com.sun.net.ssl.client {
    com.sun.security.auth.module.Krb5LoginModule required
    principal="USER@TEST.REALM"
    doNotPrompt=true
    useKeyTab=true
    keyTab="krb5.keytab.data";
};

server_star {
    com.sun.security.auth.module.Krb5LoginModule required
    principal="*"
    isInitiator=false
    useKeyTab=true
    keyTab="krb5.keytab.data"
    storeKey=true;
};

server_multiple_principals {
    com.sun.security.auth.module.Krb5LoginModule required
    principal="host/service1.localhost@TEST.REALM"
    isInitiator=false
    useKeyTab=true
    keyTab="krb5.keytab.data"
    storeKey=true;

    com.sun.security.auth.module.Krb5LoginModule required
    principal="host/service2.localhost@TEST.REALM"
    isInitiator=false
    useKeyTab=true
    keyTab="krb5.keytab.data"
    storeKey=true;

    com.sun.security.auth.module.Krb5LoginModule required
    principal="host/service3.localhost@TEST.REALM"
    isInitiator=false
    useKeyTab=true
    keyTab="krb5.keytab.data"
    storeKey=true;
};

