3.1.1.3.4.5.2 GSS-SPNEGO

  • Article

The presence of the "GSS-SPNEGO" string value in the supportedSASLMechanisms attribute indicates that the DC accepts the GSS-SPNEGO security mechanism for LDAP bind requests. This mechanism is documented in [RFC4178]. Active Directory supports Kerberos (see [MS-KILE]) and NTLM (see [MS-NLMP]) when using GSS-SPNEGO.