JEDI Windows API » JWSCL Downloads http://blog.delphi-jedi.net Joint Endeavor of Delphi Innovators of Windows Programming Sat, 21 Aug 2010 05:44:40 +0000 en hourly 1 http://wordpress.org/?v=abc JWSCL Features Overview http://blog.delphi-jedi.net/2010/02/22/jwscl-features-overview/ http://blog.delphi-jedi.net/2010/02/22/jwscl-features-overview/#comments Mon, 22 Feb 2010 12:43:46 +0000 Christian Wimmer http://blog.delphi-jedi.net/?p=652 I had some free time that I used to put together all the features JWSCL provides currently. There are some more features that are implemented by other tool classes or functions that I left out in favor of a good overview. A complete overview of all classes, methods and more gives you the documentation at http://jwscldoc.delphi-jedi.net.

So here are the feautures (You can look up the class names on the documentation page):

  • Windows Token management (TJwSecurityToken)
    • Impersonation
    • Supports LogonUser, LsaLogonUser
    • Lots more
  • Full support of Security ID (SID) (TJwSecurityID, TJwSecurityIDList)
    • Also well known security IDs like Everyone (JwsclKnownSid.pas) are stored as simple to use variables.
  • Full support of Access Control Lists (also CALLBACK_ACE and OBJECT_ACE)
    • DACL, SACL
  • Full support of Security Descriptor (SECURITY_DESCRIPTOR) (TJwSecurityDescriptor)
    • DACL, SACL, Owner, Group
    • Implements a simple to use Security Descriptor (TJwSimpleDescriptor)
  • Security Rights Mapping; Maps Generic Rights to specific ones (JwsclMapping.pas)
    • Conversion of Security Rights (DWORD) to Human Readable names (JwFormatAccessRights)
  • Privileges (TJwPrivilege, TJwPrivilegeSet, JwsclPrivileges.pas)
  • Windowstation and Desktops (TJwSecurityWindowStation, TJwSecurityDesktop)
  • Local Security Authority Logon Sessions (TJwLsaLogonSession)
  • Security of Windows objects; files, registry, handles (TJwSecureFileObject, TJwSecureFileObject, TJwSecureGeneralObject)
    • Support of Access Checking (AccessCheck)
    • Supports Inheritance (by default only files and registry)
  • Support of MS AuthZ API; Client Side Access Checks for custom Resources (JwsclAuthCtx.pas)
  • Credentials GUI API (TJwCredentialsPrompt)
  • MS Encryption and Protection API (TJwEncryptionApi,  TJwEncryptMemory, TJwRandomDataGenerator)
  • Windows Version Detection on remote or local client (TJwFileVersion, TJwServerInfo, TJwWindowsVersion)
  • Security Descriptor GUI (TJwSecurityDescriptorDialog)
  • Terminal Sessions (TJwTerminalServer)
    • Server Management
    • Sessions Management
    • Processes Management
  • Vista Elevation (JwShellExecute, JwElevateProcess, JwsclElevation.pas)
  • Vista Integrity Level (Built in)
  • Firewall Administration (TJwsclFirewall)
  • Builtin basic Sma rtpointer Support (TJwAutoLock)
  • Job Object support (TJwJobObject) even with several sessions (TJwJobObjectSessionList)
  • Process Handling that encapsulates support for different Windows Versions and bugs in API (functions JwCreateProcessAsAdminUser, JwCreateProcessInSession, JwGetProcessSessionID, JwGetTokenFromProcess, JwProcessIdToSessionId)
  • Support Memory Mapped Objects (TJwFileStreamEx, TJwIPCStream, TJwVirtualStream)
  • Extended Thread Support lile naming threads and WaitWithTimeOut (TJwThread)
  • Hashing Support (TJwHash) 
    • For JWSCL classes (JwObjectHash)
    • For files (JwCreateFileHash, JwCompareFileHash, JwDataHash, JwIntegerHash) in combination with fast Memory Mapping.
  • DCOM support for Client and Server (currently only developer branch); CoInitializeSecurity (TJwComProcessSecurity), Authentication, Impersonation, Proxy Security Blanket (TJwComClientSecurity, TJwComServerSecurity), Access Control (TJwServerAccessControl), DCOM Configuration (TJwComRegistrySecurity) of Global Configs and Class Security.
  • Easy to use WinAPI (Msg)WaitForMultipleObjects functions (JwMsgWaitForMultipleObjects, JwMsgWaitForMultipleObjects)
  • Multi Language Support of Resource Files (LoadLocalizedString)
  • Ansi- & Unicode due to own Delphi compatible String type TJwString (JwsclAnsiUniCode.pas)
  • Mapping of Windows Constants to Delphi enumeration (TJwEnumMap)
  • All errors are reported by exceptions using a derived class from EJwsclSecurityException. (JwsclExceptions.pas)
  • Supports Bugreports with Eurekalog (JwsclEurekaLogUtils.pas)
  • JWSCL is based on OOP

To come

  • Active Directory Support
  • User Account Management

Current version is 0.9.3 Download.

