Linux环境下Data8.PowerPlatform.Dataverse.Client OnPremiseClient空引用异常求助

使用Data8.PowerPlatform.Dataverse.Client的OnPremiseClient实现Dynamics 365 SDK，在Windows平台运行完全正常，但部署到基于mcr.microsoft.com/dotnet/aspnet:7.0（Debian 11 Bullseye）的Linux服务器时，即使已安装gss-ntlmssp包，调用服务仍触发空引用异常，堆栈信息如下：

System.NullReferenceException: Object reference not set to an instance of an object.
at System.Net.Security.SafeDeleteNegoContext.Dispose(Boolean disposing)
at System.Runtime.InteropServices.SafeHandle.Dispose()
at System.Net.Security.SafeDeleteNegoContext..ctor(SafeFreeNegoCredentials credential, String targetName)
at System.Net.Security.NegotiateStreamPal.EstablishSecurityContext(SafeFreeNegoCredentials credential, SafeDeleteContext& context, ChannelBinding channelBinding, String targetName, ContextFlagsPal inFlags, ReadOnlySpan1 incomingBlob, Byte[]& resultBuffer, ContextFlagsPal& outFlags) at System.Net.Security.NegotiateStreamPal.InitializeSecurityContext(SafeFreeCredentials& credentialsHandle, SafeDeleteContext& securityContext, String spn, ContextFlagsPal requestedContextFlags, ReadOnlySpan1 incomingBlob, ChannelBinding channelBinding, Byte[]& resultBlob, Int32& resultBlobLength, ContextFlagsPal& contextFlags)
at System.Net.NTAuthentication.GetOutgoingBlob(ReadOnlySpan1 incomingBlob, Boolean throwOnError, SecurityStatusPal& statusCode) at System.Net.Security.NegotiateAuthentication.GetOutgoingBlob(ReadOnlySpan1 incomingBlob, NegotiateAuthenticationStatusCode& statusCode)
at Data8.PowerPlatform.Dataverse.Client.ADAuthClient.Authenticate()
at Data8.PowerPlatform.Dataverse.Client.ADAuthClient.Execute(OrganizationRequest request)
at Data8.PowerPlatform.Dataverse.Client.OnPremiseClient.Execute(OrganizationRequest request)
at Ahanonline.Common.DynamicsClient.DynamicsClientService.SetStatus(SetStatusParam param) in /src/Common/DynamicsClient/DynamicsClientService.cs:line 112
at Ahanonline.Services.OnlineQuotes.OnlineQuotesService.UpdateStatus(UpdateOnlineQuoteStatusRequest body, Requester requester) in /src/Services/OnlineQuotes/OnlineQuotesService.cs:line 48
at Ahanonline.App.Controllers.OnlineQuotesController.UpdateStatus(UpdateOnlineQuoteStatusRequest dto, Requester requester) in /src/App/Controllers/OnlineQuotesController.cs:line 30
...（后续堆栈省略）

以下是针对该问题的可行修复方案：

1. 升级.NET运行时版本 #

该空引用异常是.NET 7的已知bug，存在于System.Net.Security组件的NTLM协商逻辑中，已在.NET 7.0.15及后续版本修复。修改Dockerfile中的基础镜像为包含修复版本的镜像：

FROM mcr.microsoft.com/dotnet/aspnet:7.0.15-bookworm-slim

Debian 12（Bookworm）的镜像环境对NTLM协议支持更完善，同时搭载了修复后的.NET运行时。

2. 强制使用系统NTLM库 #

在容器中添加环境变量，强制.NET使用系统安装的gss-ntlmssp库而非内置实现：

ENV COMPlus_UseNtlmNative=1

同时确保容器中正确安装依赖包，在Dockerfile中补充安装命令：

RUN apt-get update && apt-get install -y --no-install-recommends gss-ntlmssp && rm -rf /var/lib/apt/lists/*

3. 显式配置服务主体名称（SPN） #

空引用可能源于SPN解析失败，确认Dynamics 365服务器的SPN已正确注册，且客户端能通过DNS解析服务器全称。初始化OnPremiseClient时显式指定SPN：

var client = new OnPremiseClient(new Uri(dynamicsUrl), credentials);
client.Spn = "HTTP/<dynamics-server-fqdn>";

4. 切换至OAuth认证（备选方案） #

若上述方案无效，可替换NTLM认证为OAuth：

• 在Azure AD中注册应用并授予Dynamics 365相关权限
• 使用OAuthClient替代OnPremiseClient：

var client = new OAuthClient(new Uri(dynamicsUrl), clientId, clientSecret, tenantId);

内容的提问来源于stack exchange，提问作者Nima Soufiloo