anchor.diff:      false ->
         {refused, "User '~s' exists in internal database, not authenticating user with Kerberos.", [Username]}
     end.
  -
  -check_vhost_access(#user{username = _}, _) ->
  -  true.
  -
  -check_resource_access(#user{username = _},
  -  #resource{virtual_host = _, kind = _, name = _},
  -  _) ->
  -  true.
  
positive.code: -module(rabbit_auth_backend_kerberos).
  
  -include_lib("rabbit_common/include/rabbit.hrl").
  -behaviour(rabbit_auth_backend).
  
  -define(APPLICATION, begin {ok, A} = application:get_application(?MODULE), A end).
  
  -export([init/0, kinit/2, description/0, check_user_login/2, check_vhost_access/2, check_resource_access/3]).
  -on_load(init/0).
  
  init() ->
  
negative.code:   [{name, <<"Kerberos">>},
     {description, <<"Kerberos authentication">>}].
  
  user_login_authentication(Username, AuthProps) ->
    Password = proplists:get_value(password, AuthProps),
    Kinit = kinit(Username, Password),
    {ok, AuthZ_module} = application:get_env(?APPLICATION, authZ_module),
  