On Tue, 5 Feb 2008 17:28:05 -0800 "Zeqing (Fred) Xia" <fxia@juniper.net> wrote: > It seems to me that empty string "" should be treated the same way as > NULL in spnego_reply(). I'm not surprised. I recall seeing this sort of thing where the token can be various levels of encapsulation of what is ultimately nothing. Mike -- Michael B Allen PHP Active Directory SPNEGO SSO http://www.ioplex.com/