Revision Summary Date Revision History Revision Class Comments 7/20/2007 0.1 Major MCPP Milestone 5 Initial Availability 9/28/2007 0.1.1 Editorial Changed language and formatting in the technical content. 10/23/2007 0.1.2 Editorial Changed language and formatting in the technical content. 11/30/2007 0.1.3 Editorial Changed language and formatting in the technical content. 1/25/2008 1.0 Major Updated and revised the technical content. 3/14/2008 1.0.1 Editorial Changed language and formatting in the technical content. 6/20/2008 1.1 Minor Clarified the meaning of the technical content. 7/25/2008 2.0 Major Updated and revised the technical content. 8/29/2008 2.0.1 Editorial Changed language and formatting
in the technical content. 9/25/2009 3.1 Clarified the meaning of the technical content. 11/6/2009 3.1.1 Editorial Changed language and formatting in the technical content. 12/18/2009 3.1.2 Editorial Changed language and formatting in the technical content. 1/29/2010 3.1.3 Editorial Changed language and formatting in the technical content. 3/12/2010 3.1.4 Editorial Changed language and formatting in the technical content. 4/23/2010 3.1.5 Editorial Changed language and formatting in the technical content. 6/4/2010 3.1.6 Editorial Changed language and formatting in the technical content. 7/16/2010 4.0 Major Updated and revised the
5/6/2011 4.0 None No changes to the meaning, language, or formatting of the technical content. 6/17/2011 4.1 Minor Clarified the meaning of the technical content. 9/23/2011 4.1 None No changes to the meaning, language, or formatting of the technical content. 12/16/2011 5.0 Major Updated and revised the technical content. 3/30/2012 5.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 5.1 Minor Clarified the meaning of the technical content. 10/25/2012 5.1 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 5.1 None No changes to the meaning, language,
or formatting of the technical content. 8/8/2013 5.1 None No changes to the meaning, language, or formatting of the technical content. 11/14/2013 5.1 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 5.1 None No changes to the meaning, language, or formatting of the technical content. 5/15/2014 5.1 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 6.0 Major Significantly changed the technical content. 10/16/2015 6.0 None No changes to the meaning, language, or formatting of the technical content.
Security Security Considerations for Implementers The .NET NegotiateStream Protocol is dependent on the security services of the SPNEGO and NTLM security packages. Before the .NET NegotiateStream Protocol, implementers will want to carefully review the characteristics of the NTLM security package and all security providers used by SPNEGO on the platforms where the implementation will be used. Index of Security Parameters Security Parameter Section Client Role: Credentials, Required Protection Level, Allowed Impersonation Level, Channel Binding Token, Target Name Server Role: Credentials, Required Protection Level, Required Impersonation Level, Expected Channel Binding
Index A Abstract data model 13 15 15 15 impersonation level 14 15 13 protection level 14 14 15 14 15 14 19 21 21 impersonation level 20 20 19 protection level 20 20 21 20 20 19 8 C 8 32 Client 13 15 15 15 impersonation level 14 15 13 protection level 14 14 15 14 15 14 higher-layer triggered events application 15 request 16 16 15 18 message processing GSS_Init_sec_context returns 16 17 receiving data 18 18 17 18 13 sequencing GSS_Init_sec_context returns 16 17 receiving data 18 18 17 18 15 D 11 Data model - abstract 13 15 15 15 impersonation level 14 15 13 protection level 14 14 15 14 15 14 19 21 21 impersonation 20 20 19 protection 20 20 21 20 20 19 11 E 25
F 9 G 6 H 10 10 Higher-layer triggered events client application 15 request 16 16 server application 21 request 22 21 I 30 30 7 Initialization 15 21 6 L Local events 18 24 M Message processing client GSS_Init_sec_context returns 16 17 receiving data 18 18 17 server GSS_Accept_sec_context returns 22 23 receiving data 23 22 Messages 11 10 10 10 N 6 O local events 18 24 7 P 30 8 8 31 R 6 7 6 8 S Security 30 30 Sequencing rules client GSS_Init_sec_context returns 16 17 receiving data 18 18 17 server GSS_Accept_sec_context returns 22 23 receiving data 23 22 Server 19 21 21 impersonation level 20 20 19 protection level 20 20 21 20 20 19 higher-layer triggered events