MS's implementation of SPNEGO ...

Richard Sharpe rsharpe at
Wed Oct 9 04:34:00 GMT 2002

On Wed, 9 Oct 2002, Luke Howard wrote:

> >The mechListMIC is an optional field. In the case that the chosen 
> >mechanism supports integrity, the initiator may optionally include a 
> >mechListMIC which is the result of a GetMIC of the MechTypes in the 
> >initial NegTokenInit and return GSS_S_COMPLETE. 
> I haven't seen Microsoft's implementation include this field,
> though, except on the NegTokenTarg in which case it includes a 
> copy of the responseToken.

Well, I have seen it on both the negTokenInit and negTokenTarg, and they 
both seem wrong. In neither case are they a MIC.

Richard Sharpe, rsharpe at, rsharpe at, 
sharpe at,

More information about the samba-technical mailing list