docs: private boolean matchKerberosIdentities(WSConnectionRequestInfoImpl cri) {
          boolean flag = false;
          final boolean isTraceOn = TraceComponent.isAnyTracingEnabled();
  
          if (isTraceOn && tc.isEntryEnabled())
              Tr.entry(this, tc, "matchKerberosIdentities", this, cri);
  
          if (kerberosIdentityisSet && cri.kerberosIdentityisSet) {
              flag = AdapterUtil.matchGSSName(cri.gssName, gssName);
          } else if (kerberosIdentityisSet || cri.kerberosIdentityisSet) {
              // one of them is true, so no match
              flag = false;
              if (isTraceOn && tc.isDebugEnabled()) 
                  Tr.debug(this, tc, "only one has kerberos identity attributes set so no match");
          } else 
          {// else: both are are false thus, match
              if (isTraceOn && tc.isDebugEnabled())
                  Tr.debug(this, tc, "both have kerberos identity attributes not set so match");
              flag = true; 
          }
  
          if (isTraceOn && tc.isEntryEnabled())
              Tr.exit(this, tc, "matchKerberosIdentities", flag);
  
          return flag;
      }