它提取并解密(这将验证其是否来自TGS) SPNEGO令牌，以检索用户名，并将此用户名断言到服务器。

It extracts and decrypts (this validates that it must have come from the TGS) the SPNEGO token to retrieve the user name and this user name is asserted to the server.

youdao

用户名从服务器获得并且是一个隐藏了表单的POST参数。

The user name is obtained from the server and is a form-hidden POST parameter.

youdao

您可能需要将用户名映射到服务器的注册中心中有意义的主体。

You may need to map the user name to a principal that is meaningful in the server's registry.

youdao