account, + { "Account", "samr.samr_ChangePasswordUser3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_workstations, + { "Workstations", "samr.samr_UserInfo5.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_EnumDomainUsers_max_size, - { "Max Size", "samr.samr_EnumDomainUsers.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_unknown, - { "Unknown", "samr.samr_UserInfo2.unknown", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_general2, - { "General2", "samr.samr_DomainInfo.general2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_server, - { "Server", "samr.samr_ChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_types, - { "Types", "samr.samr_LookupNames.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_acct_flags, - { "Acct Flags", "samr.samr_UserInfo5.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_rids, - { "Rids", "samr.samr_LookupNames.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_returned_size, - { "Returned Size", "samr.samr_QueryDisplayInfo.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_server, - { "Server", "samr.samr_OemChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo_info, - { "Info", "samr.samr_QueryDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo2_level, - { "Level", "samr.samr_QueryUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS, - { "Samr Domain Access Create Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info12, - { "Info12", "samr.samr_DomainInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER, - { "Samr Access Shutdown Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_SHUTDOWN_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_account, - { "Account", "samr.samr_ValidatePasswordReq2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_handle, - { "Handle", "samr.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_password, - { "Password", "samr.samr_ValidatePasswordReq2.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info5, - { "Info5", "samr.samr_UserInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_logon_hours, - { "Logon Hours", "samr.samr_UserInfo5.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_allow_password_change, - { "Allow Password Change", "samr.samr_UserInfo3.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidWithAttributeArray_count, - { "Count", "samr.samr_RidWithAttributeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Max Size", "samr.samr_EnumDomainUsers.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo6_primary, + { "Primary", "samr.samr_DomInfo6.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_max_password_age, + { "Max Password Age", "samr.samr_DomInfo1.max_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PwInfo_min_password_length, + { "Min Password Length", "samr.samr_PwInfo.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_last_password_change, + { "Last Password Change", "samr.samr_ValidatePasswordInfo.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_sequence_num, + { "Sequence Num", "samr.samr_DomGeneralInformation.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_level, + { "Level", "samr.samr_QueryDisplayInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_acct_flags, + { "Acct Flags", "samr.samr_DispEntryFull.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_primary, + { "Primary", "samr.samr_DomGeneralInformation.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_home_drive, + { "Home Drive", "samr.samr_UserInfo5.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info1, + { "Info1", "samr.samr_DomainInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info13, + { "Info13", "samr.samr_UserInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_last_logoff, + { "Last Logoff", "samr.samr_UserInfo21.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AddMultipleMembersToAlias_sids, + { "Sids", "samr.samr_AddMultipleMembersToAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_home_directory, + { "Home Directory", "samr.samr_UserInfo5.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo9_domain_server_state, + { "Domain Server State", "samr.samr_DomInfo9.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD, + { "Acb No Auth Data Reqd", "samr.samr_AcctFlags.ACB_NO_AUTH_DATA_REQD", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NO_AUTH_DATA_REQD_tfs), ( 0x00080000 ), NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED, + { "Se Group Enabled", "samr.samr_GroupAttrs.SE_GROUP_ENABLED", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_info, + { "Info", "samr.samr_QueryDisplayInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDomainInfo_level, + { "Level", "samr.samr_SetDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_SetDsrmPassword_name, + { "Name", "samr.samr_SetDsrmPassword.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_total_size, + { "Total Size", "samr.samr_QueryDisplayInfo2.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_max_entries, + { "Max Entries", "samr.samr_QueryDisplayInfo2.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_country_code, + { "Country Code", "samr.samr_UserInfo21.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetBootKeyInformation_unknown3, + { "Unknown3", "samr.samr_SetBootKeyInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_last_password_change, + { "Last Password Change", "samr.samr_UserInfo5.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER, + { "Samr Access Connect To Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CONNECT_TO_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CONNECT_TO_SERVER_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_lm_change, + { "Lm Change", "samr.samr_ChangePasswordUser2.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryAliasInfo_info, + { "Info", "samr.samr_QueryAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDsrmPassword_hash, + { "Hash", "samr.samr_SetDsrmPassword.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_lm_change, + { "Lm Change", "samr.samr_ChangePasswordUser3.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo12_lockout_window, + { "Lockout Window", "samr.samr_DomInfo12.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_DOMTRUST, + { "Acb Domtrust", "samr.samr_AcctFlags.ACB_DOMTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DOMTRUST_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo14_workstations, + { "Workstations", "samr.samr_UserInfo14.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_idx, + { "Idx", "samr.samr_DispEntryFull.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_idx, + { "Idx", "samr.samr_DispEntryFullGroup.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_bad_password_count, + { "Bad Password Count", "samr.samr_UserInfo21.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES, - { "Samr User Access Set Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info12, - { "Info12", "samr.samr_UserInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_resume_handle, - { "Resume Handle", "samr.samr_EnumDomainGroups.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Samr User Access Set Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_ATTRIBUTES_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_level, + { "Level", "samr.samr_QueryDisplayInfo3.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo8_sequence_num, + { "Sequence Num", "samr.samr_DomInfo8.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD, + { "Samr User Access Set Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD_tfs), ( 0x00000080 ), NULL, HFILL }}, + { &hf_samr_samr_LookupNames_names, + { "Names", "samr.samr_LookupNames.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_alias_access_mask, + { "Access Mask", "samr.alias.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info14, + { "Info14", "samr.samr_UserInfo.info14", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER, + { "Samr Alias Access Remove Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_description, + { "Description", "samr.samr_DispEntryFullGroup.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo17_acct_expiry, - { "Acct Expiry", "samr.samr_UserInfo17.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectInfo_info1, - { "Info1", "samr.samr_ConnectInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_num_entries, - { "Num Entries", "samr.samr_EnumDomainAliases.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_lm_password_set, - { "Lm Password Set", "samr.samr_UserInfo21.lm_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Acct Expiry", "samr.samr_UserInfo17.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_info, + { "Info", "samr.samr_QueryDisplayInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetMemberAttributesOfGroup_unknown1, + { "Unknown1", "samr.samr_SetMemberAttributesOfGroup.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_logon_count, + { "Logon Count", "samr.samr_UserInfo21.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info10, + { "Info10", "samr.samr_UserInfo.info10", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRepCtr_status, + { "Status", "samr.samr_ValidatePasswordRepCtr.status", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidationStatus_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_general, + { "General", "samr.samr_DomainInfo.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info1, + { "Info1", "samr.samr_UserInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME, - { "Samr Field Account Name", "samr.samr_FieldsPresent.SAMR_FIELD_ACCOUNT_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_connect_handle, - { "Connect Handle", "samr.samr_EnumDomains.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Samr Field Account Name", "samr.samr_FieldsPresent.SAMR_FIELD_ACCOUNT_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCOUNT_NAME_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePassword_req, + { "Req", "samr.samr_ValidatePassword.req", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_account, + { "Account", "samr.samr_ChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_fields_present, + { "Fields Present", "samr.samr_UserInfo21.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_max_entries, + { "Max Entries", "samr.samr_QueryDisplayInfo.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo4_logon_hours, + { "Logon Hours", "samr.samr_UserInfo4.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_resume_handle, + { "Resume Handle", "samr.samr_EnumDomainUsers.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info20, + { "Info20", "samr.samr_UserInfo.info20", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect5_info_in, + { "Info In", "samr.samr_Connect5.info_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH, + { "Samr Validate Field Password History Length", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_description, + { "Description", "samr.samr_UserInfo1.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_nt_verifier, + { "Nt Verifier", "samr.samr_ChangePasswordUser3.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser2_account_name, + { "Account Name", "samr.samr_CreateUser2.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectInfo_info1, + { "Info1", "samr.samr_ConnectInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_new_nt_crypted, + { "New Nt Crypted", "samr.samr_ChangePasswordUser.new_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryAscii_account_name, + { "Account Name", "samr.samr_DispEntryAscii.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq1_info, + { "Info", "samr.samr_ValidatePasswordReq1.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_SetUserInfo_info, - { "Info", "samr.samr_SetUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo_level, - { "Level", "samr.samr_QueryDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePassword_level, - { "Level", "samr.samr_ValidatePassword.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidatePasswordLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_sam, - { "Sam", "samr.samr_EnumDomainUsers.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo26_password_expired, - { "Password Expired", "samr.samr_UserInfo26.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_password, - { "Password", "samr.samr_ValidatePasswordReq3.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DeleteAliasMember_sid, - { "Sid", "samr.samr_DeleteAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo26_password, - { "Password", "samr.samr_UserInfo26.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_home_drive, - { "Home Drive", "samr.samr_UserInfo5.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasInfoAll_description, - { "Description", "samr.samr_AliasInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_nt_password, - { "Nt Password", "samr.samr_ChangePasswordUser3.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_account, - { "Account", "samr.samr_OemChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info4, - { "Info4", "samr.samr_DispInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_attributes, - { "Attributes", "samr.samr_GroupInfo.attributes", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Info", "samr.samr_SetUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_AcctFlags_ACB_PWNOTREQ, - { "Acb Pwnotreq", "samr.samr_AcctFlags.ACB_PWNOTREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOTREQ_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_AliasInfo_all, - { "All", "samr.samr_AliasInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_num_aliases, - { "Num Aliases", "samr.samr_DomGeneralInformation.num_aliases", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRep_ctr1, - { "Ctr1", "samr.samr_ValidatePasswordRep.ctr1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_password_expired, - { "Password Expired", "samr.samr_UserInfo21.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_idx, - { "Idx", "samr.samr_DispEntryFullGroup.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_country_code, - { "Country Code", "samr.samr_UserInfo21.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY, - { "Se Group Use For Deny Only", "samr.samr_GroupAttrs.SE_GROUP_USE_FOR_DENY_ONLY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT, - { "Samr Field Comment", "samr.samr_FieldsPresent.SAMR_FIELD_COMMENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COMMENT_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS, - { "Samr Group Access Get Members", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo14_workstations, - { "Workstations", "samr.samr_UserInfo14.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoDescription_description, - { "Description", "samr.samr_GroupInfoDescription.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidWithAttributeArray_rids, - { "Rids", "samr.samr_RidWithAttributeArray.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_acct_flags, - { "Acct Flags", "samr.samr_UserInfo21.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser2_acct_flags, - { "Acct Flags", "samr.samr_CreateUser2.