From e97acc714d9052b56b947cc3a54510d3d3eb36fe Mon Sep 17 00:00:00 2001 From: Gary Lockyer Date: Fri, 14 Dec 2018 11:09:20 +1300 Subject: dsdb audit_log: Add windows event codes to password changes Add a new "eventId" element to the PasswordChange JSON log messages. This contains a Windows Event Code Id either: 4723 Password changed 4724 Password reset Signed-off-by: Gary Lockyer Reviewed-by: Andrew Bartlett --- librpc/idl/windows_event_ids.idl | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'librpc/idl') diff --git a/librpc/idl/windows_event_ids.idl b/librpc/idl/windows_event_ids.idl index 289415724af..c711db1b30f 100644 --- a/librpc/idl/windows_event_ids.idl +++ b/librpc/idl/windows_event_ids.idl @@ -10,7 +10,9 @@ interface windows_events typedef [v1_enum,public] enum { EVT_ID_SUCCESSFUL_LOGON = 4624, - EVT_ID_UNSUCCESSFUL_LOGON = 4625 + EVT_ID_UNSUCCESSFUL_LOGON = 4625, + EVT_ID_PASSWORD_CHANGE = 4723, + EVT_ID_PASSWORD_RESET = 4724 } event_id_type; typedef [v1_enum,public] enum { -- cgit v1.2.1