service

const (
	API_VERSION = 1

	SUCCESS              = 0
	COULD_NOT_WRITE_FILE = 1
	COULD_NOT_ENROLL     = 2

	UNKNOWN_ERROR          = 100
	ERROR                  = 500
	ERROR_DISCONNECTING_ID = 50
	IDENTITY_NOT_FOUND     = 1000

	MFA_FAILED_TO_GENERATE_CODES = 200
	MFA_FAILED_TO_RETURN_CODES   = 201
	MFA_FINGERPRINT_NOT_FOUND    = 202

	DEFAULT_REFRESH_INTERVAL = 10

	InformationEvent = 0 //1
	ContinueEvent    = 0 //2
	PauseEvent       = 0 //3
	InstallEvent     = 0 //4
	InterrogateEvent = 0 //5
	StopEvent        = 0 //6
	ShutdownEvent    = 0 //7
	ErrorEvent       = 0 //1000

	// power events microsoft docs https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-powermanagementevent?redirectedfrom=MSDN
	PBT_APMSUSPEND           = 4  // Entering Suspend
	PBT_APMRESUMESUSPEND     = 7  // Resume from Suspend
	PBT_APMPOWERSTATUSCHANGE = 10 // Power Status Change
	PBT_APMRESUMEAUTOMATIC   = 18 // Resume Automatic

	// windows session changes microsoft docs https://docs.microsoft.com/en-us/windows/win32/termserv/wm-wtssession-change
	WTS_SESSION_LOCK   = 7
	WTS_SESSION_UNLOCK = 8

	// This is the name you will use for the NET START command
	SvcStartName = "ziti"

	// This is the name that will appear in the Services control panel
	SvcName = "Ziti Tunneler"

	// This is the longer description that will be shown in Services
	SvcNameLong = "Provides a client for accessing Ziti networks"

	// see: https://docs.microsoft.com/en-us/windows/win32/secauthz/sid-strings
	// breaks down to
	//		"allow" 	  	 - A   (A;;
	// 	 	"full access" 	 - FA  (A;;FA
	//		"well-known sid" - IU  (A;;FA;;;IU)
	InteractivelyLoggedInUser = "(A;;GRGW;;;IU)" //generic read/write. We will want to tune this to a specific group but that is not working with Windows 10 home at the moment
	System                    = "(A;;FA;;;SY)"
	BuiltinAdmins             = "(A;;FA;;;BA)"
	LocalService              = "(A;;FA;;;LS)"

	NF_GROUP_NAME = "NetFoundry Tunneler Users"
	TunName       = "ZitiTUN"

	STATUS_ENROLLED = "enrolled"

	ConfigFileName = "config.json"
)