public static boolean useSubjectCredsOnly(GSSCaller caller){
  if (caller instanceof HttpCaller) {
    return false;
  }
  String propValue=AccessController.doPrivileged(new GetPropertyAction("javax.security.auth.useSubjectCredsOnly","true"));
  return (!propValue.equalsIgnoreCase("false"));
}

public static boolean useSubjectCredsOnly ( GSSCaller caller ) { if ( caller instanceof HttpCaller ) { return false ; } String propValue = AccessController . doPrivileged ( new GetPropertyAction ( "javax.security.auth.useSubjectCredsOnly" , "true" ) ) ; return ( ! propValue . equalsIgnoreCase ( "false" ) ) ; }
determines if the application doesn ' t mind if the mechanism obtains the required credentials from outside of the current subject . our kerberos v5 mechanism would do a jaas login on behalf of the application if this were the case . the application indicates this by explicitly setting the system property javax . security . auth . usesubjectcredsonly to false .
