In SPNEGO processing check if the NTLM OID is specified and the security blob is an NTLMSSP blob.

Author: FileSysOrg

src/main/java/org/filesys/server/auth/EnterpriseSMBAuthenticator.java

@@ -1281,7 +1281,7 @@ else if (tokType == SPNEGO.NegTokenInit) {
             if ( mechToken != null && SecurityBlob.checkForNTLMSSP( mechToken, 0))
                 isNTLMSSP = true;
 
-            if (isNTLMSSP || hasNTLMSSPOid) {
+            if (isNTLMSSP && hasNTLMSSPOid) {
 
                 // NTLMSSP logon, get the NTLMSSP security blob that is inside the SPNEGO blob
                 byte[] ntlmsspBlob = negToken.getMechtoken();