capr

Documentation

Overview

The capr package implements the CAPR client protocol.

Introduction

The Central Access Policy Identifier (ID) Retrieval Protocol enables an administrative tool to query the Central Access Policies (CAPs) configured on a remote computer.

Overview

The Central Access Policy ID Retrieval (CAPR) Protocol is designed to allow an administrative tool running on one computer to remotely query the set of central access control policies configured on another computer.

Central access policy objects are created in Active Directory using administrative authorization tools. Selected central access policy objects are deployed to other computers using Group Policy: Central Access Policies Extension (CAPE, described in [MS-GPCAP]). Other administrative tools can then use CAPR to determine which central policy objects have been deployed to a given remote computer.

Within CAPE and CAPR, central access policies are represented by Central Access Policy IDs (CAPIDs). A CAPID is simply the SID of a central access policy object within Active Directory.

The typical use scenario is as follows. An administrative interface tool uses CAPR to obtain the CAPIDs of one or more central access policy objects. The tool then uses these CAPIDs with CAPE and Lightweight Directory Access Protocol (LDAP): The Protocol, specified in [RFC4511], to obtain detailed information about the policies. That data can then be presented to the user and manipulated in whatever manner is appropriate to the administrative interface tool, such as to perform authorization tasks.

This protocol defines one RPC call, LsarGetAvailableCAPIDs, for client applications to use. See section 3.1.4.1 for details of this call's use.

Index

• Variables
• type WrappedCapidSet
  • func (o *WrappedCapidSet) MarshalNDR(ctx context.Context, w ndr.Writer) error
  • func (o *WrappedCapidSet) UnmarshalNDR(ctx context.Context, w ndr.Reader) error

Variables

var (
	// import guard
	GoPackage = "capr"
)

Types

type WrappedCapidSet

type WrappedCapidSet struct {
	// Entries: The number of elements in the SidInfo array.
	Entries uint32 `idl:"name:Entries" json:"entries"`
	// SidInfo: A pointer to an array of LSAPR_SID_INFORMATION structures, as defined in
	// [MS-LSAT] section 2.2.17.
	SIDInfo []*lsarpc.SIDInformation `idl:"name:SidInfo;size_is:(Entries)" json:"sid_info"`
}

WrappedCapidSet structure represents LSAPR_WRAPPED_CAPID_SET RPC structure.

The LSAPR_WRAPPED_CAPID_SET structure is a container for an array of LSAPR_SID_INFORMATION structures.

func (*WrappedCapidSet) MarshalNDR

func (o *WrappedCapidSet) MarshalNDR(ctx context.Context, w ndr.Writer) error

func (*WrappedCapidSet) UnmarshalNDR

func (o *WrappedCapidSet) UnmarshalNDR(ctx context.Context, w ndr.Reader) error