I'm trying to get the Win32 SSPI API to validate a challenge response from a client. The call to AcceptSecurityContext is always failing with either SEC_E_INVALID_TOKEN (0x80090308) or SEC_E_INTERNAL_ERROR (0x80090304). I've stripped down the problem to this sample code: #define SECURITY_WIN32 #define WIN32_LEAN_AND_MEAN #include <Windows.h> #include <security.h> #include <wdigest.h> #include [...] read more