diff --git a/spnego/negotiationToken.go b/spnego/negotiationToken.go index 4a80f359..34d305f3 100644 --- a/spnego/negotiationToken.go +++ b/spnego/negotiationToken.go @@ -169,10 +169,6 @@ func (n *NegTokenInit) Verify() (bool, gssapi.Status) { return false, gssapi.Status{Code: gssapi.StatusDefectiveToken, Message: "MechToken is not a KRB5 token as expected"} } } - // RFC4178 states that the initial negotiation message can optionally contain the initial mechanism token for the preferred mechanism of the client. - if !mt.OID.Equal(n.MechTypes[0]) { - return false, gssapi.Status{Code: gssapi.StatusDefectiveToken, Message: "OID of MechToken does not match the first in the MechTypeList"} - } // Verify the mechtoken return n.mechToken.Verify() }