KERB_S4U_LOGON structure (ntsecapi.h)

  • Article

The KERB_S4U_LOGON structure contains information about a service for user (S4U) logon. This structure is used by the LsaLogonUser function with the Kerberos package.

Syntax

typedef struct _KERB_S4U_LOGON {
  KERB_LOGON_SUBMIT_TYPE MessageType;
  ULONG                  Flags;
  UNICODE_STRING         ClientUpn;
  UNICODE_STRING         ClientRealm;
} KERB_S4U_LOGON, *PKERB_S4U_LOGON;

Members

MessageType

A value of the KERB_LOGON_SUBMIT_TYPE enumeration that identifies the type of logon being requested. This member must be set to KerbS4ULogon.

Flags

Flags that provide more information about the logon.

Value Meaning
KERB_S4U_LOGON_FLAG_CHECK_LOGONHOURS
0x2
 Requests the hours that the user has been logged on.
KERB_S4U_LOGON_FLAG_IDENTIFY
0x8
 Requests the identity token.

ClientUpn

A UNICODE_STRING that specifies the user principal name (UPN) of the client. This member cannot be NULL.

The Buffer member of the UNICODE_STRING structure must point to memory that is contiguous to the KERB_S4U_LOGON structure.

ClientRealm

A UNICODE_STRING that specifies the realm of the client, if known. If the realm is not known, this member can be NULL.

The Buffer member of the UNICODE_STRING structure must point to memory that is contiguous to the KERB_S4U_LOGON structure.

Requirements

Requirement Value
Minimum supported client None supported
Minimum supported server Windows Server 2003 [desktop apps only]
Header ntsecapi.h