]]> http://blog.delphi-jedi.net/2010/02/22/jwscl-features-overview/feed/ 3 Releases for Delphi 2010 http://blog.delphi-jedi.net/2009/09/23/releases-for-delphi-2010/ http://blog.delphi-jedi.net/2009/09/23/releases-for-delphi-2010/#comments Tue, 22 Sep 2009 22:07:07 +0000 Christian Wimmer http://blog.delphi-jedi.net/?p=450 JEDI Windows API (JWAL) and JEDI Windows Security Library (JWSCL) are now available in version 2.3 and 0.9.3. They support Delphi 2010.
You can download them or use the new Subversion branches.

If you find bugs, have questions, hints or want to participate: just mail us.

Downloads

Download from one of the Sourceforge mirrors at:

https://sourceforge.net/projects/jedi-apilib/files

(The download has Subversion folders .SVN which you can use to get updates through a Subversion Client. See below.)

AND do not forget to read:

How to Setup the JEDI Windows API Library (JWA).
and
How to Setup the JEDI Windows Security Code Library (JWSCL).

Subversion Access

You can use a Subversion client, like TortoiseSVN, to download the sources directly.
Advantage: You can easily get updated sources.

JWA

Checkout with TortoiseSVN https://jedi-apilib.svn.sourceforge.net/svnroot/jedi-apilib/jwapi/branches/2.3

JWSCL

Checkout with TortoiseSVN https://jedi-apilib.svn.sourceforge.net/svnroot/jedi-apilib/jwscl/branches/0.9.3

Click on the turtle to get the source if you have installed TortoiseSVN.

Remaining Issues

22. August 2009

There is an issue left with D2010:
The interface IXMLElement is no more available in file msxml.pas (MS XML Version 1). So the file JwaUrlMon.pas has been changed to use a Pointer instead of the IXMLElement interface. Unfortunately, the new IXmlDOMElement (MS XML Version 2) is not compatible with the old interface.
If you have an idea how to fix that, please mail to us.

]]> http://blog.delphi-jedi.net/2009/09/23/releases-for-delphi-2010/feed/ 1 TakeControl of Your Files http://blog.delphi-jedi.net/2009/03/10/takecontrol-of-your-files/ http://blog.delphi-jedi.net/2009/03/10/takecontrol-of-your-files/#comments Tue, 10 Mar 2009 18:15:50 +0000 Christian Wimmer http://blog.delphi-jedi.net/?p=296 Recently my Windows Vista partition ran out of disk space. Well, the partition has 30GiB but that is not enough even if you choose to install 3rd party software on a separate disk. The main reason why Windows Vista needs so much space is the WinSxS folder which contains a lot of DLL files and more (at least for me). I don’t want to go into detail here but this folder holds (nearly) duplicate files for compability and language reasons.

Astonishment

However, I was (a little) astounded when I found out that in this folder also Windows Media (.WMV) files reside which took about 600MiB alone on my PC (depends on your situation and software). I watched them and can tell you that I’ve never seen them before and I won’t watch them in future. These files usually can be found in C\Windows\Help\Windows\<languageID>.  I have them in two language versions because it happens that I have installed a German and English language Windows pack.  Windows fools you by linking these files to any of the WinSxS file “duplicates”. Depending on your language  you always watch them in your language.

Command and Conquer your System

Removing these files is very trick. The reason is that the WinSxS folder is heavily secured against messing around. Only the user “Trusted Installer” () can get full control and it is also the owner. Well, that is nice for beginners. But experts – like me – want full control of their files. So the easiest way to get full access is to become the owner of each folder we want to remove. Then we can give us full control by adding our user to the access control list (ACL). However in this way we need a lot of time to change all these folders. We could also change the top folder and let the security changes iterate through the childs (folders and files). But this approach takes a long time and is also a security risk because all folders and files are changed without exceptions. You could also write a batch or any other script file to do the job, but I am not experienced enough for this.
Another problem is that we maybe want to keep a backup that can be restored in the case of an emergency (“I want to see these movies!”).

