EncryptAndSign Negotiated Protection Level The .NET NegotiateStream Protocol uses the Negotiated Protection Level to keep track of the protection level agreed upon during the security context negotiation with the client. The possible values are the same as those for the Required Protection Level. Required Impersonation Level The .NET NegotiateStream Protocol uses the Required Impersonation Level to keep track of the way in which the server application intends to use the credentials specified by the client. The possible values for the Required Impersonation Level and Negotiated Impersonation Level are: Identification Impersonation Delegation Negotiated Impersonation Level The .NET NegotiateStream Protocol uses the Negotiated Impersonation Level to keep track of the impersonation level agreed upon during the security context negotiation with the client. The possible values are the same as those for the Required Impersonation Level. Server Credentials The .NET NegotiateStream Protocol uses the Server Credentials to store a GSS-API handle to the credentials specified by the server application for authenticating itself to the client. Security Provider Context The .NET NegotiateStream Protocol tracks the context of the current security provider chosen during the handshake phase. Framing Buffer The .NET NegotiateStream Protocol employs a buffer mechanism to handle the receiving and processing of full frames while in the handshake phase, and when the data payloads are signed, and/or encrypted. Expected Channel Binding The .NET NegotiateStream Protocol uses the Expected Channel Binding to store the channel binding token, which the client is expected to provide along with its credentials. Timers The .NET NegotiateStream Protocol does not use timers. Protocols and below this protocol layer are responsible for implementing any timers for time-out events.
Appendix A: Product Behavior The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include released service packs. This document specifies version-specific details in the Microsoft .NET Framework. For information about which versions of .NET Framework are available in each released Windows product or as supplemental software, see section 4. Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5 Service Pack 1 (SP1) Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5 Microsoft .NET Framework 4.6 Exceptions, if any, are below. If a service pack or Quick Fix Engineering (QFE) number appears with the product version, behavior changed in that service pack or QFE. The new behavior also applies to subsequent service packs of the product unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition. Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms SHOULD or SHOULD NOT implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term MAY implies that the product does not follow the prescription.
Index A Abstract data 13 15 15 15 impersonation level 14 15 13 protection level 14 14 15 14 15 14 19 21 21 impersonation level 20 20 19 protection level 20 20 21 20 20 19 8 C 8 32 Client 13 15 15 15 impersonation level 14 15 13 protection level 14 14 15 14 15 14 higher-layer triggered events application 15 request 16 16 15 18 message processing GSS_Init_sec_context returns 16 17 receiving data 18 18 17 18 13 sequencing rules GSS_Init_sec_context returns 16 17 receiving data 18 18 17 18 15 D 11 Data model - abstract 13 15 15 15 impersonation level 14 15 13 protection level 14 14 15 14 15 14 19 21 21 impersonation 20 20 19 protection level 20 20 21 20 20 19 11 E 25 F
9 G 6 H 10 10 Higher-layer triggered events client application 15 request 16 16 server application 21 request 22 21 I 30 30 7 Initialization 15 21 6 L Local events 18 24 M Message processing client GSS_Init_sec_context returns 16 17 receiving data 18 18 17 server GSS_Accept_sec_context returns 22 23 receiving data 23 22 Messages 11 10 10 10 N 6 O Other local events 18 24 7 P 30 8 8 31 R 6 7 6 8 S Security 30 30 Sequencing rules client GSS_Init_sec_context returns 16 17 receiving data 18 18 17 server GSS_Accept_sec_context returns 22 23 receiving data 23 22 Server 19 21 21 impersonation level 20 20 19 protection level 20 20 21 20 20 19 higher-layer triggered events application 21