KerberosClient {
    com.sun.security.auth.module.Krb5LoginModule required client=TRUE;
};
KerberosClientKeyTab {
    com.sun.security.auth.module.Krb5LoginModule required
    client=TRUE
    refreshKrb5Config=true
    useKeyTab=true
    keyTab="/etc/bob.keytab"
    principal="bob";
};
KerberosServer {
    com.sun.security.auth.module.Krb5LoginModule required storeKey=true;
};
KerberosServerKeyTab {
    com.sun.security.auth.module.Krb5LoginModule required
    storeKey=true
    refreshKrb5Config=true
    useKeyTab=true
    keyTab="/etc/http.keytab"
    principal="HTTP/ktab";
};