[cifs-protocol] RE: (More): Status: SRX080803600053: [MS-NLMP] raw NTLMSSP tokens in GSS-API/SPNEGO

[Bill Wesse]

Good morning Mr. Simpkins. Out document developers have provided the below change information for [MS-SMB], adding a cross reference to [MS-SPNG] in section 3.2.4.2.3. Please note that the other change request for [MS-SPNG] (Windows Behavior <9>, replace reference RFC2743 with RFC4178) is still pending.

Thanks for your patience!

==============================================================================
[MS-SMB]: Server Message Block (SMB) Protocol Specification

3.2.4.2.3 User Authentication

Change:
   o Extended Security
   ...
     o Choose to ignore the GSSNegotiateToken received from the server, and
       give an empty input token to the configured GSS authentication protocol
       to obtain a GSS output token for the authentication protocol exchange.

       In either case, it initializes the GSS authentication protocol with the
       MutualAuth and Delegate options, which are specified in [MS-KILE]
       section 3.2.1.1<173>.

To:
   o Extended Security
   ...
     o Choose to ignore the GSSNegotiateToken received from the server, and
       give an empty input token to the configured GSS authentication protocol
       to obtain a GSS output token for the authentication protocol exchange.

       In either case, it initializes the GSS authentication protocol with the
       MutualAuth and Delegate options, which are specified in [MS-KILE]
       section 3.2.1.1<173>. See also [MS-SPNG] section 3.2.5.2.


Regards,
Bill Wesse
MCSE, MCTS / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606

-----Original Message-----
From: Bill Wesse
Sent: Thursday, October 09, 2008 1:55 PM
To: 'Adam Simpkins'
Cc: 'cifs-protocol at samba.org'
Subject: RE: (More): Status: SRX080803600053: [MS-NLMP] raw NTLMSSP tokens in GSS-API/SPNEGO

You are, as always, completely welcome!

Regards,
Bill Wesse
MCSE / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606
We're Hiring http://members.microsoft.com/careers/search/details.aspx?JobID=A976CE32-B0B9-41E3-AF57-05A82B88383E&start=1&interval=10&SortCol=DatePosted

-----Original Message-----
From: Adam Simpkins [mailto:simpkins at cisco.com]
Sent: Wednesday, October 08, 2008 12:14 PM
To: Bill Wesse
Cc: 'cifs-protocol at samba.org'
Subject: Re: (More): Status: SRX080803600053: [MS-NLMP] raw NTLMSSP tokens in GSS-API/SPNEGO

On Wed, Oct 08, 2008 at 07:55:52AM -0700, Bill Wesse wrote:
> My pleasure!
>
> Here is copy of tentative text changes to the [MS-SPNG] document (these are waiting for internal approval - I will advise you as soon as the text is finalized):

Thanks.  The new text looks good.

--
Adam Simpkins
simpkins at cisco.com