mac.init(macKey);
        return mac.doFinal(data);
    }

    /**
     * Returns the user's Kerberos realm.
     *
     * @return the user realm
     */
    public String getUserRealm() {
        return this.userRealm;
    }

    /**
     * Returns the user's principal name.
     *
     * @return the user principal name
     */
    public String getUserPrincipalName() {

            // Also test getters that delegate to KerberosEncData
            assertEquals(USER_PRINCIPAL_NAME, ticket.getUserPrincipalName());
            assertEquals(USER_REALM, ticket.getUserRealm());
        }
    }

    // Note: Testing the code path where keys are null and retrieved from
    // KerberosCredentials requires mocking the constructor of KerberosCredentials,