Subject: GSS-SPNEGO

From: Luke Howard <[email-masked]>
Date: Fri, 29 Nov 2002 14:52:39 +1100

According to draft-ietf-cat-sasl-gssapi-05.txt, all GSSAPI
mechanisms share the same SASL profile.

However, it appears that Microsoft's implementation of 
GSS-SPNEGO does not make the final exchange of the security
layer and optional authorization identity.

Does anyone have any comments on this? We modified Cyrus 
SASL to "conform" to Microsoft's implementation for GSS-SPNEGO
and NTLM, but our Sun ONE Directory Server GSS-API plugin still
behaves according to the draft specification.

-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com