So which language could we use to become owner of a file, change file security, copy a file and more? Well, if you don’t  think Delphi you can stop reading now ;-)

TakeControl

I have created this application which I call “TakeControl”. It is a simple application that helps you to find files and let you access them with full control.
Its main task is to move files which you think aren’t necessary to have on the partiton.  In my case there were a lot of media files which I didn’t want to have (also in Windows folder).

The application dialog looks like this

takecontrol

The numbers in the picture are explained here:

1. This edit box receives a semicolon separated list of file extentsions (with a dot in front of each). It usually looks like “.mpg;.wmv”. Imo you should not add “DLL” or “MUI” file extensions there.

2. & 3. These edit boxes receive the source (2.) and target (3.) folders. The source folder defines where to search for the files and the target folder defines where to copy/move them. The source folder structure is retained in the target folder. So if a file is stored in this source folder : “C:\Windows” (2.)” say “\XXXX\File.wmv” and your target folder looks like “E:\temp” (3.) the new file will be created here: “E:\Temp\XXXX\File.wmv”.

4. If this checkbox is checked all files are copied instead of moved. Furthermore the security of the files aren’t changed at all. So if a file isn’t accessible an error is shown in the log memo (8.).
This checkbox is only available if you run with administrator privileges; otherwise you aren’t able to move files.

5.  This checkbox lets you do a simple search. No file is changed or copied/moved. In this way you can find out how many files there are and if there is a file which isn’t accessible at all.

6. The run button starts the process (with a confirmation prompt). If the search is in progress, you can abort it here.

7. The status area shows some (rare) information.
a) A waiting gradient shows you that something is still going on.
b) A status label shows you the current file processed.
c) A progress bar shows you the current copy/move operation progress.
d) Number of errors and already processed files are shown on the right side of the dialog.

Mandatory Instruction

Well, before you start, you should always backup your system (this is mandatory). In the next step you can try to get rid of the media files if you want. But do it at your own risk.

Appendix

Yes, I know, there are many other possibilities that can be used to clean the Windows partition. Trust me, I tried them all! The last step would be to buy a new hard disk. :twisted:

Sourcecode

Source code is available in the example folder of our Subversion repository only.  See Subversion description here.
Direct Subversion (for Checkout) and browser link is here.

Download history

TakeControl Version 0.7 (zipped ~700Kib)

Be aware that you run this program at your own risk

FAQ

Q:  I can’t move files because the checkbox isn’t enabled.
A: You need to run the application as a member of the Administrators group.

Q: I can do the same thing using X.
A: If X doesn’t include JWSCL or JWA it is not a subject for this blog. You are welcome to post a comment though.

]]> http://blog.delphi-jedi.net/2009/03/10/takecontrol-of-your-files/feed/ 1 Pre-Release of JEDI API 2.2 & WSCL 0.9.2 http://blog.delphi-jedi.net/2008/08/30/pre-release-of-jedi-api-22-wscl-092-2/ http://blog.delphi-jedi.net/2008/08/30/pre-release-of-jedi-api-22-wscl-092-2/#comments Sat, 30 Aug 2008 19:23:31 +0000 Christian Wimmer http://blog.delphi-jedi.net/?p=254 JEDI API and JWSCL compile with Delphi2009 and also the examples work as far as I could test it.

I’ve created a Subversion branch for each project:

JEDI API Version 2.2 pre-release

https://jedi-apilib.svn.sourceforge.net/svnroot/jedi-apilib/jwapi/branches/2.2a

JEDI WSCL Version 0.9.2 pre-release

https://jedi-apilib.svn.sourceforge.net/svnroot/jedi-apilib/jwscl/branches/0.9.2a

Download a ZIP package with both projects from SourceForge. Always update this package with a SVN client to get best quality.

As you can see we abandoned the revision numbers and instead use simple version numbers (as people are more used to those).
These pre-releases won’t be available as packages from sourceforge.net!

Please!
We encourage you to use, test and check the released projects!

If you find errors, have problems or questions don’t hesitate to ask them in the mailinglist, newsgroup, JEDI IssueTracker or send it to mail[at)delphi-jedi.net .

Regards
Christian Wimmer

]]> http://blog.delphi-jedi.net/2008/08/30/pre-release-of-jedi-api-22-wscl-092-2/feed/ 10 Calculating Binary Hashes using TJwFileStreamEx http://blog.delphi-jedi.net/2008/06/17/239/ http://blog.delphi-jedi.net/2008/06/17/239/#comments Tue, 17 Jun 2008 08:50:37 +0000 NeutralGeneral http://blog.delphi-jedi.net/?p=239 Calculating Binary Hashes using TJwFileStreamEx

Why should I use TJwFileStreamEx instead of any other common stream class from the VCL?

Well this question is quite easily answered.