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { "Acb Pwnotreq", "samr.samr_AcctFlags.ACB_PWNOTREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOTREQ_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_last_logoff, + { "Last Logoff", "samr.samr_UserInfo5.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_CryptPasswordEx_data, - { "Data", "samr.samr_CryptPasswordEx.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC, - { "Samr User Access Get Name Etc", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_NAME_ETC", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_info, - { "Info", "samr.samr_ValidatePasswordReq3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoGeneral_entries, - { "Entries", "samr.samr_DispInfoGeneral.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetMembersInAlias_sids, - { "Sids", "samr.samr_GetMembersInAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_num_entries, - { "Num Entries", "samr.samr_EnumDomainGroups.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetBootKeyInformation_unknown1, - { "Unknown1", "samr.samr_SetBootKeyInformation.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_password_matched, - { "Password Matched", "samr.samr_ValidatePasswordReq2.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_description, - { "Description", "samr.samr_DispEntryFull.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_parameters, - { "Parameters", "samr.samr_UserInfo21.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT, - { "Samr Domain Access Open Account", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryAscii_idx, - { "Idx", "samr.samr_DispEntryAscii.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_clear_lockout, - { "Clear Lockout", "samr.samr_ValidatePasswordReq3.clear_lockout", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_role, - { "Role", "samr.samr_DomGeneralInformation.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS, - { "Samr Field Workstations", "samr.samr_FieldsPresent.SAMR_FIELD_WORKSTATIONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS_tfs), ( 0x00000400 ), NULL, HFILL }}, + { "Data", "samr.samr_CryptPasswordEx.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupRids_num_rids, + { "Num Rids", "samr.samr_LookupRids.num_rids", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DomInfo5_domain_name, - { "Domain Name", "samr.samr_DomInfo5.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP, - { "Samr User Access Change Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_resume_handle, - { "Resume Handle", "samr.samr_EnumDomainUsers.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_primary_gid, - { "Primary Gid", "samr.samr_UserInfo5.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_workstations, - { "Workstations", "samr.samr_UserInfo5.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect3_unknown, - { "Unknown", "samr.samr_Connect3.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS, - { "Samr User Access Get Groups", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUPS", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED, - { "Acb Enc Txt Pwd Allowed", "samr.samr_AcctFlags.ACB_ENC_TXT_PWD_ALLOWED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED_tfs), ( 0x00000800 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_last_logon, - { "Last Logon", "samr.samr_UserInfo5.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo16_acct_flags, - { "Acct Flags", "samr.samr_UserInfo16.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo12_lockout_window, - { "Lockout Window", "samr.samr_DomInfo12.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRep_ctr3, - { "Ctr3", "samr.samr_ValidatePasswordRep.ctr3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_all2, - { "All2", "samr.samr_GroupInfo.all2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupDomain_sid, - { "Sid", "samr.samr_LookupDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_home_drive, - { "Home Drive", "samr.samr_UserInfo3.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LogonHours_units_per_week, - { "Units Per Week", "samr.samr_LogonHours.units_per_week", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_max_size, - { "Max Size", "samr.samr_EnumDomainAliases.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_nt_password_set, - { "Nt Password Set", "samr.samr_UserInfo21.nt_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePassword_req, - { "Req", "samr.samr_ValidatePassword.req", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_num_groups, - { "Num Groups", "samr.samr_DomGeneralInformation.num_groups", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Domain Name", "samr.samr_DomInfo5.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_SamArray_entries, - { "Entries", "samr.samr_SamArray.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidationBlob_data, - { "Data", "samr.samr_ValidationBlob.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_code_page, - { "Code Page", "samr.samr_UserInfo21.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO, - { "Samr Group Access Lookup Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_DispInfoFullGroups_count, - { "Count", "samr.samr_DispInfoFullGroups.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRep_ctr2, - { "Ctr2", "samr.samr_ValidatePasswordRep.ctr2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetBootKeyInformation_domain_handle, - { "Domain Handle", "samr.samr_GetBootKeyInformation.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info18, - { "Info18", "samr.samr_UserInfo.info18", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Entries", "samr.samr_SamArray.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS, - { "Samr Access Enum Domains", "samr.samr_ConnectAccessMask.SAMR_ACCESS_ENUM_DOMAINS", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_nt_verifier, - { "Nt Verifier", "samr.samr_ChangePasswordUser3.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info13, - { "Info13", "samr.samr_UserInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_fields_present, - { "Fields Present", "samr.samr_UserInfo21.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_primary_gid, - { "Primary Gid", "samr.samr_UserInfo21.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_all, - { "All", "samr.samr_GroupInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_system_name, - { "System Name", "samr.samr_Connect5.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_buf_size, - { "Buf Size", "samr.samr_QueryDisplayInfo3.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_old_lm_crypted, - { "Old Lm Crypted", "samr.samr_ChangePasswordUser.old_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_DOMTRUST, - { "Acb Domtrust", "samr.samr_AcctFlags.ACB_DOMTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DOMTRUST_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE, - { "Domain Refuse Password Change", "samr.samr_PasswordProperties.DOMAIN_REFUSE_PASSWORD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_max_entries, - { "Max Entries", "samr.samr_QueryDisplayInfo.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_last_password_change, - { "Last Password Change", "samr.samr_UserInfo3.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_hash, - { "Hash", "samr.samr_ValidatePasswordReq2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_account_name, - { "Account Name", "samr.samr_UserInfo5.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDomPwInfo_info, - { "Info", "samr.samr_GetDomPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangeReject_unknown1, - { "Unknown1", "samr.samr_ChangeReject.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH, - { "Samr Field Profile Path", "samr.samr_FieldsPresent.SAMR_FIELD_PROFILE_PATH", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PROFILE_PATH_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info16, - { "Info16", "samr.samr_UserInfo.info16", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_logon_script, - { "Logon Script", "samr.samr_UserInfo21.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_sec_desc_buf_len, - { "Sec Desc Buf Len", "samr.sec_desc_buf_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_names, - { "Names", "samr.samr_LookupNames.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info14, - { "Info14", "samr.samr_UserInfo.info14", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDsrmPassword_name, - { "Name", "samr.samr_SetDsrmPassword.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_acct_flags, - { "Acct Flags", "samr.samr_DispEntryGeneral.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_PW_EXPIRED, - { "Acb Pw Expired", "samr.samr_AcctFlags.ACB_PW_EXPIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PW_EXPIRED_tfs), ( 0x00020000 ), NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1, - { "Samr Domain Access Lookup Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_last_logoff, - { "Last Logoff", "samr.samr_UserInfo3.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo2_info, - { "Info", "samr.samr_QueryUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRepCtr_status, - { "Status", "samr.samr_ValidatePasswordRepCtr.status", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidationStatus_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_max_password_age, - { "Max Password Age", "samr.samr_DomInfo1.max_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_full_name, - { "Full Name", "samr.samr_DispEntryGeneral.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex_name, - { "Name", "samr.samr_GetDisplayEnumerationIndex.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo13_sequence_num, - { "Sequence Num", "samr.samr_DomInfo13.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_returned_size, - { "Returned Size", "samr.samr_QueryDisplayInfo2.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo6_full_name, - { "Full Name", "samr.samr_UserInfo6.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_lm_change, - { "Lm Change", "samr.samr_ChangePasswordUser2.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LogonHours_bits, - { "Bits", "samr.samr_LogonHours.bits", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_lm_change, - { "Lm Change", "samr.samr_ChangePasswordUser3.lm_change", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupNames_num_names, - { "Num Names", "samr.samr_LookupNames.num_names", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_logon_hours, - { "Logon Hours", "samr.samr_UserInfo21.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_lsa_Strings_count, - { "Count", "samr.lsa_Strings.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo11_logon_script, - { "Logon Script", "samr.samr_UserInfo11.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN, - { "Samr Access Lookup Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_LOOKUP_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_SetMemberAttributesOfGroup_unknown1, - { "Unknown1", "samr.samr_SetMemberAttributesOfGroup.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_lsa_Strings_names, - { "Names", "samr.lsa_Strings.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_bad_password_count, - { "Bad Password Count", "samr.samr_UserInfo21.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Samr Access Enum Domains", "samr.samr_ConnectAccessMask.SAMR_ACCESS_ENUM_DOMAINS", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_ENUM_DOMAINS_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_account_name, + { "Account Name", "samr.samr_UserInfo3.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfoAll_description, + { "Description", "samr.samr_AliasInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_EnumDomains_num_entries, - { "Num Entries", "samr.samr_EnumDomains.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Num Entries", "samr.samr_EnumDomains.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2, - { "Samr Domain Access Lookup Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS, - { "Samr Field Logon Hours", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_HOURS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS_tfs), ( 0x00002000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_last_password_change, - { "Last Password Change", "samr.samr_UserInfo5.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_TEMPDUP, - { "Acb Tempdup", "samr.samr_AcctFlags.ACB_TEMPDUP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TEMPDUP_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_new_lm_crypted, - { "New Lm Crypted", "samr.samr_ChangePasswordUser.new_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_primary_gid, - { "Primary Gid", "samr.samr_UserInfo3.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info3, - { "Info3", "samr.samr_UserInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info23, - { "Info23", "samr.samr_UserInfo.info23", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY, - { "Samr Validate Field Password History", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info17, - { "Info17", "samr.samr_UserInfo.info17", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_home_directory, - { "Home Directory", "samr.samr_UserInfo5.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDsrmPassword_hash, - { "Hash", "samr.samr_SetDsrmPassword.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE, - { "Samr Field Force Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_FORCE_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE_tfs), ( 0x00020000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_private, - { "Private", "samr.samr_UserInfo21.private", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_info, - { "Info", "samr.samr_QueryDisplayInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME, - { "Samr Validate Field Lockout Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_LOCKOUT_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_QueryAliasInfo_info, - { "Info", "samr.samr_QueryAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS, - { "Domain Password Lockout Admins", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_LOCKOUT_ADMINS", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD, - { "Samr Field Owf Pwd", "samr.samr_FieldsPresent.SAMR_FIELD_OWF_PWD", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_OWF_PWD_tfs), ( 0x20000000 ), NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info1, - { "Info1", "samr.samr_DomainInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetSecurity_sdbuf, - { "Sdbuf", "samr.samr_SetSecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_dominfo, - { "Dominfo", "samr.samr_ChangePasswordUser3.dominfo", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser2_account_name, - { "Account Name", "samr.samr_CreateUser2.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_connect_access_mask, - { "Access Mask", "samr.connect.