Simo Sorce

It is definitely correct to expose the error, an application may behave differently (for example avoid calling C_Finalize) based on that. The challenge is making sure applications know how to...

> > Or fips can be stripped explicitly, as it is done in the current version of the code. I will try to update the PR tomorrow > > This...

Good point Viktor, I was actually discussing related problems offline with @beldmit yesterday, and I proposed a more dynamic approach that may be preferable (and would work correctly in your...

Usually getting what kind of auth error the Windows system logs in its system log helps in these situations.

gssntlmssp runs as a plugin of the gssapi library so there isn't much more except std gssapi logging facilities or gdb

Looks like a reasonable approach

Please squash the fix in the proper patches and force push the result