3.1.5.1.8 SamrOpenAlias (Opnum 27)

  • [アーティクル]

The SamrOpenAlias method obtains a handle to an alias, given a RID.

 long SamrOpenAlias(
   [in] SAMPR_HANDLE DomainHandle,
   [in] unsigned long DesiredAccess,
   [in] unsigned long AliasId,
   [out] SAMPR_HANDLE* AliasHandle
 );

DomainHandle: An RPC context handle, as specified in section 2.2.7.2, representing a domain object.

DesiredAccess: An ACCESS_MASK that indicates the requested access for the returned handle. See section 2.2.1.6 for a list of alias access values.

AliasId: A RID of an alias.

AliasHandle: An RPC context handle, as specified in section 2.2.7.2.

This protocol asks the RPC runtime, via the strict_context_handle attribute, to reject the use of context handles created by a method of a different RPC interface than this one, as specified in [MS-RPCE] section 3.

Upon receiving this message, the server MUST process the data from the message according to the constraints in section 3.1.5.1.6, with the following values:

  • Target-Rid: AliasId

  • Target-Object-Type: A group object (that is, a database with the objectClass group or derived from group) and groupType containing GROUP_TYPE_RESOURCE_GROUP.

  • Generic-Access-Mask-Mapping-Table:

    Incoming bit

    Translated bits

    GENERIC_READ

    ALIAS_READ

    GENERIC_WRITE

    ALIAS_WRITE

    GENERIC_EXECUTE

    ALIAS_EXECUTE

    GENERIC_ALL

    ALIAS_ALL_ACCESS

  • Desired-Access-Mapping-Table:

    DesiredAccess

    Access mask

    Object ACE type

    ALIAS_READ_INFORMATION

    ACTRL_DS_READ_PROP

    59ba2f42-79a2-11d0-9020-00c04fc2d3cf

    ALIAS_WRITE_ACCOUNT

    ACTRL_DS_WRITE_PROP

    59ba2f42-79a2-11d0-9020-00c04fc2d3cf

    ALIAS_ADD_MEMBER

    ACTRL_DS_WRITE_PROP

    bf9679c0-0de6-11d0-a285-00aa003049e2

    ALIAS_REMOVE_MEMBER

    ACTRL_DS_WRITE_PROP

    bf9679c0-0de6-11d0-a285-00aa003049e2

    ALIAS_LIST_MEMBERS

    ACTRL_DS_READ_PROP

    bf9679c0-0de6-11d0-a285-00aa003049e2

    ACCESS_SYSTEM_SECURITY

    ACCESS_SYSTEM_SECURITY

    WRITE_OWNER

    WRITE_OWNER

    WRITE_DAC

    WRITE_DAC

    DELETE

    DELETE

  • Output-Handle: AliasHandle