diff --git a/tests/data/Makefile.am b/tests/data/Makefile.am
index 53abf60901..a0539785b7 100644
--- a/tests/data/Makefile.am
+++ b/tests/data/Makefile.am
@@ -254,7 +254,7 @@ test2056 test2057 test2058 test2059 test2060 test2061 test2062 test2063 \
test2064 test2065 test2066 test2067 test2068 test2069 test2070 test2071 \
test2072 test2073 test2074 test2075 test2076 test2077 test2078 test2079 \
test2080 test2081 test2082 test2083 test2084 test2085 test2086 test2087 \
-test2088 test2089 test2090 test2091 \
+test2088 test2089 test2090 test2091 test2092 test2093 \
test2100 test2101 test2102 test2103 test2104 \
\
test2200 test2201 test2202 test2203 test2204 test2205 \
diff --git a/tests/data/test2092 b/tests/data/test2092
new file mode 100644
index 0000000000..3cfdd9cab4
--- /dev/null
+++ b/tests/data/test2092
@@ -0,0 +1,58 @@
+
+
+
+
+HTTP
+HTTP GET
+HTTP Negotiate auth (stub ntlm)
+SPNEGO NTLM disallowed
+
+
+
+# Server-side
+
+
+HTTP/1.1 200 OK swsclose
+Content-Length: 23
+
+This IS the real page!
+
+
+
+# Client-side
+
+
+http
+
+
+SPNEGO skips auth when NTLM blocked by CURL_DISABLE_NEGOTIATE_NTLM
+
+
+GSS-API
+Debug
+
+
+CURL_STUB_GSS_CREDS="NTLM_Alice"
+
+
+--negotiate http://%HOSTIP:%HTTPPORT/%TESTNUMBER
+
+
+
+# Verify data after the test has been "shot"
+
+
+0
+
+# When NTLM is the only available mechanism and is blocked,
+# negotiate auth silently fails and the request is sent without
+# any Authorization header.
+
+GET /%TESTNUMBER HTTP/1.1
+Host: %HOSTIP:%HTTPPORT
+User-Agent: curl/%VERSION
+Accept: */*
+
+
+
+
diff --git a/tests/data/test2093 b/tests/data/test2093
new file mode 100644
index 0000000000..b74979f384
--- /dev/null
+++ b/tests/data/test2093
@@ -0,0 +1,68 @@
+
+
+
+
+HTTP
+HTTP GET
+HTTP Negotiate auth (stub krb5)
+SPNEGO NTLM disallowed
+
+
+
+# Server-side
+
+
+HTTP/1.1 200 Things are fine in server land
+Server: Microsoft-IIS/7.0
+Content-Type: text/html; charset=iso-8859-1
+WWW-Authenticate: Negotiate RA==
+Content-Length: 15
+
+Nice auth sir!
+
+
+HTTP/1.1 200 Things are fine in server land
+Server: Microsoft-IIS/7.0
+Content-Type: text/html; charset=iso-8859-1
+WWW-Authenticate: Negotiate RA==
+Content-Length: 15
+
+Nice auth sir!
+
+
+
+# Client-side
+
+
+http
+
+
+SPNEGO with Kerberos still works when built with CURL_DISABLE_NEGOTIATE_NTLM
+
+
+GSS-API
+Debug
+
+
+CURL_STUB_GSS_CREDS="KRB5_Alice"
+
+
+--negotiate http://%HOSTIP:%HTTPPORT/%TESTNUMBER
+
+
+
+# Verify data after the test has been "shot"
+
+
+0
+
+
+GET /%TESTNUMBER HTTP/1.1
+Host: %HOSTIP:%HTTPPORT
+Authorization: Negotiate %b64["KRB5_Alice":HTTP@127.0.0.1:1:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA]b64%
+User-Agent: curl/%VERSION
+Accept: */*
+
+
+
+