spnego: add --disable-negotiate-ntlm compile-time option

Add configure and CMake options to define CURL_DISABLE_NEGOTIATE_NTLM,
which gates the NTLM blocking logic in the SSPI and GSS-API SPNEGO
code paths behind a compile-time flag.

Add a 'SPNEGO-no-NTLM' feature string to curl --version output and
gate the SPNEGO NTLM blocking tests on the negotiate-ntlm-disabled
feature.

Signed-off-by: Matthew John Cheetham <mjcheetham@outlook.com>
This commit is contained in:
Matthew John Cheetham 2026-04-14 14:11:00 +01:00
parent 3ea51e7a1f
commit 0267a63dc0
11 changed files with 48 additions and 0 deletions

View file

@ -38,6 +38,10 @@ Disable support for the Kerberos authentication methods.
Disable support for the negotiate authentication methods.
## `CURL_DISABLE_NEGOTIATE_NTLM`
Block NTLM authentication within SPNEGO negotiation.
## `CURL_DISABLE_AWS`
Disable **aws-sigv4** support.