spnego.h File Reference

SPNEGO (RFC 4178) GSS-API wrapping of the NTLMSSP tokens for the SMB2 client (DETWS_ENABLE_SMB). More...

#include "ServerConfig.h"

Go to the source code of this file.

Detailed Description

SPNEGO (RFC 4178) GSS-API wrapping of the NTLMSSP tokens for the SMB2 client (DETWS_ENABLE_SMB).

SMB2 SESSION_SETUP carries the NTLM handshake tokens inside a SPNEGO negotiation token. This is the minimal ASN.1 DER layer that a client needs:

• the first client token is a GSS-API InitialContextToken: [APPLICATION 0] { SPNEGO-OID, NegTokenInit [0] { mechTypes [0] { NTLM-OID }, mechToken [2] OCTET STRING(NTLMSSP NEGOTIATE) } };
• the server replies with a bare NegTokenResp [1] { ..., responseToken [2] OCTET STRING(NTLMSSP CHALLENGE) }, from which the client extracts the CHALLENGE;
• the client's second token is a NegTokenResp [1] { responseToken [2] OCTET STRING(NTLMSSP AUTHENTICATE) }.

Pure DER, zero heap, definite-length only. The NTLM tokens come from ntlmssp.h.

Author

Douglas Quigg (dstroy0)

Date

2026

Definition in file spnego.h.