3.1.4.2 ElfrOpenBELA (Opnum 16)

  • Article

The ElfrOpenBELA (Opnum 16) method instructs the server to return a handle to a backup event log. The caller MUST have permission to read the file containing the backup event log for this to succeed.

Note The server has an Access Control List (ACL) that is used to control access to the log. The protocol has no methods for reading or setting that ACL.

 NTSTATUS ElfrOpenBELA(
   [in] EVENTLOG_HANDLE_A UNCServerName,
   [in] PRPC_STRING BackupFileName,
   [in] unsigned long MajorVersion,
   [in] unsigned long MinorVersion,
   [out] IELF_HANDLE* LogHandle
 );

UNCServerName: A server interface handle. A pointer to an ANSI string (see [MSDN-ANSI]) specifying the server, as specified in section 2.2.7. The client MUST map this string to an RPC binding handle, and the server MUST ignore this argument, as specified in [C706] sections 4.3.5 and 5.1.5.2.

BackupFileName: Provides an ANSI string (as specified in section 2.2.12) that points to an NT Object Path of the file where the backup event log is located, as specified in section 2.2.4.1.

MajorVersion: Major version of the client. This value MUST be set to 1.

MinorVersion: Minor version of the client. This value MUST be set to 1.

LogHandle: Pointer to an event log handle. This parameter is a server context handle, as specified in section 2.2.6. This handle MUST be closed by using the ElfrCloseEL (section 3.1.4.21) method once the handle is no longer needed. In the case when the client cannot call the ElfrCloseEL function, such as the abnormal termination of the client, this context handle will be revoked by the server so that there will not be any resource leaks.

Return Values: The method returns STATUS_SUCCESS (0x00000000) on success; otherwise, it MUST return an implementation-based, nonzero NTSTATUS value specified in [MS-ERREF].

The server MUST return a value indicating success or failure for this operation<17>.

This is identical to the ElfrOpenBELW (section 3.1.4.1) method except that the BackupFileName and UNCServerName are ANSI strings in this case.