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateDomainGroup_name, - { "Name", "samr.samr_CreateDomainGroup.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_account_name, - { "Account Name", "samr.samr_DispEntryGeneral.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordRepCtr_info, - { "Info", "samr.samr_ValidatePasswordRepCtr.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_nt_verifier, - { "Nt Verifier", "samr.samr_ChangePasswordUser2.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AddGroupMember_flags, - { "Flags", "samr.samr_AddGroupMember.flags", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info1, - { "Info1", "samr.samr_UserInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_home_directory, - { "Home Directory", "samr.samr_UserInfo3.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryGroupInfo_level, - { "Level", "samr.samr_QueryGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_account, - { "Account", "samr.samr_ChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION, - { "Acb Trusted For Delegation", "samr.samr_AcctFlags.ACB_TRUSTED_FOR_DELEGATION", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUSTED_FOR_DELEGATION_tfs), ( 0x00002000 ), NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_password_properties, - { "Password Properties", "samr.samr_DomInfo1.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_lm_password, - { "Lm Password", "samr.samr_ChangePasswordUser3.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info1, - { "Info1", "samr.samr_DispInfo.info1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect_system_name, - { "System Name", "samr.samr_Connect.system_name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo8_sequence_num, - { "Sequence Num", "samr.samr_DomInfo8.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_account_name, - { "Account Name", "samr.samr_UserInfo1.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_RID, - { "Samr Field Rid", "samr.samr_FieldsPresent.SAMR_FIELD_RID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_RID_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT, - { "Samr Field Bad Pwd Count", "samr.samr_FieldsPresent.SAMR_FIELD_BAD_PWD_COUNT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT_tfs), ( 0x00004000 ), NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE, - { "Domain Password No Anon Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_ANON_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo24_password, - { "Password", "samr.samr_UserInfo24.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo12_lockout_threshold, - { "Lockout Threshold", "samr.samr_DomInfo12.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Samr Domain Access Lookup Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_ConnectInfo1_client_version, + { "Client Version", "samr.samr_ConnectInfo1.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_acct_flags, + { "Acct Flags", "samr.samr_UserInfo3.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_buf_size, + { "Buf Size", "samr.samr_EnumDomains.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DomGeneralInformation2_lockout_window, - { "Lockout Window", "samr.samr_DomGeneralInformation2.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE, - { "Samr User Access Get Locale", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOCALE", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_alias_handle, - { "Alias Handle", "samr.alias_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoGeneral_count, - { "Count", "samr.samr_DispInfoGeneral.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_profile_path, - { "Profile Path", "samr.samr_UserInfo3.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_HOMDIRREQ, - { "Acb Homdirreq", "samr.samr_AcctFlags.ACB_HOMDIRREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_HOMDIRREQ_tfs), ( 0x00000002 ), NULL, HFILL }}, + { "Lockout Window", "samr.samr_DomGeneralInformation2.lockout_window", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_new_lm_crypted, + { "New Lm Crypted", "samr.samr_ChangePasswordUser.new_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo11_logon_script, + { "Logon Script", "samr.samr_UserInfo11.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect4_client_version, + { "Client Version", "samr.samr_Connect4.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT, + { "Se Group Enabled By Default", "samr.samr_GroupAttrs.SE_GROUP_ENABLED_BY_DEFAULT", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info2, + { "Info2", "samr.samr_DispInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON, + { "Samr Field Last Logon", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGON", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGON_tfs), ( 0x00000800 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_level, + { "Level", "samr.samr_QueryDisplayInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_workstations, + { "Workstations", "samr.samr_UserInfo3.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_primary_gid, + { "Primary Gid", "samr.samr_UserInfo1.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COMMENT, + { "Samr Field Comment", "samr.samr_FieldsPresent.SAMR_FIELD_COMMENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COMMENT_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_account_name, + { "Account Name", "samr.samr_UserInfo5.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_password3, + { "Password3", "samr.samr_ChangePasswordUser3.password3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_home_directory, + { "Home Directory", "samr.samr_UserInfo21.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO, + { "Samr Group Access Set Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_SET_INFO_tfs), ( 0x00000002 ), NULL, HFILL }}, { &hf_samr_samr_Ids_count, - { "Count", "samr.samr_Ids.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_reject, - { "Reject", "samr.samr_ChangePasswordUser3.reject", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY, - { "Se Group Mandatory", "samr.samr_GroupAttrs.SE_GROUP_MANDATORY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_MANDATORY_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_GetGroupsForUser_rids, - { "Rids", "samr.samr_GetGroupsForUser.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo23_info, - { "Info", "samr.samr_UserInfo23.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_password_expired, - { "Password Expired", "samr.samr_UserInfo18.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo25_info, - { "Info", "samr.samr_UserInfo25.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OpenDomain_sid, - { "Sid", "samr.samr_OpenDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetAliasMembership_sids, - { "Sids", "samr.samr_GetAliasMembership.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX, - { "Domain Password Complex", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_COMPLEX", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX_tfs), ( 0x00000001 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE, - { "Samr Field Home Drive", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DRIVE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_account_name, - { "Account Name", "samr.samr_DispEntryFullGroup.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT, - { "Samr Field Nt Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_NT_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT_tfs), ( 0x01000000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT, - { "Samr Validate Field Bad Password Count", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_AddAliasMember_sid, - { "Sid", "samr.samr_AddAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD, - { "Samr User Access Set Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_PASSWORD_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_GetBootKeyInformation_unknown, - { "Unknown", "samr.samr_GetBootKeyInformation.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect2_system_name, - { "System Name", "samr.samr_Connect2.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Count", "samr.samr_Ids.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER, + { "Samr Alias Access Add Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_ADD_MEMBER_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_full_name, + { "Full Name", "samr.samr_UserInfo1.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DomInfo1_password_history_length, - { "Password History Length", "samr.samr_DomInfo1.password_history_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo25_password, - { "Password", "samr.samr_UserInfo25.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_fields_present, - { "Fields Present", "samr.samr_ValidatePasswordInfo.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq_req3, - { "Req3", "samr.samr_ValidatePasswordReq.req3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo7_account_name, - { "Account Name", "samr.samr_UserInfo7.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo9_primary_gid, - { "Primary Gid", "samr.samr_UserInfo9.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info3, - { "Info3", "samr.samr_DomainInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_logon_hours, - { "Logon Hours", "samr.samr_UserInfo3.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_acct_expiry, - { "Acct Expiry", "samr.samr_UserInfo21.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_new_nt_crypted, - { "New Nt Crypted", "samr.samr_ChangePasswordUser.new_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info6, - { "Info6", "samr.samr_DomainInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_nt_present, - { "Nt Present", "samr.samr_ChangePasswordUser.nt_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq_req2, - { "Req2", "samr.samr_ValidatePasswordReq.req2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetDomainInfo_level, - { "Level", "samr.samr_SetDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_lm_password, - { "Lm Password", "samr.samr_UserInfo21.lm_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfo_description, - { "Description", "samr.samr_GroupInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_idx, - { "Idx", "samr.samr_DispEntryFull.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_resume_handle, - { "Resume Handle", "samr.samr_EnumDomains.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_num_users, - { "Num Users", "samr.samr_DomGeneralInformation.num_users", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY, - { "Samr Field Home Directory", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DIRECTORY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_level, - { "Level", "samr.samr_QueryDisplayInfo3.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED, - { "Se Group Enabled", "samr.samr_GroupAttrs.SE_GROUP_ENABLED", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_SVRTRUST, - { "Acb Svrtrust", "samr.samr_AcctFlags.ACB_SVRTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SVRTRUST_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_SetMemberAttributesOfGroup_unknown2, - { "Unknown2", "samr.samr_SetMemberAttributesOfGroup.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_comment, - { "Comment", "samr.samr_UserInfo1.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_USE_DES_KEY_ONLY, - { "Acb Use Des Key Only", "samr.samr_AcctFlags.ACB_USE_DES_KEY_ONLY", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_USE_DES_KEY_ONLY_tfs), ( 0x00008000 ), NULL, HFILL }}, - { &hf_samr_samr_RemoveMultipleMembersFromAlias_sids, - { "Sids", "samr.samr_RemoveMultipleMembersFromAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info7, - { "Info7", "samr.samr_DomainInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_lockout_duration, - { "Lockout Duration", "samr.samr_DomGeneralInformation2.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER, - { "Samr Alias Access Remove Member", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER, - { "Samr Group Access Add Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS, - { "Samr Field Num Logons", "samr.samr_FieldsPresent.SAMR_FIELD_NUM_LOGONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS_tfs), ( 0x00008000 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq2_info, - { "Info", "samr.samr_ValidatePasswordReq2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_buf_size, - { "Buf Size", "samr.samr_EnumDomains.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_lockout_threshold, - { "Lockout Threshold", "samr.samr_DomGeneralInformation2.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainGroups_sam, - { "Sam", "samr.samr_EnumDomainGroups.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD, - { "Samr User Access Change Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD_tfs), ( 0x00000040 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_unknown4, - { "Unknown4", "samr.samr_UserInfo21.unknown4", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_PWNOEXP, - { "Acb Pwnoexp", "samr.samr_AcctFlags.ACB_PWNOEXP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOEXP_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_CreateDomAlias_alias_name, - { "Alias Name", "samr.samr_CreateDomAlias.alias_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2, - { "Samr Domain Access Set Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info25, - { "Info25", "samr.samr_UserInfo.info25", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT, - { "Se Group Enabled By Default", "samr.samr_GroupAttrs.SE_GROUP_ENABLED_BY_DEFAULT", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_ENABLED_BY_DEFAULT_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_Connect3_system_name, - { "System Name", "samr.samr_Connect3.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo3_force_logoff_time, - { "Force Logoff Time", "samr.samr_DomInfo3.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME, - { "Samr Validate Field Bad Password Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_TIME_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_DomInfo13_modified_count_at_last_promotion, - { "Modified Count At Last Promotion", "samr.samr_DomInfo13.modified_count_at_last_promotion", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidTypeArray_types, - { "Types", "samr.samr_RidTypeArray.types", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_max_entries, - { "Max Entries", "samr.samr_QueryDisplayInfo2.max_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_force_logoff_time, - { "Force Logoff Time", "samr.samr_DomGeneralInformation.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoFull_entries, - { "Entries", "samr.samr_DispInfoFull.