Implement IAKERB support

This is a new feature currently available in Windows Insiders to use
Kerberos on machines with no domain, or when line of sight with the DC
is unavailable.

AI-Assisted: no

Author: gpotter2

scapy/asn1/mib.py

@@ -741,6 +741,7 @@ def load_mib(filenames):
     '1.3.6.1.5.5.2': 'SPNEGO - Simple Protected Negotiation',
     '1.3.6.1.4.1.311.2.2.10': 'NTLMSSP - Microsoft NTLM Security Support Provider',
     '1.3.6.1.4.1.311.2.2.30': 'NEGOEX - SPNEGO Extended Negotiation Security Mechanism',
+    '1.3.6.1.4.1.311.2.2.40': 'SPNEGO - Negotiate Late Fallback',
 }
 
 #      kerberos      #

scapy/asn1fields.py

@@ -493,7 +493,10 @@ def m2i(self, pkt, s):
                 except ASN1F_badsequence:
                     break
             if len(s) > 0:
-                raise BER_Decoding_Error("unexpected remainder", remaining=s)
+                raise BER_Decoding_Error(
+                    "unexpected remainder in %s" % pkt.name,
+                    remaining=s,
+                )
         return [], remain
 
     def dissect(self, pkt, s):
@@ -586,7 +589,10 @@ def m2i(self,
             if c:
                 lst.append(c)
         if len(s) > 0:
-            raise BER_Decoding_Error("unexpected remainder", remaining=s)
+            raise BER_Decoding_Error(
+                "unexpected remainder in %s" % pkt.name,
+                remaining=s,
+            )
         return lst, remain
 
     def build(self, pkt):
@@ -930,7 +936,10 @@ def m2i(self, pkt, s):  # type: ignore
         else:
             return None, bit_string.val_readable
         if len(s) > 0:
-            raise BER_Decoding_Error("unexpected remainder", remaining=s)
+            raise BER_Decoding_Error(
+                "unexpected remainder in %s" % pkt.name,
+                remaining=s,
+            )
         return p, remain
 
     def i2m(self, pkt, x):  # type: ignore