do not ask username from the user => use kerberos directly