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS, - { "Samr Domain Access Lookup Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS_tfs), ( 0x00000080 ), NULL, HFILL }}, - { &hf_samr_samr_ChangeReject_reason, - { "Reason", "samr.samr_ChangeReject.reason", FT_UINT32, BASE_DEC, VALS(samr_samr_RejectReason_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon, - { "Pwd Must Change At Next Logon", "samr.samr_ValidatePasswordReq3.pwd_must_change_at_next_logon", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Password History Length", "samr.samr_DomInfo1.password_history_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_MANDATORY, + { "Se Group Mandatory", "samr.samr_GroupAttrs.SE_GROUP_MANDATORY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_MANDATORY_tfs), ( 0x00000001 ), NULL, HFILL }}, { &hf_samr_samr_ChangePasswordUser_nt_cross, - { "Nt Cross", "samr.samr_ChangePasswordUser.nt_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_cross1_present, - { "Cross1 Present", "samr.samr_ChangePasswordUser.cross1_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Nt Cross", "samr.samr_ChangePasswordUser.nt_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Password_hash, + { "Hash", "samr.samr_Password.hash", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info16, + { "Info16", "samr.samr_UserInfo.info16", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_last_logon, + { "Last Logon", "samr.samr_UserInfo21.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo8_full_name, - { "Full Name", "samr.samr_UserInfo8.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info2, - { "Info2", "samr.samr_DispInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID, - { "Se Group Logon Id", "samr.samr_GroupAttrs.SE_GROUP_LOGON_ID", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_LOGON_ID_tfs), ( 0xC0000000 ), NULL, HFILL }}, - { &hf_samr_samr_SetBootKeyInformation_unknown2, - { "Unknown2", "samr.samr_SetBootKeyInformation.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation2_general, - { "General", "samr.samr_DomGeneralInformation2.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_sam, - { "Sam", "samr.samr_EnumDomainAliases.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_sequence_num, - { "Sequence Num", "samr.samr_DomGeneralInformation.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_account_name, - { "Account Name", "samr.samr_UserInfo21.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_NO_AUTH_DATA_REQD, - { "Acb No Auth Data Reqd", "samr.samr_AcctFlags.ACB_NO_AUTH_DATA_REQD", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NO_AUTH_DATA_REQD_tfs), ( 0x00080000 ), NULL, HFILL }}, - { &hf_samr_samr_Connect5_info_in, - { "Info In", "samr.samr_Connect5.info_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_level_in, - { "Level In", "samr.samr_Connect5.level_in", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo13_description, - { "Description", "samr.samr_UserInfo13.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_nt_pwd_active, - { "Nt Pwd Active", "samr.samr_UserInfo18.nt_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info2, - { "Info2", "samr.samr_UserInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF, - { "Samr Field Last Logoff", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGOFF", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF_tfs), ( 0x00001000 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomainAliases_resume_handle, - { "Resume Handle", "samr.samr_EnumDomainAliases.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetBootKeyInformation_unknown3, - { "Unknown3", "samr.samr_SetBootKeyInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfoAscii_entries, - { "Entries", "samr.samr_DispInfoAscii.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CreateUser2_access_granted, - { "Access Granted", "samr.samr_CreateUser2.access_granted", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_num_members, - { "Num Members", "samr.samr_GroupInfoAll.num_members", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo12_profile_path, - { "Profile Path", "samr.samr_UserInfo12.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_MNS, - { "Acb Mns", "samr.samr_AcctFlags.ACB_MNS", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_MNS_tfs), ( 0x00000020 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_description, - { "Description", "samr.samr_UserInfo1.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_nt_password, - { "Nt Password", "samr.samr_UserInfo21.nt_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Full Name", "samr.samr_UserInfo8.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_cross1_present, + { "Cross1 Present", "samr.samr_ChangePasswordUser.cross1_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex2_name, + { "Name", "samr.samr_GetDisplayEnumerationIndex2.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo13_modified_count_at_last_promotion, + { "Modified Count At Last Promotion", "samr.samr_DomInfo13.modified_count_at_last_promotion", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_lm_password, + { "Lm Password", "samr.samr_ChangePasswordUser2.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_password, + { "Password", "samr.samr_OemChangePasswordUser2.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_buf_size, + { "Buf Size", "samr.samr_QueryDisplayInfo2.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq_req2, + { "Req2", "samr.samr_ValidatePasswordReq.req2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RidTypeArray_types, + { "Types", "samr.samr_RidTypeArray.types", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_info, + { "Info", "samr.samr_QueryDisplayInfo3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo_info8, - { "Info8", "samr.samr_UserInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info20, - { "Info20", "samr.samr_UserInfo.info20", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Info8", "samr.samr_UserInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryAliasInfo_level, + { "Level", "samr.samr_QueryAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_password_expired, + { "Password Expired", "samr.samr_UserInfo21.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info9, + { "Info9", "samr.samr_DomainInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_bad_password_count, + { "Bad Password Count", "samr.samr_UserInfo3.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_old_nt_crypted, + { "Old Nt Crypted", "samr.samr_ChangePasswordUser.old_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_full_name, + { "Full Name", "samr.samr_DispEntryGeneral.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo21_buffer, - { "Buffer", "samr.samr_UserInfo21.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_status, - { "NT Error", "samr.status", FT_UINT32, BASE_HEX, VALS(NT_errors), 0, NULL, HFILL }}, + { "Buffer", "samr.samr_UserInfo21.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectInfo1_unknown2, + { "Unknown2", "samr.samr_ConnectInfo1.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupDomain_sid, + { "Sid", "samr.samr_LookupDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN, + { "Samr Access Create Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CREATE_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_DeleteAliasMember_sid, + { "Sid", "samr.samr_DeleteAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetUserInfo2_level, + { "Level", "samr.samr_SetUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_SamArray_count, + { "Count", "samr.samr_SamArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_idx, + { "Idx", "samr.samr_DispEntryGeneral.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRep_ctr2, + { "Ctr2", "samr.samr_ValidatePasswordRep.ctr2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDomainInfo2_info, + { "Info", "samr.samr_QueryDomainInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_ValidatePasswordInfo_pwd_history_len, - { "Pwd History Len", "samr.samr_ValidatePasswordInfo.pwd_history_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_logon_count, - { "Logon Count", "samr.samr_UserInfo5.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_last_password_change, - { "Last Password Change", "samr.samr_UserInfo21.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomains_sam, - { "Sam", "samr.samr_EnumDomains.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq_req1, - { "Req1", "samr.samr_ValidatePasswordReq.req1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_group_handle, - { "Group Handle", "samr.group_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS, - { "Samr Field Acct Flags", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_FLAGS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS_tfs), ( 0x00100000 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_acct_flags, - { "Acct Flags", "samr.samr_DispEntryFullGroup.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA, - { "Samr Field Private Data", "samr.samr_FieldsPresent.SAMR_FIELD_PRIVATE_DATA", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIVATE_DATA_tfs), ( 0x04000000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_description, - { "Description", "samr.samr_UserInfo5.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID, - { "Samr Field Primary Gid", "samr.samr_FieldsPresent.SAMR_FIELD_PRIMARY_GID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_DispInfoFullGroups_entries, - { "Entries", "samr.samr_DispInfoFullGroups.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Pwd History Len", "samr.samr_ValidatePasswordInfo.pwd_history_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info3, + { "Info3", "samr.samr_UserInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS, + { "Domain Password Lockout Admins", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_LOCKOUT_ADMINS", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_LOCKOUT_ADMINS_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_info, + { "Info", "samr.samr_ValidatePasswordReq3.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_status, + { "NT Error", "samr.status", FT_UINT32, BASE_HEX, VALS(NT_errors), 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoFullGroups_count, + { "Count", "samr.samr_DispInfoFullGroups.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT, + { "Samr Field Lm Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_LM_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LM_PASSWORD_PRESENT_tfs), ( 0x02000000 ), NULL, HFILL }}, + { &hf_samr_samr_Connect_system_name, + { "System Name", "samr.samr_Connect.system_name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_hash, + { "Hash", "samr.samr_OemChangePasswordUser2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_parameters, + { "Parameters", "samr.samr_UserInfo21.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_all2, + { "All2", "samr.samr_GroupInfo.all2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_general2, + { "General2", "samr.samr_DomainInfo.general2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_account_name, + { "Account Name", "samr.samr_DispEntryFullGroup.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo_level, + { "Level", "samr.samr_QueryUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION, + { "Samr Field Description", "samr.samr_FieldsPresent.SAMR_FIELD_DESCRIPTION", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_DESCRIPTION_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_LookupDomain_domain_name, + { "Domain Name", "samr.samr_LookupDomain.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info7, + { "Info7", "samr.samr_DomainInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_profile_path, + { "Profile Path", "samr.samr_UserInfo3.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRep_ctr3, + { "Ctr3", "samr.samr_ValidatePasswordRep.ctr3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE, - { "Domain Password No Clear Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_CLEAR_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE_tfs), ( 0x00000004 ), NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_pwd_history, - { "Pwd History", "samr.samr_ValidatePasswordInfo.pwd_history", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex2_name, - { "Name", "samr.samr_GetDisplayEnumerationIndex2.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_password, - { "Password", "samr.samr_OemChangePasswordUser2.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_info, - { "Info", "samr.samr_QueryDisplayInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info9, - { "Info9", "samr.samr_UserInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info26, - { "Info26", "samr.samr_UserInfo.info26", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser2_lm_verifier, - { "Lm Verifier", "samr.samr_ChangePasswordUser2.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Domain Password No Clear Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_CLEAR_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_CLEAR_CHANGE_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT, + { "Samr Validate Field Bad Password Count", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_BAD_PASSWORD_COUNT_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo2_level, + { "Level", "samr.samr_QueryUserInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_CreateDomainGroup_name, + { "Name", "samr.samr_CreateDomainGroup.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_sam, + { "Sam", "samr.samr_EnumDomainGroups.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser2_access_granted, + { "Access Granted", "samr.samr_CreateUser2.access_granted", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetAliasInfo_level, + { "Level", "samr.samr_SetAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_num_users, + { "Num Users", "samr.samr_DomGeneralInformation.num_users", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_RESOURCE, + { "Se Group Resource", "samr.samr_GroupAttrs.SE_GROUP_RESOURCE", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_RESOURCE_tfs), ( 0x20000000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info2, + { "Info2", "samr.samr_UserInfo.info2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO, + { "Samr Alias Access Lookup Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_LOOKUP_INFO_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_acct_flags, + { "Acct Flags", "samr.samr_EnumDomainUsers.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo10_home_directory, - { "Home Directory", "samr.samr_UserInfo10.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_CryptPassword_data, - { "Data", "samr.samr_CryptPassword.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetGroupInfo_info, - { "Info", "samr.samr_SetGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_code_page, - { "Code Page", "samr.samr_UserInfo2.code_page", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_profile_path, - { "Profile Path", "samr.samr_UserInfo5.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Home Directory", "samr.samr_UserInfo10.