...
If you enable the Krb5LoginModule and authenticate the userid and password against a Kerberos KDC, then Java must be told the name of the Kerberos Realm and the network name of the KDC. Again, this can be done with system properties (java.security.krb5.realm and java.security.krb5.kdc) or by copying a Unix krb5.conf file into the {jre-home}/lib/security directory. Note that SPEGNO SPNEGO also uses Kerberos and sets the same system properties. So if you are planning to use both JAAS and SPEGNO SPNEGO with Kerberos, read about SPEGNO configuration SPNEGO configuration when planning JAAS.