Documented kerberos configuration method fails

[mkrysiak]

Describe the bug
The documented principal specification form of configuring Kerberos fails.

<kerberos>
    <principal>HTTP/clickhouse.example.com@EXAMPLE.COM</principal>
</kerberos>

However, the following works:

<kerberos>
  <principal>HTTP@clickhouse.example.com</principal>
  <keytab>/path/to/file.keytab</keytab>
</kerberos>

To Reproduce
Steps to reproduce the behavior:

1. In a functioning kerberos realm, provision a new service/principal and add it to a keytab file.
2. Configure Antalya for Kerberos authentication using the principal specification. Configure the keytab path.
3. Attempt request the HTTP interface with curl -u: --negotiate https://...
4. Authentication fails.

Expected behavior
Successful authentication and a response to the query.

Screenshots
If applicable, add screenshots to help explain your problem.

Key information
Provide relevant runtime details.

• Project Antalya Build Version: clickhouse-server-26.3.13.20001

Additional context
In GSSAcceptor.cpp, gss_import_name() is called with GSS_C_NT_HOSTBASED_SERVICE, and according to GSSAPI documentation:

The value should be a string of the form service or service@hostname