This article was previously published under Q304161
This article has been archived. It is offered "as is" and will no longer be updated.
When you are using an Schannel SSPI package, ASC_RET_MUTUAL_AUTH is not set on return in the context attributes parameter. The AcceptSecurityContext API returns with ASC_RET_MUTUAL_AUTH not set, even though mutual authentication was achieved.
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in theMicrosoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
The English version of this fix should have the following file attributes or later:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.
With MUTUAL_AUTH, the communicating parties must authenticate their identities to each other. The SSPI client requests for ISC_REQ_MUTUAL_AUTH in the InitializeSecurityContext API and the server requests for ASC_REQ_MUTUAL_AUTH in the AcceptSecurityContext API. On return, the SSPI client indicates that ISC_RET_MUTUAL_AUTH was achieved. But the server indicates that ISC_RET_MUTUAL_AUTH was not achieved, even though mutual authentication succeeded.
For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:
265173 Datacenter Program and Windows 2000 Datacenter Server Product
For additional information about how to install multiple hotfixes with only one reboot, click the article number below to view the article in the Microsoft Knowledge Base:
296861 Use QChain.exe to Install Multiple Hotfixes with One Reboot
For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:
249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes
Microsoft Windows 2000 Server SP1, Microsoft Windows 2000 Server SP2, Microsoft Windows 2000 Advanced Server SP1, Microsoft Windows 2000 Advanced Server SP2, Microsoft Windows 2000 Professional SP1, Microsoft Windows 2000 Professional SP2