1233294Sstas-- $Id$ 2178825Sdfr 3178825SdfrSPNEGO DEFINITIONS ::= 4178825SdfrBEGIN 5178825Sdfr 6178825SdfrMechType::= OBJECT IDENTIFIER 7178825Sdfr 8178825SdfrMechTypeList ::= SEQUENCE OF MechType 9178825Sdfr 10178825SdfrContextFlags ::= BIT STRING { 11178825Sdfr delegFlag (0), 12178825Sdfr mutualFlag (1), 13178825Sdfr replayFlag (2), 14178825Sdfr sequenceFlag (3), 15178825Sdfr anonFlag (4), 16178825Sdfr confFlag (5), 17178825Sdfr integFlag (6) 18178825Sdfr} 19178825Sdfr 20178825SdfrNegHints ::= SEQUENCE { 21178825Sdfr hintName [0] GeneralString OPTIONAL, 22178825Sdfr hintAddress [1] OCTET STRING OPTIONAL 23178825Sdfr} 24178825Sdfr 25178825SdfrNegTokenInitWin ::= SEQUENCE { 26178825Sdfr mechTypes [0] MechTypeList, 27178825Sdfr reqFlags [1] ContextFlags OPTIONAL, 28178825Sdfr mechToken [2] OCTET STRING OPTIONAL, 29178825Sdfr negHints [3] NegHints OPTIONAL 30178825Sdfr} 31178825Sdfr 32178825SdfrNegTokenInit ::= SEQUENCE { 33178825Sdfr mechTypes [0] MechTypeList, 34178825Sdfr reqFlags [1] ContextFlags OPTIONAL, 35178825Sdfr mechToken [2] OCTET STRING OPTIONAL, 36178825Sdfr mechListMIC [3] OCTET STRING OPTIONAL, 37178825Sdfr ... 38178825Sdfr} 39178825Sdfr 40178825Sdfr-- NB: negResult is not OPTIONAL in the new SPNEGO spec but 41178825Sdfr-- Windows clients do not always send it 42178825SdfrNegTokenResp ::= SEQUENCE { 43178825Sdfr negResult [0] ENUMERATED { 44178825Sdfr accept_completed (0), 45178825Sdfr accept_incomplete (1), 46178825Sdfr reject (2), 47178825Sdfr request-mic (3) } OPTIONAL, 48178825Sdfr supportedMech [1] MechType OPTIONAL, 49178825Sdfr responseToken [2] OCTET STRING OPTIONAL, 50178825Sdfr mechListMIC [3] OCTET STRING OPTIONAL, 51178825Sdfr ... 52178825Sdfr} 53178825Sdfr 54178825SdfrNegotiationToken ::= CHOICE { 55178825Sdfr negTokenInit[0] NegTokenInit, 56178825Sdfr negTokenResp[1] NegTokenResp 57178825Sdfr} 58178825Sdfr 59178825SdfrNegotiationTokenWin ::= CHOICE { 60178825Sdfr negTokenInit[0] NegTokenInitWin 61178825Sdfr} 62178825Sdfr 63178825SdfrEND 64