code: private boolean matchKerberosIdentities(WSConnectionRequestInfoImpl cri) {
          boolean flag = false;
          final boolean isTraceOn = TraceComponent.isAnyTracingEnabled();
  
          if (isTraceOn && tc.isEntryEnabled())
              Tr.entry(this, tc, "matchKerberosIdentities", this, cri);
  
          if (kerberosIdentityisSet && cri.kerberosIdentityisSet) {
              flag = AdapterUtil.matchGSSName(cri.gssName, gssName);
          } else if (kerberosIdentityisSet || cri.kerberosIdentityisSet) {
              // one of them is true, so no match
              flag = false;
              if (isTraceOn && tc.isDebugEnabled()) 
                  Tr.debug(this, tc, "only one has kerberos identity attributes set so no match");
          } else 
          {// else: both are are false thus, match
              if (isTraceOn && tc.isDebugEnabled())
                  Tr.debug(this, tc, "both have kerberos identity attributes not set so match");
              flag = true; 
          }
  
          if (isTraceOn && tc.isEntryEnabled())
              Tr.exit(this, tc, "matchKerberosIdentities", flag);
  
          return flag;
      }
docs: Per JAVA Docs,
  method returns true if the two names contain at least one primitive element in common.
  If either of the names represents an anonymous entity, the method will return false.