This account must match the account that you will use to register the HTTP service with Kerberos in the following sections, so we recommend writing it down.
<init-param>
<param-name>spnego.preauth.username</param-name>
<param-value>yourusername</param-value>
</init-param>
<init-param>
<param-name>spnego.preauth.password</param-name>
<param-value>yourpassword</param-value>
</init-param>
e.g. if your password is <my&best'password" you will have to write it in the web.xml file as follows: <my&best'password"