idl: Add Windows event code ids
authorGary Lockyer <gary@catalyst.net.nz>
Wed, 12 Dec 2018 21:17:44 +0000 (10:17 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Fri, 14 Dec 2018 17:57:52 +0000 (18:57 +0100)
commitcb23a0345f1ef4297f6643c25ebe955b9aaee54c
tree7e61d68ce9912ab833844ef935336021a3d0625c
parentedfb6cb8223be430360c8372457880471a198630
idl: Add Windows event code ids

Add idl definitions for Windows Event Code Ids, and Logon Types. This
intial commit adds:

Event Ids
4264 Successful logon
4625 Unsuccessful logon

Logon Types
 2 Interactive
 3 Network
 4 Batch
 5 Service
 7 Unlock
 8 NetworkCleartext
 9 NewCredentials
10 RemoteInteractive
11 CachedInteractive

The intention is to add Windows Event Codes to the JSON log messages, to
provide a common event identifier in mixed Windows and Samba networks.
And to assist security personnel with a windows background.

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
librpc/idl/windows_event_ids.idl [new file with mode: 0644]
librpc/idl/wscript_build
source4/librpc/wscript_build