[Samba] SPNEGO Response format
jra at samba.org
Tue Sep 2 23:03:35 GMT 2008
On Tue, Sep 02, 2008 at 03:31:44AM -0700, Sudheer Kurichiyath wrote:
> There is a problem with the negResult field of NegoTokenArg structure. As per SPNEGO RFC rfc247, NegTokenTarg can have an optional parameter with the name negResult.
> Samba does not look to support this optional parameter. The function spnego_parse_auth() is failing if a client sends negResult parameter in its SPNEGO response. (My client sends a "accept-incomplete" in the negResult field). A windows-based CIFS server does not have any issue with the response token containing the negResult field.
> Is there a fix available in Samba for this problem Or am I the first person who is experiencing this issue? The workaround I have is to avoid sending negResult to Samba.
What version of Samba are you testing against please ?
More information about the samba