[Bug 1643708] Re: Add SPNEGO special case for NTLMSSP+MechListMIC

[Steve Langasek]

This patch is included in krb5 1.15~beta1-1, which is in zesty-proposed
currently and should reach zesty soon.

** Changed in: krb5 (Ubuntu)
       Status: New => Fix Released

** Also affects: krb5 (Ubuntu Yakkety)
   Importance: Undecided
       Status: New

** Also affects: krb5 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: krb5 (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Changed in: krb5 (Ubuntu Trusty)
       Status: New => Incomplete

** Changed in: krb5 (Ubuntu Xenial)
       Status: New => Incomplete

** Changed in: krb5 (Ubuntu Yakkety)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/1643708

Title:
  Add SPNEGO special case for NTLMSSP+MechListMIC

Status in krb5 package in Ubuntu:
  Fix Released
Status in krb5 source package in Trusty:
  Incomplete
Status in krb5 source package in Xenial:
  Incomplete
Status in krb5 source package in Yakkety:
  Incomplete

Bug description:
  MS-SPNG section 3.3.5.1 documents an odd behavior the SPNEGO layer
  needs to implement specifically for the NTLMSSP mechanism.  This is
  required for compatibility with Windows services.

  Upstream commit:
  https://github.com/krb5/krb5/commit/cb96ca52a3354e5a0ea52e12495ff375de54f9b7

  We've run into this issue with Linux to Windows negotiation with
  encrypted http using GSSAPI.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1643708/+subscriptions