The first thing is that TJwFileStreamEx is based on Memory Mapped Files (MMF). MMF might be the fastest way to access files on your hard disk. Another good reason for using TJwFileStreamEx is its Memory property which is well known from the VCL TMemoryStream class. This property will reduce the effort remarkably.

Getting Started

First you have to include following units to your project:

uses JwsclTypes, JwsclStreams, JwsclCryptProvider;

The signature of our hashing-function looks like this:

function GetFileHash(Algorithm: TJwHashAlgorithm; const Filename: String) : String;

The first parameter is used to specify the Algorithm which is used to hash the file data. The second parameter defines the path to the file which hash you want to compute.

So what do we need to calculate the hash of a file? All we need is an instance of TJwFileStreamEx to open the file and an instance of TJwHash to calculate the hash:

function GetFileHash(Algorithm: TJwHashAlgorithm; const Filename: String) : String;
var
  Stream: TJwFileStreamEx;
  Hash: TJwHash;
begin
  Stream := TJwFileStreamEx.Create(Filename,fmOpenRead);
  try
    Hash := TJwHash.Create(Algorithm);
    // Calculate and return the Hash as a Hex-String
  finally
    Hash.Free;
    Stream.Free;  
  end;
end;

This is the basic framework of our function. To calculate the hash of the file we need 2 methods:

TJwHash.HashData(Data: Pointer; Size: Cardinal);
TJwHash.RetrieveHash(out Len: Cardinal): Pointer;

HashData tells our instance of TJwHash which data is to be hashed and which size this data has. RetrieveHash calculates the Hash and retrieves a pointer to the hash data.

Finally we have to free the Buffer using the class method

TJwHash.FreeBuffer(Buffer: Pointer);

Now our function looks like this:

function GetFileHash(Algorithm: TJwHashAlgorithm; const Filename: String) : String;
var
  Stream: TJwFileStreamEx;
  Hash: TJwHash;
  HashSize: Cardinal;
  HashData: Pointer;
begin
  Stream := TJwFileStreamEx.Create(Filename,fmOpenRead);
  Hash := TJwHash.Create(Algorithm);
  try
    Hash.HashData(Stream.Memory,Stream.Size);
    HashData := Hash.RetrieveHash(HashSize);
    TJwHash.FreeBuffer(HashData);
  finally
    Hash.Free;
    Stream.Free;
  end;
end;

At last we need to convert the binary hash into a hex-string:

for i:= 1 to HashSize do
begin
  Result := Result + IntToHex(PByte(HashData)^,2);
  inc(PByte(HashData));
end;
dec(PByte(HashData),HashSize); //neccessary to free HashData

Now we’re done and finally our function looks like this:

function GetFileHash(Algorithm: TJwHashAlgorithm; const Filename: String) : String;
var
  Stream: TJwFileStreamEx;
  Hash: TJwHash;
  HashSize: Cardinal;
  HashData: Pointer;
  i: Integer;
begin
  Stream := TJwFileStreamEx.Create(Filename,fmOpenRead);
  Hash := TJwHash.Create(Algorithm);
  try
    Hash.HashData(Stream.Memory,Stream.Size);
    HashData := Hash.RetrieveHash(HashSize);

    for i:= 1 to HashSize do
    begin
      Result := Result + IntToHex(PByte(HashData)^,2);
      inc(PByte(HashData));
    end;
    dec(PByte(HashData),HashSize);

    TJwHash.FreeBuffer(HashData);
  finally
    Hash.Free;
    Stream.Free;
  end;
end;

How do I use this function?

// first param can be one of these values:
// haMD2, haMD4, haMD5, haSHA
Label1.Caption := GetFileHash(haSHA,‘C:\Progam Files\Program\AFile.ext’);

OK, but what is the advantage of TJwFileStreamEx over other Streams?

Well, you don’t have to load the file into a TMemoryStream and thus the file will not be loaded completely into memory. Furthermore this solution is much faster than a solution using TMemoryStream and similar…

Download

Download the source and binaries of this example (260kiB). This includes the new and necessary JWSCL source files. However you need to download the whole package separately.

]]> http://blog.delphi-jedi.net/2008/06/17/239/feed/ 6 RunAsSYS 1.0 preview [update#1] http://blog.delphi-jedi.net/2008/05/08/runassys-10-preview/ http://blog.delphi-jedi.net/2008/05/08/runassys-10-preview/#comments Thu, 08 May 2008 19:10:53 +0000 Christian Wimmer http://blog.delphi-jedi.net/?p=141 This is the preview Version of RunAsSys for Windows XP and Vista made with the help of JWSCL.
RunAsSys runs applications as SYSTEM user in the current user’s session. If you start it without any parameters it creates a command prompt with SYSTEM privileges by default. Otherwise you can add an application with parameters to start this process as SYSTEM user. Use quotation marks if necessary for your path.
On Windows Vista and UAC it should prompt you for elevation. On XP without Admin privileges it should prompt you for Admin credentials.

