ntlm_auth --helper-protocol=gss-spnego only looks at the first offered spnego mech and bails out if it doesn't support that one. Some versions of Internet Explorer send the NEGOEX oid (1.3.6.1.4.1.311.2.2.30) as first mech, followed by the NTLMSSP oid (1.3.6.1.4.1.311.2.2.10).
Created attachment 6125 [details] Backport Patch for v3-5-test This is a backport of the master/v3-6-test patches
Compilation fails with utils/ntlm_auth.o: In function `manage_gss_spnego_request': /home/kai/samba/work/old/v3-5-test/source3/utils/ntlm_auth.c:1522: undefined reference to `netsamlogon_cache_store'
Created attachment 6130 [details] Backport Patch for v3-5-test Fixed patchset.
Comment on attachment 6130 [details] Backport Patch for v3-5-test If I configure again, these work for me. Thanks.
My bad, that patchset works fine.
Karolin, please pick for the next release
Pushed to v3-5-test. Closing out bug report. Thanks!