Edit

Share via

KERB_ADD_CREDENTIALS_REQUEST_EX structure (ntsecapi.h)

  • Article

Specifies a message to add, remove, or replace an extra server credential for a logon session, and the service principal names (SPNs) to be associated with that credential. The SeTcbPrivilege constant is required to alter another logon account's credentials.

Syntax

typedef struct _KERB_ADD_CREDENTIALS_REQUEST_EX {
  KERB_ADD_CREDENTIALS_REQUEST Credentials;
  ULONG                        PrincipalNameCount;
  UNICODE_STRING               PrincipalNames[ANYSIZE_ARRAY];
} KERB_ADD_CREDENTIALS_REQUEST_EX, *PKERB_ADD_CREDENTIALS_REQUEST_EX;

Members

Credentials

A KERB_ADD_CREDENTIALS_REQUEST structure that specifies the credentials to add, remove, or replace.

PrincipalNameCount

The number of elements in the PrincipalNames array.

PrincipalNames[ANYSIZE_ARRAY]

An array of SPNs to be associated with the user account specified by the Credentials member

Remarks

Calling the LsaCallAuthenticationPackage function with this structure affects only the behavior of the AcceptSecurityContext (Kerberos) function. Using this structure allows multiple physical and virtual servers to share a single identity.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Header ntsecapi.h

See also

KERB_ADD_CREDENTIALS_REQUEST