title: JGSS and NTLMSSP/NegoEx
body: <p>I'm working on a web application running on JRE 7u7 that uses the <a href="http://spnego.sourceforge.net/" rel="nofollow">SPNEGO library</a> from Sourceforge for authentication. All is well as long as Kerberos is working, but since it's deployed in a complex environment of multiple domains and various interfering network devices, this is not always the case.</p>
  
  <p>In cases where Windows clients fail to obtain a service ticket, they apparently attempt to do SPNEGO with just two provided mechanisms: NTLMSSP and NegoEx. Is there any hope using the JGSS library to understand these? </p>
  
  <p>I saw it stated a couple of times that the Java 6 SPNEGO implementation only supports the Kerberos mechanism, but couldn't find a definitive answer on whether that's still true for Java 7. If it can't be done, is there third party Java code that would enable SPNEGO with support for Kerberos and (at least) NTLMSSP?</p>