protected static final String SPNEGO_ALLOW_BASIC = "spnego.allow.basic";
    protected static final String SPNEGO_PREAUTH_PASSWORD = "spnego.preauth.password";
    protected static final String SPNEGO_PREAUTH_USERNAME = "spnego.preauth.username";
    protected static final String SPNEGO_LOGIN_SERVER_MODULE = "spnego.login.server.module";
    protected static final String SPNEGO_LOGIN_CLIENT_MODULE = "spnego.login.client.module";

                throw new IOException("Malformed SPNEGO token " + constructed);

            ASN1Sequence vec = (ASN1Sequence) constructed.getBaseObject();


                ASN1ObjectIdentifier spnego = (ASN1ObjectIdentifier) vec.getObjectAt(0);
                if ( !SPNEGO_OID.equals(spnego) ) {
                    throw new IOException("Malformed SPNEGO token, OID " + spnego);
                }

     * 
     * @return whether to disable sending/verifying SPNEGO mechanismListMIC
     */
    boolean isDisableSpnegoIntegrity ();


    /**
     * 
     * Property <tt>jcifs.smb.client.enforceSpnegoIntegrity</tt> (boolean, false)
     * 
     * @return whether to enforce verifying SPNEGO mechanismListMIC
     */
    boolean isEnforceSpnegoIntegrity ();


    /**

    }

    protected static boolean isMaskedValue(final String key) {
        return "http.proxy.password".equals(key) //
                || "ldap.admin.security.credentials".equals(key) //
                || "spnego.preauth.password".equals(key) //
                || "app.cipher.key".equals(key) //
                || "oic.client.id".equals(key) //
                || "oic.client.secret".equals(key);
    }

import jcifs.pac.Pac;
import jcifs.pac.PacLogonInfo;
import jcifs.pac.kerberos.KerberosEncData;
import jcifs.pac.kerberos.KerberosPacAuthData;
import jcifs.pac.kerberos.KerberosToken;
import jcifs.spnego.NegTokenInit;
import org.bouncycastle.util.encoders.Hex;
import org.junit.Assert;
import org.junit.Test;

import jcifs.pac.PACDecodingException;
import jcifs.pac.PacMac;
import jcifs.util.Hexdump;


/**

            .register(AuthSchemes.DIGEST, new DigestSchemeFactory())
            .register(AuthSchemes.NTLM, new NTLMSchemeFactory())
            .register(AuthSchemes.SPNEGO, new SPNegoSchemeFactory())
            .register(AuthSchemes.KERBEROS, new KerberosSchemeFactory())
            .register(HttpHeaderAuthScheme.AUTH_SCHEME_NAME, new HttpHeaderSchemeFactory())
            .build()
        );

                    if ( e.getNtStatus() == NtStatus.NT_STATUS_INVALID_PARAMETER ) {
                        // a relatively large range of samba versions has a bug causing
                        // an invalid parameter error when a SPNEGO MIC is in place and auth fails
                        throw new SmbAuthException("Login failed", e);
                    }

			<groupId>org.codelibs</groupId>
			<artifactId>curl4j</artifactId>
			<version>${curl4j.version}</version>
		</dependency>
		<dependency>
			<groupId>org.codelibs</groupId>
			<artifactId>spnego</artifactId>
			<version>${spnego.version}</version>
		</dependency>
		<dependency>
			<groupId>commons-codec</groupId>
			<artifactId>commons-codec</artifactId>
			<version>${commons.codec.version}</version>

        case NtStatus.NT_STATUS_TRUSTED_DOMAIN_FAILURE:
            throw new SmbAuthException(resp.getErrorCode());
        case NtStatus.NT_STATUS_MORE_PROCESSING_REQUIRED:
            break; /* normal for SPNEGO */
        case 0x10B: // NT_STATUS_NOTIFY_CLEANUP:
        case NtStatus.NT_STATUS_NOTIFY_ENUM_DIR:
            break;
        case 0xC00000BB: // NT_STATUS_NOT_SUPPORTED