| NtlmFlags.NTLMSSP_NEGOTIATE_SIGN;
        Type2Message type2Message = new Type2Message(type2Flags, serverChallenge, domain);
        byte[] type2Token = type2Message.toByteArray();

        // State 2: Process Type 2 and generate Type 3
        byte[] type3Token = context.initSecContext(type2Token, 0, type2Token.length);

            final byte[] src = Base64.decode(msg.substring(5));
            if (src[8] == 1) {
                final Type1Message type1 = new Type1Message(src);
                final Type2Message type2 = new Type2Message(tc, type1, challenge, null);
                msg = new String(Base64.encode(type2.toByteArray()), "US-ASCII");
                resp.setHeader("WWW-Authenticate", "NTLM " + msg);
            } else if (src[8] == 3) {

            final byte[] src = Base64.decode(msg.substring(5));
            if (src[8] == 1) {
                final Type1Message type1 = new Type1Message(src);
                final Type2Message type2 = new Type2Message(type1, challenge, null);
                msg = Base64.encode(type2.toByteArray());
                resp.setHeader("WWW-Authenticate", "NTLM " + msg);
            } else if (src[8] == 3) {

                }
            }

            state++;
            break;
        case 2:
            try {
                final Type2Message msg2 = new Type2Message(token);

                if (LogStream.level >= 4) {
                    log.println(msg2);
                    if (LogStream.level >= 6) {