Enforcing SPNEGO

[Cantor, Scott]

> ok tracked it down, user has to0 many AD groups.

How does that manifest? If nothing else maybe the error could be caught or detected better.

My vague recollection of the SPNEGO code is that the autorun thing is designed to toggle that off in case the SPNEGO attempt fails so that the next time in it doesn't just keep auto-failing. It re-enables the flag if it succeeds.

Generally speaking the SPNEGO support is definitely in the category of "supported for members", I don't understand it well enough to support it publically anymore.

-- Scott