2.2.3.4 Auth Payload (Payload Type 0x87) Packet

The authenticated payload is used to convey a list of authentication methods to the responder. The number of authentication methods MUST be computed from the payload size in the generic header when decoding the Auth payload. When constructing the Auth payload, the payload size MUST be computed from the number of authentication methods.

The following diagram shows the Auth payload 0x87 packet structure.

0	1	2	3	4	5	6	7	8	9	1 0	1	2	3	4	5	6	7	8	9	2 0	1	2	3	4	5	6	7	8	9	3 0	1
Auth_Method																Flags
Auth_Method_2																Flags_2
...
Auth_Method_N																Flags_N

Auth_Method (2 bytes): Indicates the proposed authentication method. The following table shows the allowed values.

Value	Meaning
0x0002	Kerberos [RFC1964]
0x0003	Anonymous
0x0004	TLS [RFC3546]
0x0005	NTLM [MS-NLMP]

Flags (2 bytes): This field is currently unused. It MUST be set to 0 by the initiator and ignored by the responder.