摘要：
用C#连接eDirectory ,提示：“这个请求需要一个安全的连接。”解决办法，eDirectory禁用TLS（这方法比较猥琐）ssh连接到eDirectory服务器上，执行：ldapconfig set "Require TLS for Simple Binds with Password=no" -a admin.xctc -w xctc-a 指定用户名FDN-w 指定密码 阅读全文
摘要：
The ObDereferenceObjectDeferDelete routine decrements the reference count for the given object, checks for object retention, and avoids deadlocks.ObDereferenceObjectDeferDelete例程减少指定对象的引用计数，检查对象保留(不明白,检查对象需不需要删除??)，并且避免死锁。语法：VOID ObDereferenceObjectDeferDelete( _In_ PVOID Object);参数：Object [in] A .. 阅读全文
摘要：
ObDereferenceObject routineThe ObDereferenceObject routine decrements the given object's reference count and performs retention checks.ObDereferenceObject 例程减少指定对象的引用计数，并执行retention check.语法：VOID ObDereferenceObject( _In_ PVOID Object);参数： Object [in] Pointer to the object's body. 指向对象实体的指针。 阅读全文
摘要：
ObCloseHandle routineThe ObCloseHandle routine closes an object handle.ObCloseHandle例程用来关闭对象句柄。语法：NTSTATUS ObCloseHandle( _In_ HANDLE Handle, _In_ KPROCESSOR_MODE PreviousMode);参数： Handle [in] A handle to a system-supplied object of any type. 由系统提供的任意类型的对象句柄。 PreviousMode [in... 阅读全文
摘要：
InitializeObjectAttributes 宏用googlet翻译的，欢迎指正。The InitializeObjectAttributes macro initializes the opaque OBJECT_ATTRIBUTES structure, which specifies the properties of an object handle to routines that open handles. InitializeObjectAttributes宏，初始化一个OBJECT_ATTRIBUTES结构体，它指定对象句柄的属性，供打开句柄的例程使用。VOID Ini 阅读全文
摘要：
非专业人士学习笔记 ，欢迎指正！Driver Support Routines(驱动程序开发支持例程)Driver support routines are routines that the Windows operating system provides for kernel-mode drivers to use. Drivers do not use Microsoft Win32 routines; instead, they use the driver support routines that this section describes.The driver support 阅读全文
摘要：
The AdapterControl routine starts a DMA data-transfer operation.AdapterControl例程启动一个DMA数据传输操作。语法：DRIVER_CONTROL AdapterControl;IO_ALLOCATION_ACTION AdapterControl( _In_ struct _DEVICE_OBJECT *DeviceObject, _Inout_ struct _IRP *Irp, _In_ PVOID MapRegisterBase, _In_ PVOID Context){ ..... 阅读全文
摘要：
标准驱动程序This section describes the required and optional routines that you must implement in your driver to respond to calls from Windows or other drivers. 本节介绍当驱动被Windows或其它驱动程序调用时，为了做出适当的回应，你的驱动必须实现的必需和可选的例程。When these routines are called, your code must respond to the call and return the appropriat 阅读全文
摘要：
DriverEntry is the first routine called after a driver is loaded, and is responsible for initializing the driver.DriverEntry是驱动加载后第一个执行的例程，它负责初始化驱动程序。语法：DRIVER_INITIALIZE DriverEntry;NTSTATUS DriverEntry( _In_ struct _DRIVER_OBJECT *DriverObject, _In_ PUNICODE_STRING RegistryPath){ ... }参数： Driv... 阅读全文
摘要：
文件系统过滤驱动的DriverEntry需要做的事情：第一步：创建一个控制设备。第二步：设置普通分发函数；第三步： 设置FastIo分发函数；第四步：编写文件系统变动回调函数，并在其中绑定刚创建的文件系统控制设备；第五步：使用IoRegisterFsRegistrationChange调用注册这个回调函数。 阅读全文