MS-SPNG section 3.3.5.1 documents an odd behavior the SPNEGO layer needs to implement specifically for the NTLMSSP mechanism. This is required for compatibility with Windows services.
Upstream commit: https://github.com/krb5/krb5/commit/cb96ca52a3354e5a0ea52e12495ff375de54f9b7
We've run into this issue with Linux to Windows negotiation with encrypted http using GSSAPI.
MS-SPNG section 3.3.5.1 documents an odd behavior the SPNEGO layer
needs to implement specifically for the NTLMSSP mechanism. This is
required for compatibility with Windows services.
Upstream commit: https:/ /github. com/krb5/ krb5/commit/ cb96ca52a3354e5 a0ea52e12495ff3 75de54f9b7
We've run into this issue with Linux to Windows negotiation with encrypted http using GSSAPI.