ホーム › Security.Authentication.Identity › KERB_TICKET_LOGON
KERB_TICKET_LOGON
構造体サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。
フィールド
| フィールド | 型 | サイズ | x64 | x86 | 説明 |
|---|---|---|---|---|---|
| MessageType | KERB_LOGON_SUBMIT_TYPE | 4 | +0 | +0 | Kerberosログオン送信種別を示す列挙値。 |
| Flags | DWORD | 4 | +4 | +4 | チケットログオンの動作を制御するフラグ。 |
| ServiceTicketLength | DWORD | 4 | +8 | +8 | ServiceTicketのバイト長。 |
| TicketGrantingTicketLength | DWORD | 4 | +12 | +12 | TicketGrantingTicketのバイト長。0可。 |
| ServiceTicket | BYTE* | 8/4 | +16 | +16 | サービスチケット(AP-REQ等)の生データへのポインタ。 |
| TicketGrantingTicket | BYTE* | 8/4 | +24 | +20 | TGTの生データへのポインタ。NULL可。 |
各言語での定義
#include <windows.h>
// KERB_TICKET_LOGON (x64 32 / x86 24 バイト)
typedef struct KERB_TICKET_LOGON {
KERB_LOGON_SUBMIT_TYPE MessageType;
DWORD Flags;
DWORD ServiceTicketLength;
DWORD TicketGrantingTicketLength;
BYTE* ServiceTicket;
BYTE* TicketGrantingTicket;
} KERB_TICKET_LOGON;using System;
using System.Runtime.InteropServices;
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct KERB_TICKET_LOGON
{
public int MessageType;
public uint Flags;
public uint ServiceTicketLength;
public uint TicketGrantingTicketLength;
public IntPtr ServiceTicket;
public IntPtr TicketGrantingTicket;
}Imports System.Runtime.InteropServices
<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure KERB_TICKET_LOGON
Public MessageType As Integer
Public Flags As UInteger
Public ServiceTicketLength As UInteger
Public TicketGrantingTicketLength As UInteger
Public ServiceTicket As IntPtr
Public TicketGrantingTicket As IntPtr
End Structureimport ctypes
from ctypes import wintypes
class KERB_TICKET_LOGON(ctypes.Structure):
_fields_ = [
("MessageType", ctypes.c_int),
("Flags", wintypes.DWORD),
("ServiceTicketLength", wintypes.DWORD),
("TicketGrantingTicketLength", wintypes.DWORD),
("ServiceTicket", ctypes.c_void_p),
("TicketGrantingTicket", ctypes.c_void_p),
]#[repr(C)]
pub struct KERB_TICKET_LOGON {
pub MessageType: i32,
pub Flags: u32,
pub ServiceTicketLength: u32,
pub TicketGrantingTicketLength: u32,
pub ServiceTicket: *mut core::ffi::c_void,
pub TicketGrantingTicket: *mut core::ffi::c_void,
}import "golang.org/x/sys/windows"
type KERB_TICKET_LOGON struct {
MessageType int32
Flags uint32
ServiceTicketLength uint32
TicketGrantingTicketLength uint32
ServiceTicket uintptr
TicketGrantingTicket uintptr
}type
KERB_TICKET_LOGON = record
MessageType: Integer;
Flags: DWORD;
ServiceTicketLength: DWORD;
TicketGrantingTicketLength: DWORD;
ServiceTicket: Pointer;
TicketGrantingTicket: Pointer;
end;const KERB_TICKET_LOGON = extern struct {
MessageType: i32,
Flags: u32,
ServiceTicketLength: u32,
TicketGrantingTicketLength: u32,
ServiceTicket: ?*anyopaque,
TicketGrantingTicket: ?*anyopaque,
};type
KERB_TICKET_LOGON {.bycopy.} = object
MessageType: int32
Flags: uint32
ServiceTicketLength: uint32
TicketGrantingTicketLength: uint32
ServiceTicket: pointer
TicketGrantingTicket: pointerstruct KERB_TICKET_LOGON
{
int MessageType;
uint Flags;
uint ServiceTicketLength;
uint TicketGrantingTicketLength;
void* ServiceTicket;
void* TicketGrantingTicket;
}HSP用 定義
HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。
; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x86 レイアウト)
; KERB_TICKET_LOGON サイズ: 24 バイト(x86)
dim st, 6 ; 4byte整数×6(構造体サイズ 24 / 4 切り上げ)
; MessageType : KERB_LOGON_SUBMIT_TYPE (+0, 4byte) st.0 = 値 / 値 = st.0 (lpoke/lpeek も可)
; Flags : DWORD (+4, 4byte) st.1 = 値 / 値 = st.1 (lpoke/lpeek も可)
; ServiceTicketLength : DWORD (+8, 4byte) st.2 = 値 / 値 = st.2 (lpoke/lpeek も可)
; TicketGrantingTicketLength : DWORD (+12, 4byte) st.3 = 値 / 値 = st.3 (lpoke/lpeek も可)
; ServiceTicket : BYTE* (+16, 4byte) st.4 = 値 / 値 = st.4 (lpoke/lpeek も可)
; TicketGrantingTicket : BYTE* (+20, 4byte) st.5 = 値 / 値 = st.5 (lpoke/lpeek も可)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; KERB_TICKET_LOGON サイズ: 32 バイト(x64)
dim st, 8 ; 4byte整数×8(構造体サイズ 32 / 4 切り上げ)
; MessageType : KERB_LOGON_SUBMIT_TYPE (+0, 4byte) st.0 = 値 / 値 = st.0 (lpoke/lpeek も可)
; Flags : DWORD (+4, 4byte) st.1 = 値 / 値 = st.1 (lpoke/lpeek も可)
; ServiceTicketLength : DWORD (+8, 4byte) st.2 = 値 / 値 = st.2 (lpoke/lpeek も可)
; TicketGrantingTicketLength : DWORD (+12, 4byte) st.3 = 値 / 値 = st.3 (lpoke/lpeek も可)
; ServiceTicket : BYTE* (+16, 8byte) qpoke st,16,値 / qpeek(st,16) ※IronHSPのみ。3.7/3.8は lpoke st,16,下位 : lpoke st,20,上位
; TicketGrantingTicket : BYTE* (+24, 8byte) qpoke st,24,値 / qpeek(st,24) ※IronHSPのみ。3.7/3.8は lpoke st,24,下位 : lpoke st,28,上位
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
#defstruct global KERB_TICKET_LOGON
#field int MessageType
#field int Flags
#field int ServiceTicketLength
#field int TicketGrantingTicketLength
#field intptr ServiceTicket
#field intptr TicketGrantingTicket
#endstruct
stdim st, KERB_TICKET_LOGON ; NSTRUCT 変数を確保
st->MessageType = 100
mes "MessageType=" + st->MessageType