If you are running your JGSS application with a Java™ security
manager enabled, you need to ensure that your application and JGSS have the
necessary permissions.
JAAS permission checks
IBM® JGSS
performs runtime permission checks at the time the JAAS-enabled program uses
credentials and accesses services. You can disable this optional JAAS feature
by setting the Java property avax.security.auth.useSubjectCredsOnly
to false. Moreover, JGSS performs permission checks only when the application
runs with a security manager.