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangeReject_reason, + { "Reason", "samr.samr_ChangeReject.reason", FT_UINT32, BASE_DEC, VALS(samr_samr_RejectReason_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN, + { "Samr Access Lookup Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_LOOKUP_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_LOOKUP_DOMAIN_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_AddAliasMember_sid, + { "Sid", "samr.samr_AddAliasMember.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3, + { "Samr Domain Access Set Info 3", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_3", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo2_returned_size, + { "Returned Size", "samr.samr_QueryDisplayInfo2.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_num_entries, + { "Num Entries", "samr.samr_EnumDomainUsers.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_connect_access_mask, + { "Access Mask", "samr.connect.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_resume_handle, + { "Resume Handle", "samr.samr_EnumDomainAliases.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED, + { "Acb Enc Txt Pwd Allowed", "samr.samr_AcctFlags.ACB_ENC_TXT_PWD_ALLOWED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_ENC_TXT_PWD_ALLOWED_tfs), ( 0x00000800 ), NULL, HFILL }}, + { &hf_samr_samr_DispInfoAscii_entries, + { "Entries", "samr.samr_DispInfoAscii.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_lockout_threshold, + { "Lockout Threshold", "samr.samr_DomGeneralInformation2.lockout_threshold", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_DISABLED, + { "Acb Disabled", "samr.samr_AcctFlags.ACB_DISABLED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DISABLED_tfs), ( 0x00000001 ), NULL, HFILL }}, { &hf_samr_samr_AliasInfoAll_name, - { "Name", "samr.samr_AliasInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex_idx, - { "Idx", "samr.samr_GetDisplayEnumerationIndex.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidToSid_sid, - { "Sid", "samr.samr_RidToSid.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo1_min_password_length, - { "Min Password Length", "samr.samr_DomInfo1.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO, - { "Samr Alias Access Set Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_last_logoff, - { "Last Logoff", "samr.samr_UserInfo5.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { "Name", "samr.samr_AliasInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_description, + { "Description", "samr.samr_GroupInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_hash, + { "Hash", "samr.samr_ValidatePasswordReq2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo24_password_expired, + { "Password Expired", "samr.samr_UserInfo24.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_LOGON_ID, + { "Se Group Logon Id", "samr.samr_GroupAttrs.SE_GROUP_LOGON_ID", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_LOGON_ID_tfs), ( 0xC0000000 ), NULL, HFILL }}, { &hf_samr_samr_UserInfo18_lm_pwd_active, - { "Lm Pwd Active", "samr.samr_UserInfo18.lm_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_num_entries, - { "Num Entries", "samr.samr_EnumDomainUsers.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect4_client_version, - { "Client Version", "samr.samr_Connect4.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_lm_pwd, - { "Lm Pwd", "samr.samr_UserInfo18.lm_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_bad_password_count, - { "Bad Password Count", "samr.samr_UserInfo5.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_RidTypeArray_count, - { "Count", "samr.samr_RidTypeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasInfo_name, - { "Name", "samr.samr_AliasInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo18_nt_pwd, - { "Nt Pwd", "samr.samr_UserInfo18.nt_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO, - { "Samr User Access Get Logoninfo", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOGONINFO", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_connect_handle, - { "Connect Handle", "samr.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info9, - { "Info9", "samr.samr_DomainInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAttrs_SE_GROUP_OWNER, - { "Se Group Owner", "samr.samr_GroupAttrs.SE_GROUP_OWNER", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_OWNER_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_GetDisplayEnumerationIndex_level, - { "Level", "samr.samr_GetDisplayEnumerationIndex.level", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_level_out, - { "Level Out", "samr.samr_Connect5.level_out", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_comment, - { "Comment", "samr.samr_UserInfo21.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispInfo_info5, - { "Info5", "samr.samr_DispInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER, - { "Samr Group Access Remove Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDomainInfo2_info, - { "Info", "samr.samr_QueryDomainInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo5_logon_script, - { "Logon Script", "samr.samr_UserInfo5.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_general, - { "General", "samr.samr_DomainInfo.general", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Lm Pwd Active", "samr.samr_UserInfo18.lm_pwd_active", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_bad_pwd_count, + { "Bad Pwd Count", "samr.samr_ValidatePasswordInfo.bad_pwd_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq1_password_matched, + { "Password Matched", "samr.samr_ValidatePasswordReq1.password_matched", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_description, + { "Description", "samr.samr_UserInfo5.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_logon_script, + { "Logon Script", "samr.samr_UserInfo21.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_full_name, + { "Full Name", "samr.samr_UserInfo5.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_role, + { "Role", "samr.samr_DomGeneralInformation.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo_info11, - { "Info11", "samr.samr_UserInfo.info11", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_primary, - { "Primary", "samr.samr_DomGeneralInformation.primary", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_last_logon, - { "Last Logon", "samr.samr_UserInfo21.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo13_domain_create_time, - { "Domain Create Time", "samr.samr_DomInfo13.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo24_password_expired, - { "Password Expired", "samr.samr_UserInfo24.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_full_name, - { "Full Name", "samr.samr_UserInfo3.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_DESCRIPTION, - { "Samr Field Description", "samr.samr_FieldsPresent.SAMR_FIELD_DESCRIPTION", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_DESCRIPTION_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_GetAliasMembership_rids, - { "Rids", "samr.samr_GetAliasMembership.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidationBlob_length, - { "Length", "samr.samr_ValidationBlob.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect4_system_name, - { "System Name", "samr.samr_Connect4.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG, - { "Samr Field Expired Flag", "samr.samr_FieldsPresent.SAMR_FIELD_EXPIRED_FLAG", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG_tfs), ( 0x08000000 ), NULL, HFILL }}, - { &hf_samr_samr_DomainInfo_info13, - { "Info13", "samr.samr_DomainInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_last_password_change, - { "Last Password Change", "samr.samr_ValidatePasswordInfo.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomInfo8_domain_create_time, - { "Domain Create Time", "samr.samr_DomInfo8.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_Connect5_info_out, - { "Info Out", "samr.samr_Connect5.info_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryGeneral_description, - { "Description", "samr.samr_DispEntryGeneral.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo2_start_idx, - { "Start Idx", "samr.samr_QueryDisplayInfo2.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Info11", "samr.samr_UserInfo.info11", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_lsa_Strings_count, + { "Count", "samr.lsa_Strings.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainUsers_sam, + { "Sam", "samr.samr_EnumDomainUsers.sam", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_home_directory, + { "Home Directory", "samr.samr_UserInfo3.home_directory", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_description, + { "Description", "samr.samr_GroupInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetBootKeyInformation_unknown1, + { "Unknown1", "samr.samr_SetBootKeyInformation.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect3_system_name, + { "System Name", "samr.samr_Connect3.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetGroupInfo_level, + { "Level", "samr.samr_SetGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS, + { "Samr User Access Get Groups", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUPS", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUPS_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_QueryGroupMember_rids, + { "Rids", "samr.samr_QueryGroupMember.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info12, + { "Info12", "samr.samr_UserInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_acct_expiry, + { "Acct Expiry", "samr.samr_UserInfo5.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS, + { "Samr Field Num Logons", "samr.samr_FieldsPresent.SAMR_FIELD_NUM_LOGONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NUM_LOGONS_tfs), ( 0x00008000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_lm_password_set, + { "Lm Password Set", "samr.samr_UserInfo21.lm_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_resume_handle, + { "Resume Handle", "samr.samr_EnumDomainGroups.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDomainInfo_level, + { "Level", "samr.samr_QueryDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, { &hf_samr_samr_GroupInfoAll_name, - { "Name", "samr.samr_GroupInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info24, - { "Info24", "samr.samr_UserInfo.info24", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Name", "samr.samr_GroupInfoAll.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_pwd_must_change_at_next_logon, + { "Pwd Must Change At Next Logon", "samr.samr_ValidatePasswordReq3.pwd_must_change_at_next_logon", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_cross2_present, + { "Cross2 Present", "samr.samr_ChangePasswordUser.cross2_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF, + { "Samr Field Last Logoff", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGOFF", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGOFF_tfs), ( 0x00001000 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info8, + { "Info8", "samr.samr_DomainInfo.info8", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_QueryDisplayInfo3_start_idx, - { "Start Idx", "samr.samr_QueryDisplayInfo3.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_LOGON, - { "Samr Field Last Logon", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_LOGON", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_LOGON_tfs), ( 0x00000800 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_workstations, - { "Workstations", "samr.samr_UserInfo3.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser_old_nt_crypted, - { "Old Nt Crypted", "samr.samr_ChangePasswordUser.old_nt_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo3_returned_size, - { "Returned Size", "samr.samr_QueryDisplayInfo3.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3, - { "Samr Domain Access Set Info 3", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_3", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_3_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_samr_QueryAliasInfo_level, - { "Level", "samr.samr_QueryAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_SamArray_count, - { "Count", "samr.samr_SamArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QuerySecurity_sdbuf, - { "Sdbuf", "samr.samr_QuerySecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DispEntryFullGroup_description, - { "Description", "samr.samr_DispEntryFullGroup.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectInfo1_client_version, - { "Client Version", "samr.samr_ConnectInfo1.client_version", FT_UINT32, BASE_DEC, VALS(samr_samr_ConnectVersion_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES, - { "Samr User Access Get Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_Shutdown_connect_handle, - { "Connect Handle", "samr.samr_Shutdown.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo10_home_drive, - { "Home Drive", "samr.samr_UserInfo10.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo_level, - { "Level", "samr.samr_QueryUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT, - { "Acb Trust Auth Delegat", "samr.samr_AcctFlags.ACB_TRUST_AUTH_DELEGAT", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT_tfs), ( 0x00040000 ), NULL, HFILL }}, - { &hf_samr_samr_DomInfo7_role, - { "Role", "samr.samr_DomInfo7.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_domain_server_state, - { "Domain Server State", "samr.samr_DomGeneralInformation.domain_server_state", FT_UINT32, BASE_DEC, VALS(samr_samr_DomainServerState_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_OemChangePasswordUser2_hash, - { "Hash", "samr.samr_OemChangePasswordUser2.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_full_name, - { "Full Name", "samr.samr_UserInfo1.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_AUTOLOCK, - { "Acb Autolock", "samr.samr_AcctFlags.ACB_AUTOLOCK", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_AUTOLOCK_tfs), ( 0x00000400 ), NULL, HFILL }}, - { &hf_samr_opnum, - { "Operation", "samr.opnum", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_logon_script, - { "Logon Script", "samr.samr_UserInfo3.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_hash, - { "Hash", "samr.samr_ValidatePasswordReq3.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT, - { "Samr Field Logon Script", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_SCRIPT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_SCRIPT_tfs), ( 0x00000100 ), NULL, HFILL }}, - { &hf_samr_samr_EnumDomainUsers_acct_flags, - { "Acct Flags", "samr.samr_EnumDomainUsers.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetAliasInfo_info, - { "Info", "samr.samr_SetAliasInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_domain_access_mask, - { "Access Mask", "samr.domain.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupRids_names, - { "Names", "samr.samr_LookupRids.names", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_user_access_mask, - { "Access Mask", "samr.user.