MS's implementation of SPNEGO ...
rsharpe at ns.aus.com
Wed Oct 9 04:34:00 GMT 2002
On Wed, 9 Oct 2002, Luke Howard wrote:
> >The mechListMIC is an optional field. In the case that the chosen
> >mechanism supports integrity, the initiator may optionally include a
> >mechListMIC which is the result of a GetMIC of the MechTypes in the
> >initial NegTokenInit and return GSS_S_COMPLETE.
> I haven't seen Microsoft's implementation include this field,
> though, except on the NegTokenTarg in which case it includes a
> copy of the responseToken.
Well, I have seen it on both the negTokenInit and negTokenTarg, and they
both seem wrong. In neither case are they a MIC.
Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org,
sharpe at ethereal.com, http://www.richardsharpe.com
More information about the samba-technical