From 0734b1b6c170dfeca45b82dff182f9fdbc8c77f1 Mon Sep 17 00:00:00 2001
From: Mike Wiesner <mwiesner@vmware.com>
Date: Wed, 10 Feb 2010 12:40:00 +0000
Subject: [PATCH] SES-31: Added hint for problems related to Sun Bug 6851973

---
 .../kerberos/web/SpnegoAuthenticationProcessingFilter.java  | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/web/SpnegoAuthenticationProcessingFilter.java b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/web/SpnegoAuthenticationProcessingFilter.java
index 2cc6722..67393eb 100644
--- a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/web/SpnegoAuthenticationProcessingFilter.java
+++ b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/web/SpnegoAuthenticationProcessingFilter.java
@@ -86,6 +86,12 @@ import org.springframework.web.filter.GenericFilterBean;
  *	&lt;/bean&gt;
  * &lt;/beans&gt;
  * </pre>
+ * 
+ * If you get a "GSSException: Channel binding mismatch (Mechanism level:ChannelBinding not provided!) 
+ * have a look at this <a href="http://bugs.sun.com/view_bug.do?bug_id=6851973">bug</a>.<br />
+ * A workaround unti this is fixed in the JVM is to change 
+ * HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\SuppressExtendedProtection to 0x02
+ * 
  *
  * @author Mike Wiesner
  * @since 1.0