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_unknown3, - { "Unknown3", "samr.samr_DomGeneralInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME, - { "Samr Field Full Name", "samr.samr_FieldsPresent.SAMR_FIELD_FULL_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FULL_NAME_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_DomGeneralInformation_domain_name, - { "Domain Name", "samr.samr_DomGeneralInformation.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SamEntry_idx, - { "Idx", "samr.samr_SamEntry.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_buf_count, - { "Buf Count", "samr.samr_UserInfo21.buf_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Start Idx", "samr.samr_QueryDisplayInfo3.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_last_logon, + { "Last Logon", "samr.samr_UserInfo5.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_comment, + { "Comment", "samr.samr_UserInfo2.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_PW_EXPIRED, + { "Acb Pw Expired", "samr.samr_AcctFlags.ACB_PW_EXPIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PW_EXPIRED_tfs), ( 0x00020000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_private, + { "Private", "samr.samr_UserInfo21.private", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_WSTRUST, + { "Acb Wstrust", "samr.samr_AcctFlags.ACB_WSTRUST", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_WSTRUST_tfs), ( 0x00000080 ), NULL, HFILL }}, { &hf_samr_samr_ChangeReject_unknown2, - { "Unknown2", "samr.samr_ChangeReject.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_full_name, - { "Full Name", "samr.samr_UserInfo21.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH, - { "Samr Validate Field Password History Length", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_LENGTH_tfs), ( 0x00000010 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_allow_password_change, - { "Allow Password Change", "samr.samr_UserInfo21.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetUserPwInfo_info, - { "Info", "samr.samr_GetUserPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Unknown2", "samr.samr_ChangeReject.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryAscii_idx, + { "Idx", "samr.samr_DispEntryAscii.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo13_description, + { "Description", "samr.samr_UserInfo13.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePassword_rep, + { "Rep", "samr.samr_ValidatePassword.rep", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info21, + { "Info21", "samr.samr_UserInfo.info21", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfo_description, + { "Description", "samr.samr_AliasInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY, + { "Samr Validate Field Password History", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_PASSWORD_HISTORY", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_PASSWORD_HISTORY_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_info, + { "Info", "samr.samr_ValidatePasswordReq2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_lm_cross, + { "Lm Cross", "samr.samr_ChangePasswordUser.lm_cross", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetBootKeyInformation_unknown2, + { "Unknown2", "samr.samr_SetBootKeyInformation.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD, + { "Samr User Access Change Password", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_PASSWORD", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_PASSWORD_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_ValidationBlob_data, + { "Data", "samr.samr_ValidationBlob.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_last_password_change, + { "Last Password Change", "samr.samr_UserInfo3.last_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation2_lockout_duration, + { "Lockout Duration", "samr.samr_DomGeneralInformation2.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info5, + { "Info5", "samr.samr_DomainInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_lm_present, + { "Lm Present", "samr.samr_ChangePasswordUser.lm_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_MNS, + { "Acb Mns", "samr.samr_AcctFlags.ACB_MNS", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_MNS_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_server, + { "Server", "samr.samr_ChangePasswordUser3.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex_level, + { "Level", "samr.samr_GetDisplayEnumerationIndex.level", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_total_size, + { "Total Size", "samr.samr_QueryDisplayInfo.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_rid, + { "RID", "samr.rid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info23, + { "Info23", "samr.samr_UserInfo.info23", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info4, + { "Info4", "samr.samr_UserInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_lm_password, + { "Lm Password", "samr.samr_UserInfo21.lm_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_OWF_PWD, + { "Samr Field Owf Pwd", "samr.samr_FieldsPresent.SAMR_FIELD_OWF_PWD", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_OWF_PWD_tfs), ( 0x20000000 ), NULL, HFILL }}, + { &hf_samr_samr_LookupNames_types, + { "Types", "samr.samr_LookupNames.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect5_level_out, + { "Level Out", "samr.samr_Connect5.level_out", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info13, + { "Info13", "samr.samr_DomainInfo.info13", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_total_size, + { "Total Size", "samr.samr_QueryDisplayInfo3.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_reject, + { "Reject", "samr.samr_ChangePasswordUser3.reject", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoDescription_description, + { "Description", "samr.samr_GroupInfoDescription.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_nt_password, + { "Nt Password", "samr.samr_ChangePasswordUser2.nt_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_handle, + { "Handle", "samr.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo2_info, + { "Info", "samr.samr_QueryUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_force_logoff_time, + { "Force Logoff Time", "samr.samr_DomGeneralInformation.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetMembersInAlias_sids, + { "Sids", "samr.samr_GetMembersInAlias.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PwInfo_password_properties, + { "Password Properties", "samr.samr_PwInfo.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_pwd_history, + { "Pwd History", "samr.samr_ValidatePasswordInfo.pwd_history", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_account_name, + { "Account Name", "samr.samr_DispEntryGeneral.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_dominfo, + { "Dominfo", "samr.samr_ChangePasswordUser3.dominfo", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_num_aliases, + { "Num Aliases", "samr.samr_DomGeneralInformation.num_aliases", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_logon_count, + { "Logon Count", "samr.samr_UserInfo5.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_account_name, + { "Account Name", "samr.samr_UserInfo21.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo6_account_name, + { "Account Name", "samr.samr_UserInfo6.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_SetSecurity_sec_info, - { "Sec Info", "samr.samr_SetSecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_last_logon, - { "Last Logon", "samr.samr_UserInfo3.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo3_bad_password_count, - { "Bad Password Count", "samr.samr_UserInfo3.bad_password_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ChangePasswordUser3_account, - { "Account", "samr.samr_ChangePasswordUser3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Sec Info", "samr.samr_SetSecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_name, + { "Name", "samr.samr_GroupInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CreateUser_account_name, + { "Account Name", "samr.samr_CreateUser.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_server, + { "Server", "samr.samr_OemChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_password_properties, + { "Password Properties", "samr.samr_DomInfo1.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER, + { "Samr Group Access Remove Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_REMOVE_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_REMOVE_MEMBER_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_SamEntry_name, + { "Name", "samr.samr_SamEntry.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2, + { "Samr Domain Access Set Info 2", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_2", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_2_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_account, + { "Account", "samr.samr_ValidatePasswordReq3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_nt_password, + { "Nt Password", "samr.samr_UserInfo21.nt_password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_allow_password_change, + { "Allow Password Change", "samr.samr_UserInfo3.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_SMARTCARD_REQUIRED, + { "Acb Smartcard Required", "samr.samr_AcctFlags.ACB_SMARTCARD_REQUIRED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_SMARTCARD_REQUIRED_tfs), ( 0x00001000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo26_password, + { "Password", "samr.samr_UserInfo26.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP, - { "Samr Domain Access Create Group", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_GROUP", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP_tfs), ( 0x00000020 ), NULL, HFILL }}, + { "Samr Domain Access Create Group", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_GROUP", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_GROUP_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePassword_level, + { "Level", "samr.samr_ValidatePassword.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_ValidatePasswordLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_num_groups, + { "Num Groups", "samr.samr_DomGeneralInformation.num_groups", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS, + { "Samr Domain Access Enum Accounts", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS_tfs), ( 0x00000100 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_primary_gid, + { "Primary Gid", "samr.samr_UserInfo3.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info24, + { "Info24", "samr.samr_UserInfo.info24", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM, + { "Samr User Access Set Loc Com", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_SET_LOC_COM", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_SET_LOC_COM_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_unknown, + { "Unknown", "samr.samr_UserInfo2.unknown", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFull_description, + { "Description", "samr.samr_DispEntryFull.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_acct_flags, + { "Acct Flags", "samr.samr_UserInfo21.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info5, + { "Info5", "samr.samr_UserInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_ValidatePasswordInfo_lockout_time, - { "Lockout Time", "samr.samr_ValidatePasswordInfo.lockout_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordInfo_bad_pwd_count, - { "Bad Pwd Count", "samr.samr_ValidatePasswordInfo.bad_pwd_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE, - { "Samr Field Allow Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_ALLOW_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ALLOW_PWD_CHANGE_tfs), ( 0x00010000 ), NULL, HFILL }}, + { "Lockout Time", "samr.samr_ValidatePasswordInfo.lockout_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER, + { "Samr Group Access Add Member", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_ADD_MEMBER", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_ADD_MEMBER_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1, + { "Samr Domain Access Set Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo25_info, + { "Info", "samr.samr_UserInfo25.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetDomainInfo_info, + { "Info", "samr.samr_SetDomainInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_password, + { "Password", "samr.samr_ValidatePasswordReq3.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QuerySecurity_sdbuf, + { "Sdbuf", "samr.samr_QuerySecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo25_password, + { "Password", "samr.samr_UserInfo25.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO, + { "Samr User Access Get Logoninfo", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOGONINFO", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOGONINFO_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_connect_handle, + { "Connect Handle", "samr.samr_EnumDomains.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_NOT_DELEGATED, + { "Acb Not Delegated", "samr.samr_AcctFlags.ACB_NOT_DELEGATED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_NOT_DELEGATED_tfs), ( 0x00004000 ), NULL, HFILL }}, + { &hf_samr_samr_Shutdown_connect_handle, + { "Connect Handle", "samr.samr_Shutdown.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SamEntry_idx, + { "Idx", "samr.samr_SamEntry.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER, + { "Samr Access Shutdown Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_SHUTDOWN_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_SHUTDOWN_SERVER_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_logon_hours, + { "Logon Hours", "samr.samr_UserInfo21.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupNames_num_names, + { "Num Names", "samr.samr_LookupNames.num_names", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1, + { "Samr Domain Access Lookup Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_profile_path, + { "Profile Path", "samr.samr_UserInfo21.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDomPwInfo_domain_name, + { "Domain Name", "samr.samr_GetDomPwInfo.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetBootKeyInformation_domain_handle, + { "Domain Handle", "samr.samr_GetBootKeyInformation.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_nt_password_set, + { "Nt Password Set", "samr.samr_UserInfo21.nt_password_set", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY, + { "Se Group Use For Deny Only", "samr.samr_GroupAttrs.SE_GROUP_USE_FOR_DENY_ONLY", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_USE_FOR_DENY_ONLY_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_logon_count, + { "Logon Count", "samr.samr_UserInfo3.logon_count", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryUserInfo_info, + { "Info", "samr.samr_QueryUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_force_password_change, + { "Force Password Change", "samr.samr_UserInfo3.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_description, + { "Description", "samr.samr_UserInfo21.