Re: [RFC] merging NTLM and Negotiate scheme components

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Tue, 20 Dec 2011 01:51:33 +0100

lör 2011-12-17 klockan 16:09 +1300 skrev Amos Jeffries:

> It seems we should be relaying Kerberos but not advertising (lack of
> specific module). Should it be advertised as a separate mechanism to
> Negotiate?

Yes it's a separate scheme named Kerberos. But other than that it can
share all of negotiate. The same helper protocol & states. And quite
likely even same helper in several cases even if the blobs differ.
(helper dependent if it accepts both SPNEGO wrapped GSSAPI and bare
GSSAPI)

Regards
Henrik
Received on Tue Dec 20 2011 - 00:51:58 MST

This archive was generated by hypermail 2.2.0 : Wed Dec 21 2011 - 12:00:12 MST