MS's implementation of SPNEGO ...

[Richard Sharpe]

On Wed, 9 Oct 2002, Luke Howard wrote:

> 
> >The mechListMIC is an optional field. In the case that the chosen 
> >mechanism supports integrity, the initiator may optionally include a 
> >mechListMIC which is the result of a GetMIC of the MechTypes in the 
> >initial NegTokenInit and return GSS_S_COMPLETE. 
> 
> I haven't seen Microsoft's implementation include this field,
> though, except on the NegTokenTarg in which case it includes a 
> copy of the responseToken.

Well, I have seen it on both the negTokenInit and negTokenTarg, and they 
both seem wrong. In neither case are they a MIC.

Regards
-----
Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org, 
sharpe at ethereal.com, http://www.richardsharpe.com