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info26, + { "Info26", "samr.samr_UserInfo.info26", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_DispInfoFull_count, - { "Count", "samr.samr_DispInfoFull.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq1_info, - { "Info", "samr.samr_ValidatePasswordReq1.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info4, - { "Info4", "samr.samr_UserInfo.info4", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_DISABLED, - { "Acb Disabled", "samr.samr_AcctFlags.ACB_DISABLED", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DISABLED_tfs), ( 0x00000001 ), NULL, HFILL }}, + { "Count", "samr.samr_DispInfoFull.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_max_size, + { "Max Size", "samr.samr_EnumDomainAliases.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetAliasMembership_sids, + { "Sids", "samr.samr_GetAliasMembership.sids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_lm_pwd, + { "Lm Pwd", "samr.samr_UserInfo18.lm_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info9, + { "Info9", "samr.samr_UserInfo.info9", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_CryptPassword_data, + { "Data", "samr.samr_CryptPassword.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo16_acct_flags, + { "Acct Flags", "samr.samr_UserInfo16.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info3, + { "Info3", "samr.samr_DispInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info18, + { "Info18", "samr.samr_UserInfo.info18", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_workstations, + { "Workstations", "samr.samr_UserInfo21.workstations", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryFullGroup_acct_flags, + { "Acct Flags", "samr.samr_DispEntryFullGroup.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info12, + { "Info12", "samr.samr_DomainInfo.info12", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS, + { "Samr Alias Access Get Members", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_GET_MEMBERS_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME, + { "Samr Validate Field Lockout Time", "samr.samr_ValidateFieldsPresent.SAMR_VALIDATE_FIELD_LOCKOUT_TIME", FT_BOOLEAN, 32, TFS(&samr_ValidateFieldsPresent_SAMR_VALIDATE_FIELD_LOCKOUT_TIME_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_Connect5_system_name, + { "System Name", "samr.samr_Connect5.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect4_system_name, + { "System Name", "samr.samr_Connect4.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect3_unknown, + { "Unknown", "samr.samr_Connect3.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_group_handle, + { "Group Handle", "samr.group_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_old_lm_crypted, + { "Old Lm Crypted", "samr.samr_ChangePasswordUser.old_lm_crypted", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_hash, + { "Hash", "samr.samr_ValidatePasswordReq3.hash", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomOEMInformation_oem_information, + { "Oem Information", "samr.samr_DomOEMInformation.oem_information", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_nt_verifier, + { "Nt Verifier", "samr.samr_ChangePasswordUser2.nt_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT, + { "Samr Domain Access Open Account", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT_tfs), ( 0x00000200 ), NULL, HFILL }}, { &hf_samr_samr_SetDsrmPassword_unknown, - { "Unknown", "samr.samr_SetDsrmPassword.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info6, - { "Info6", "samr.samr_UserInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH, - { "Acb Dont Require Preauth", "samr.samr_AcctFlags.ACB_DONT_REQUIRE_PREAUTH", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_DONT_REQUIRE_PREAUTH_tfs), ( 0x00010000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info21, - { "Info21", "samr.samr_UserInfo.info21", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupRids_types, - { "Types", "samr.samr_LookupRids.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_group_access_mask, - { "Access Mask", "samr.group.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo_info10, - { "Info10", "samr.samr_UserInfo.info10", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY, - { "Samr Field Acct Expiry", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_EXPIRY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY_tfs), ( 0x00080000 ), NULL, HFILL }}, + { "Unknown", "samr.samr_SetDsrmPassword.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomains_resume_handle, + { "Resume Handle", "samr.samr_EnumDomains.resume_handle", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO, + { "Samr Group Access Lookup Info", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_LOOKUP_INFO", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_LOOKUP_INFO_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_sec_desc_buf_len, + { "Sec Desc Buf Len", "samr.sec_desc_buf_len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetUserInfo_level, + { "Level", "samr.samr_SetUserInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_UserInfoLevel_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_RidWithAttribute_attributes, + { "Attributes", "samr.samr_RidWithAttribute.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetSecurity_sdbuf, + { "Sdbuf", "samr.samr_SetSecurity.sdbuf", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC, + { "Samr Field Sec Desc", "samr.samr_FieldsPresent.SAMR_FIELD_SEC_DESC", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_SEC_DESC_tfs), ( 0x10000000 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE, + { "Samr Field Country Code", "samr.samr_FieldsPresent.SAMR_FIELD_COUNTRY_CODE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_COUNTRY_CODE_tfs), ( 0x00400000 ), NULL, HFILL }}, + { &hf_samr_samr_DomInfo13_sequence_num, + { "Sequence Num", "samr.samr_DomInfo13.sequence_num", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE, + { "Domain Password No Anon Change", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_NO_ANON_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_NO_ANON_CHANGE_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS, + { "Samr Field Workstations", "samr.samr_FieldsPresent.SAMR_FIELD_WORKSTATIONS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_WORKSTATIONS_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_acct_flags, + { "Acct Flags", "samr.samr_UserInfo5.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_domain_access_mask, + { "Access Mask", "samr.domain.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangeReject_unknown1, + { "Unknown1", "samr.samr_ChangeReject.unknown1", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_ValidatePasswordInfo_bad_password_time, - { "Bad Password Time", "samr.samr_ValidatePasswordInfo.bad_password_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SetAliasInfo_level, - { "Level", "samr.samr_SetAliasInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_AliasInfoEnum_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP, - { "Samr User Access Get Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP_tfs), ( 0x00000200 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo21_force_password_change, - { "Force Password Change", "samr.samr_UserInfo21.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_PwInfo_password_properties, - { "Password Properties", "samr.samr_PwInfo.password_properties", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_CODE_PAGE, - { "Samr Field Code Page", "samr.samr_FieldsPresent.SAMR_FIELD_CODE_PAGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_CODE_PAGE_tfs), ( 0x00800000 ), NULL, HFILL }}, - { &hf_samr_samr_UserInfo1_primary_gid, - { "Primary Gid", "samr.samr_UserInfo1.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GroupInfoAll_description, - { "Description", "samr.samr_GroupInfoAll.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_LookupRids_num_rids, - { "Num Rids", "samr.samr_LookupRids.num_rids", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_AliasInfo_description, - { "Description", "samr.samr_AliasInfo.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_domain_handle, - { "Domain Handle", "samr.domain_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryUserInfo_info, - { "Info", "samr.samr_QueryUserInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_SamEntry_name, - { "Name", "samr.samr_SamEntry.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN, - { "Samr Access Create Domain", "samr.samr_ConnectAccessMask.SAMR_ACCESS_CREATE_DOMAIN", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_CREATE_DOMAIN_tfs), ( 0x00000008 ), NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_total_size, - { "Total Size", "samr.samr_QueryDisplayInfo.total_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { "Bad Password Time", "samr.samr_ValidatePasswordInfo.bad_password_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq_req3, + { "Req3", "samr.samr_ValidatePasswordReq.req3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_last_logon, + { "Last Logon", "samr.samr_UserInfo3.last_logon", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_primary_gid, + { "Primary Gid", "samr.samr_UserInfo5.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_min_password_age, + { "Min Password Age", "samr.samr_DomInfo1.min_password_age", FT_INT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetGroupsForUser_rids, + { "Rids", "samr.samr_GetGroupsForUser.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoFullGroups_entries, + { "Entries", "samr.samr_DispInfoFullGroups.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS, + { "Samr Domain Access Create Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_ALIAS_tfs), ( 0x00000040 ), NULL, HFILL }}, { &hf_samr_samr_QueryDomainInfo2_level, - { "Level", "samr.samr_QueryDomainInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePassword_rep, - { "Rep", "samr.samr_ValidatePassword.rep", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1, - { "Samr Domain Access Set Info 1", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_SET_INFO_1", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_SET_INFO_1_tfs), ( 0x00000002 ), NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE, - { "Samr Field Last Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE_tfs), ( 0x00040000 ), NULL, HFILL }}, - { &hf_samr_samr_DispEntryFull_account_name, - { "Account Name", "samr.samr_DispEntryFull.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QuerySecurity_sec_info, - { "Sec Info", "samr.samr_QuerySecurity.sec_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Level", "samr.samr_QueryDomainInfo2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainInfoClass_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfo_all, + { "All", "samr.samr_GroupInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_allow_password_change, + { "Allow Password Change", "samr.samr_UserInfo21.allow_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser2_server, + { "Server", "samr.samr_ChangePasswordUser2.server", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID, + { "Samr Field Primary Gid", "samr.samr_FieldsPresent.SAMR_FIELD_PRIMARY_GID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PRIMARY_GID_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo23_password, + { "Password", "samr.samr_UserInfo23.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoGeneral_count, + { "Count", "samr.samr_DispInfoGeneral.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_LookupRids_types, + { "Types", "samr.samr_LookupRids.types", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_RemoveMemberFromForeignDomain_sid, + { "Sid", "samr.samr_RemoveMemberFromForeignDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_last_logoff, + { "Last Logoff", "samr.samr_UserInfo3.last_logoff", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_QueryGroupInfo_info, - { "Info", "samr.samr_QueryGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_ValidatePasswordReq3_account, - { "Account", "samr.samr_ValidatePasswordReq3.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_user_handle, - { "User Handle", "samr.user_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_FieldsPresent_SAMR_FIELD_SEC_DESC, - { "Samr Field Sec Desc", "samr.samr_FieldsPresent.SAMR_FIELD_SEC_DESC", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_SEC_DESC_tfs), ( 0x10000000 ), NULL, HFILL }}, - { &hf_samr_samr_Password_hash, - { "Hash", "samr.samr_Password.hash", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_GetDomPwInfo_domain_name, - { "Domain Name", "samr.samr_GetDomPwInfo.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, - { &hf_samr_samr_QueryDisplayInfo_level, - { "Level", "samr.samr_QueryDisplayInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, - { &hf_samr_samr_UserInfo2_comment, - { "Comment", "samr.samr_UserInfo2.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Info", "samr.samr_QueryGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_comment, + { "Comment", "samr.samr_UserInfo21.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info17, + { "Info17", "samr.samr_UserInfo.info17", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_lm_password, + { "Lm Password", "samr.samr_ChangePasswordUser3.lm_password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_logon_hours, + { "Logon Hours", "samr.samr_UserInfo5.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_unknown3, + { "Unknown3", "samr.samr_DomGeneralInformation.unknown3", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT, + { "Samr Field Bad Pwd Count", "samr.samr_FieldsPresent.SAMR_FIELD_BAD_PWD_COUNT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_BAD_PWD_COUNT_tfs), ( 0x00004000 ), NULL, HFILL }}, + { &hf_samr_samr_GetUserPwInfo_info, + { "Info", "samr.samr_GetUserPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_logon_hours, + { "Logon Hours", "samr.samr_UserInfo3.logon_hours", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES, + { "Samr User Access Get Attributes", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_ATTRIBUTES_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_EnumDomainGroups_num_entries, + { "Num Entries", "samr.samr_EnumDomainGroups.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_lsa_Strings_names, + { "Names", "samr.lsa_Strings.names", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_OpenDomain_sid, + { "Sid", "samr.samr_OpenDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS, + { "Samr Field Logon Hours", "samr.samr_FieldsPresent.SAMR_FIELD_LOGON_HOURS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LOGON_HOURS_tfs), ( 0x00002000 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRep_ctr1, + { "Ctr1", "samr.samr_ValidatePasswordRep.ctr1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_samr_samr_UserInfo21_home_drive, - { "Home Drive", "samr.samr_UserInfo21.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { "Home Drive", "samr.samr_UserInfo21.