[Samba] SPNEGO Response format

[Jeremy Allison]

On Tue, Sep 02, 2008 at 03:31:44AM -0700, Sudheer Kurichiyath wrote:
> Hi,
> 
> There is a problem with the negResult field of NegoTokenArg structure. As per SPNEGO RFC rfc247, NegTokenTarg can have an optional parameter with the name negResult.
> 
> Samba does not look  to support this optional parameter. The function spnego_parse_auth() is failing if a client sends negResult parameter in its SPNEGO response. (My client sends a "accept-incomplete" in the negResult field). A windows-based CIFS server does not have any issue with the response token containing the negResult field.
> 
> Is there a fix available in Samba for this problem Or am I the first person who is experiencing this issue? The workaround I have is to avoid sending negResult  to  Samba.

What version of Samba are you testing against please ?

Jeremy.