USER {
    org.argeo.cms.auth.RemoteSessionLoginModule sufficient;
    org.argeo.cms.auth.SpnegoLoginModule optional;
    com.sun.security.auth.module.Krb5LoginModule optional
     tryFirstPass=true
     storeKey=true;
    org.argeo.cms.auth.UserAdminLoginModule required;
};

ANONYMOUS {
    org.argeo.cms.auth.RemoteSessionLoginModule sufficient;
    org.argeo.cms.auth.AnonymousLoginModule sufficient;
};

DATA_ADMIN {
    org.argeo.cms.auth.DataAdminLoginModule requisite;
};

NODE {
    com.sun.security.auth.module.Krb5LoginModule optional
     keyTab="${osgi.instance.area}private/krb5.keytab" 
     useKeyTab=true
     storeKey=true;
    org.argeo.cms.auth.DataAdminLoginModule requisite;
};

KEYRING {
    org.argeo.cms.auth.KeyringLoginModule required;
};

SINGLE_USER {
    com.sun.security.auth.module.Krb5LoginModule optional
     storeKey=true
     useTicketCache=true;
    org.argeo.cms.auth.SingleUserLoginModule required;
    org.argeo.cms.auth.UserAdminLoginModule optional;
};

Jackrabbit {
   org.argeo.security.jackrabbit.SystemJackrabbitLoginModule requisite;
};