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS, + { "Samr Group Access Get Members", "samr.samr_GroupAccessMask.SAMR_GROUP_ACCESS_GET_MEMBERS", FT_BOOLEAN, 32, TFS(&samr_GroupAccessMask_SAMR_GROUP_ACCESS_GET_MEMBERS_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_LogonHours_units_per_week, + { "Units Per Week", "samr.samr_LogonHours.units_per_week", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT, + { "Samr Field Nt Password Present", "samr.samr_FieldsPresent.SAMR_FIELD_NT_PASSWORD_PRESENT", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_NT_PASSWORD_PRESENT_tfs), ( 0x01000000 ), NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAll_attributes, + { "Attributes", "samr.samr_GroupInfoAll.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetUserInfo2_info, + { "Info", "samr.samr_SetUserInfo2.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_returned_size, + { "Returned Size", "samr.samr_QueryDisplayInfo.returned_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_nt_pwd, + { "Nt Pwd", "samr.samr_UserInfo18.nt_pwd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq3_clear_lockout, + { "Clear Lockout", "samr.samr_ValidatePasswordReq3.clear_lockout", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo12_lockout_duration, + { "Lockout Duration", "samr.samr_DomInfo12.lockout_duration", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetGroupInfo_info, + { "Info", "samr.samr_SetGroupInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfo_all, + { "All", "samr.samr_AliasInfo.all", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_TEMPDUP, + { "Acb Tempdup", "samr.samr_AcctFlags.ACB_TEMPDUP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TEMPDUP_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER, + { "Samr Access Initialize Server", "samr.samr_ConnectAccessMask.SAMR_ACCESS_INITIALIZE_SERVER", FT_BOOLEAN, 32, TFS(&samr_ConnectAccessMask_SAMR_ACCESS_INITIALIZE_SERVER_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE, + { "Samr User Access Get Locale", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_LOCALE", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_LOCALE_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_account, + { "Account", "samr.samr_ValidatePasswordReq2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_logon_script, + { "Logon Script", "samr.samr_UserInfo5.logon_script", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfo_info5, + { "Info5", "samr.samr_DispInfo.info5", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX, + { "Domain Password Complex", "samr.samr_PasswordProperties.DOMAIN_PASSWORD_COMPLEX", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_PASSWORD_COMPLEX_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info3, + { "Info3", "samr.samr_DomainInfo.info3", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo7_account_name, + { "Account Name", "samr.samr_UserInfo7.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE, + { "Samr Field Home Drive", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DRIVE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DRIVE_tfs), ( 0x00000080 ), NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER, + { "Samr Domain Access Create User", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_CREATE_USER", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_CREATE_USER_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_CreateUser2_acct_flags, + { "Acct Flags", "samr.samr_CreateUser2.acct_flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq_req1, + { "Req1", "samr.samr_ValidatePasswordReq.req1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE, + { "Samr Field Force Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_FORCE_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FORCE_PWD_CHANGE_tfs), ( 0x00020000 ), NULL, HFILL }}, + { &hf_samr_samr_DomInfo3_force_logoff_time, + { "Force Logoff Time", "samr.samr_DomInfo3.force_logoff_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupInfoAttributes_attributes, + { "Attributes", "samr.samr_GroupInfoAttributes.attributes", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo6_full_name, + { "Full Name", "samr.samr_UserInfo6.full_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_HOMDIRREQ, + { "Acb Homdirreq", "samr.samr_AcctFlags.ACB_HOMDIRREQ", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_HOMDIRREQ_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS, + { "Samr Field Acct Flags", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_FLAGS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_FLAGS_tfs), ( 0x00100000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo_info7, + { "Info7", "samr.samr_UserInfo.info7", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_user_access_mask, + { "Access Mask", "samr.user.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordReq2_password, + { "Password", "samr.samr_ValidatePasswordReq2.password", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_oem, + { "Oem", "samr.samr_DomainInfo.oem", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomGeneralInformation_domain_name, + { "Domain Name", "samr.samr_DomGeneralInformation.domain_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP, + { "Samr User Access Change Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP_tfs), ( 0x00000400 ), NULL, HFILL }}, + { &hf_samr_samr_DomainInfo_info6, + { "Info6", "samr.samr_DomainInfo.info6", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_EnumDomainAliases_num_entries, + { "Num Entries", "samr.samr_EnumDomainAliases.num_entries", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo7_role, + { "Role", "samr.samr_DomInfo7.role", FT_UINT32, BASE_DEC, VALS(samr_samr_Role_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_LookupNames_rids, + { "Rids", "samr.samr_LookupNames.rids", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoGeneral_entries, + { "Entries", "samr.samr_DispInfoGeneral.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasInfo_name, + { "Name", "samr.samr_AliasInfo.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG, + { "Samr Field Expired Flag", "samr.samr_FieldsPresent.SAMR_FIELD_EXPIRED_FLAG", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_EXPIRED_FLAG_tfs), ( 0x08000000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_primary_gid, + { "Primary Gid", "samr.samr_UserInfo21.primary_gid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT, + { "Acb Trust Auth Delegat", "samr.samr_AcctFlags.ACB_TRUST_AUTH_DELEGAT", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_TRUST_AUTH_DELEGAT_tfs), ( 0x00040000 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY, + { "Samr Field Acct Expiry", "samr.samr_FieldsPresent.SAMR_FIELD_ACCT_EXPIRY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_ACCT_EXPIRY_tfs), ( 0x00080000 ), NULL, HFILL }}, + { &hf_samr_samr_CreateDomAlias_alias_name, + { "Alias Name", "samr.samr_CreateDomAlias.alias_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO, + { "Samr Alias Access Set Info", "samr.samr_AliasAccessMask.SAMR_ALIAS_ACCESS_SET_INFO", FT_BOOLEAN, 32, TFS(&samr_AliasAccessMask_SAMR_ALIAS_ACCESS_SET_INFO_tfs), ( 0x00000010 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo20_parameters, + { "Parameters", "samr.samr_UserInfo20.parameters", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_start_idx, + { "Start Idx", "samr.samr_QueryDisplayInfo.start_idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect5_info_out, + { "Info Out", "samr.samr_Connect5.info_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetBootKeyInformation_unknown, + { "Unknown", "samr.samr_GetBootKeyInformation.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex2_level, + { "Level", "samr.samr_GetDisplayEnumerationIndex2.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_DomainDisplayInformation_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex2_idx, + { "Idx", "samr.samr_GetDisplayEnumerationIndex2.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_account_name, + { "Account Name", "samr.samr_UserInfo1.account_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AcctFlags_ACB_PWNOEXP, + { "Acb Pwnoexp", "samr.samr_AcctFlags.ACB_PWNOEXP", FT_BOOLEAN, 32, TFS(&samr_AcctFlags_ACB_PWNOEXP_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY, + { "Samr Field Home Directory", "samr.samr_FieldsPresent.SAMR_FIELD_HOME_DIRECTORY", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_HOME_DIRECTORY_tfs), ( 0x00000040 ), NULL, HFILL }}, + { &hf_samr_samr_OemChangePasswordUser2_account, + { "Account", "samr.samr_OemChangePasswordUser2.account", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_unknown4, + { "Unknown4", "samr.samr_UserInfo21.unknown4", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoAscii_count, + { "Count", "samr.samr_DispInfoAscii.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDisplayEnumerationIndex_idx, + { "Idx", "samr.samr_GetDisplayEnumerationIndex.idx", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryGroupInfo_level, + { "Level", "samr.samr_QueryGroupInfo.level", FT_UINT1632, BASE_DEC, VALS(samr_samr_GroupInfoEnum_vals), 0, NULL, HFILL }}, + { &hf_samr_samr_LookupRids_names, + { "Names", "samr.samr_LookupRids.names", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_FULL_NAME, + { "Samr Field Full Name", "samr.samr_FieldsPresent.SAMR_FIELD_FULL_NAME", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_FULL_NAME_tfs), ( 0x00000002 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo10_home_drive, + { "Home Drive", "samr.samr_UserInfo10.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo3_home_drive, + { "Home Drive", "samr.samr_UserInfo3.home_drive", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo_buf_size, + { "Buf Size", "samr.samr_QueryDisplayInfo.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo8_domain_create_time, + { "Domain Create Time", "samr.samr_DomInfo8.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_SetMemberAttributesOfGroup_unknown2, + { "Unknown2", "samr.samr_SetMemberAttributesOfGroup.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_AddGroupMember_flags, + { "Flags", "samr.samr_AddGroupMember.flags", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_force_password_change, + { "Force Password Change", "samr.samr_UserInfo21.force_password_change", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC, + { "Samr User Access Get Name Etc", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_NAME_ETC", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_NAME_ETC_tfs), ( 0x00000001 ), NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordRepCtr_info, + { "Info", "samr.samr_ValidatePasswordRepCtr.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GroupAttrs_SE_GROUP_OWNER, + { "Se Group Owner", "samr.samr_GroupAttrs.SE_GROUP_OWNER", FT_BOOLEAN, 32, TFS(&samr_GroupAttrs_SE_GROUP_OWNER_tfs), ( 0x00000008 ), NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_RID, + { "Samr Field Rid", "samr.samr_FieldsPresent.SAMR_FIELD_RID", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_RID_tfs), ( 0x00000004 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo18_password_expired, + { "Password Expired", "samr.samr_UserInfo18.password_expired", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo5_profile_path, + { "Profile Path", "samr.samr_UserInfo5.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo1_min_password_length, + { "Min Password Length", "samr.samr_DomInfo1.min_password_length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE, + { "Domain Refuse Password Change", "samr.samr_PasswordProperties.DOMAIN_REFUSE_PASSWORD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_PasswordProperties_DOMAIN_REFUSE_PASSWORD_CHANGE_tfs), ( 0x00000020 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo12_profile_path, + { "Profile Path", "samr.samr_UserInfo12.profile_path", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser_nt_present, + { "Nt Present", "samr.samr_ChangePasswordUser.nt_present", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_PARAMETERS, + { "Samr Field Parameters", "samr.samr_FieldsPresent.SAMR_FIELD_PARAMETERS", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_PARAMETERS_tfs), ( 0x00200000 ), NULL, HFILL }}, + { &hf_samr_samr_RidWithAttributeArray_count, + { "Count", "samr.samr_RidWithAttributeArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispEntryGeneral_description, + { "Description", "samr.samr_DispEntryGeneral.description", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo21_acct_expiry, + { "Acct Expiry", "samr.samr_UserInfo21.acct_expiry", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE, + { "Samr Field Last Pwd Change", "samr.samr_FieldsPresent.SAMR_FIELD_LAST_PWD_CHANGE", FT_BOOLEAN, 32, TFS(&samr_FieldsPresent_SAMR_FIELD_LAST_PWD_CHANGE_tfs), ( 0x00040000 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo24_password, + { "Password", "samr.samr_UserInfo24.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_GetDomPwInfo_info, + { "Info", "samr.samr_GetDomPwInfo.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_Connect2_system_name, + { "System Name", "samr.samr_Connect2.system_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_connect_handle, + { "Connect Handle", "samr.connect_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP, + { "Samr User Access Get Group Membership", "samr.samr_UserAccessMask.SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP", FT_BOOLEAN, 32, TFS(&samr_UserAccessMask_SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP_tfs), ( 0x00000200 ), NULL, HFILL }}, + { &hf_samr_samr_UserInfo1_comment, + { "Comment", "samr.samr_UserInfo1.comment", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_QueryDisplayInfo3_buf_size, + { "Buf Size", "samr.samr_QueryDisplayInfo3.buf_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DispInfoFull_entries, + { "Entries", "samr.samr_DispInfoFull.entries", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_ValidatePasswordInfo_fields_present, + { "Fields Present", "samr.samr_ValidatePasswordInfo.fields_present", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS, + { "Samr Domain Access Lookup Alias", "samr.samr_DomainAccessMask.SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS", FT_BOOLEAN, 32, TFS(&samr_DomainAccessMask_SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS_tfs), ( 0x00000080 ), NULL, HFILL }}, + { &hf_samr_samr_ChangePasswordUser3_lm_verifier, + { "Lm Verifier", "samr.samr_ChangePasswordUser3.lm_verifier", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo23_info, + { "Info", "samr.samr_UserInfo23.info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_UserInfo2_country_code, + { "Country Code", "samr.samr_UserInfo2.country_code", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }}, + { &hf_samr_samr_DomInfo13_domain_create_time, + { "Domain Create Time", "samr.samr_DomInfo13.domain_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }}, }; |