* Allow users to specify a custom NTLM negotiator

* Add detail to NTLM negotiation error messages

* fix: handle missing sorting control in OpenLDAP response

* Update control.go (re-phrased the comment in english to match with the rest of the library)

---------

Co-authored-by: kozlov-e <kozlov-e@protei-lab.ru>
Co-authored-by: Christopher Puschmann <cp@lumen.sh>

* condition is always true
* Fix DIGEST-MD5 auth

---------

Co-authored-by: Christopher Puschmann <cp@lumen.sh>

…lient.InitSecContext(...), fixes #536 (#537)

* Added GSSAPIClient.InitSecContextWithOptions(...), fixes #536

* Added UnmarshalWrapToken()

* Added Conn.GSSAPIBindRequestWithAPOptions()

Co-authored-by: Aaron Rood <arood@blackpointcyber.com>

The vulnerability in golang.org/x/net prior to version 0.36.0 does not
apply to this module, however for general hygiene we're updating the
dependencies.

This has pushed the issue of which versions of Go we support; the go.mod
file from golang.org/x/net requires Go version 1.23 minimum, and given
that the Go maintainers only support the last two versions, this change
reduces the test matrix to the last two versions.

…ws clients

Running the current version of the code on Windows with `go test` ends with an error:
```
.\examples_windows_test.go:14:1: ExampleConn_SSPIClient_GSSAPIBind refers to unknown field or method: Conn.SSPIClient
.\examples_windows_test.go:14:1: ExampleConn_SSPIClient_GSSAPIBind has malformed example suffix: GSSAPIBind
```

This commit adjusts the example function signature to match

Co-authored-by: Borislav Dubyaga <borislav.dubyaga@myoffice.team>
Co-authored-by: Christopher Puschmann <cp@lumen.sh>

update `DirSync` and `DirSyncAsync` example codes to use `DialURL` instead of the already deprecated `Dial` function