Warning: On Windows XP (and older) the application shows the credential prompt dialog which allows you to run as the same user. If you just click OK button, the application will maybe response one more time but finally stop working. This is due to a bug in ShellExecuteEx with “runas” verb.

UPDATE

Version 1.1

I publish Version 1.1 which fixes several errors and also makes it available to Windows 64bit systems.
The zip archive contains a 64bit version registry key file that is compatible with WOW64.
RunAsSys contains EurekaLog, which logs internal things. If you get an error, you can send the error report directly to us. However it is not the default behaviour. We use your error report only for improving our software. It will be used internally only and will be finally deleted. No screenshot is taken.

Download RunAsSys 1.1

Version 1.0

Additional Info:
The reg file creates a reg key that is used to enable logging and set the log output folder (default where exe resides)
It is located in HKEY_LOCAL_MACHINE\SOFTWARE\JEDI\WSCL\RunAsSys\1.0

Download RunAsSYS 1.0

]]> http://blog.delphi-jedi.net/2008/05/08/runassys-10-preview/feed/ 21 The Delphi JEDI Project needs your help http://blog.delphi-jedi.net/2008/04/20/the-delphi-jedi-project-needs-your-help/ http://blog.delphi-jedi.net/2008/04/20/the-delphi-jedi-project-needs-your-help/#comments Sun, 20 Apr 2008 20:16:40 +0000 Remko http://blog.delphi-jedi.net/2008/04/20/the-delphi-jedi-project-needs-your-help-2/ The JEDI API Library project (JWA) has been successfully revived from a sleep status to an active project with lots of ambitions. Some recent achievements are the new include model of JWA, the release of JWSCL (the Security Library) and of course the “birth” of this blog.

We made a roadmap for JWA and JWSCL which includes “unicodifying” (Nick Hodges gave birth to a new word, meaning making the code ready for the next Delphi) and converting new Vista/Server 2008 API’s.

To help us fullfill these ambitions and continue contributing to the Delphi Community, we are looking for experienced Delphi developers to help us with the following tasks:

  • Maintaining and extending the Jedi API Library (convert new header files, fix errors in existing code).
  • Maintaining and extending the Jedi Windows Security Code Library (use and test the library, contribute new code, maintain documentation, Active Directory).
  • Create examples and write blog posts about using JWA and/or JWSCL.

See also the Roadmap for more details.

Of course you will get something back as well: the JEDI projects are very well known and respected in the Delphi Community, so active participation will earn you the respect of the community and is likely to offer additional benefits to your professional career!

Joining the projects means that you will be part of a team where the members actively support and help each other. You can learn a lot from the team’s knowledge and expertise and we look forward to learning from your knowledge.

If you think you can help us with either JWA, JWSCL or both projects please contact us:
mail

]]> http://blog.delphi-jedi.net/2008/04/20/the-delphi-jedi-project-needs-your-help/feed/ 1 Download RunEl http://blog.delphi-jedi.net/2008/03/13/download-runel/ http://blog.delphi-jedi.net/2008/03/13/download-runel/#comments Thu, 13 Mar 2008 12:40:27 +0000 Christian Wimmer http://blog.delphi-jedi.net/2008/03/13/download-runel/ RunEl download section

Find a description here.

Versions and Changelog

Please send bugs to mail@delphi-jedi.net , the mailinglist or the forum.

]]> http://blog.delphi-jedi.net/2008/03/13/download-runel/feed/ 1 JWSCL Release Revision 316 http://blog.delphi-jedi.net/2008/03/03/jwscl-release-revision-316/ http://blog.delphi-jedi.net/2008/03/03/jwscl-release-revision-316/#comments Mon, 03 Mar 2008 09:55:23 +0000 Christian Wimmer http://blog.delphi-jedi.net/2008/03/03/jwscl-release-revision-316/ The JEDI Windows Security Code Library Release of Revision 316 is now available to download on Sourceforge.

Direct link ~8.5 MiB

Also read this and find out how to setup the library!

The JWSCL Download also contains the JWAPI Revision 315.

Changes:

  • many bugfixes
  • added AuthZ API
  • added Terminal Service API
  • added more examples
  • added extended process creation support (JwsclProcess.pas)
]]> http://blog.delphi-jedi.net/2008/03/03/jwscl-release-revision-316/feed/ 2