WPS使用Domino(8.5 with quickr) LDAP验证的问题

Login fails for users with Cyrillic characters in their name

Technote (troubleshooting)       Problem Users whose names contain non-ASCII characters, such as Cyrillic characters, might not be able to log in to Lotus Quickr services for WebSphere Portal. This problem begins after you configure security for Lotus Quickr services for WebSphere Portal against Domino 8.0.x LDAP.     Cause During the authentication process, Lotus Quickr binds with the DN of the user against the LDAP server, using the DN converted to lower case. If the LDAP server is unable to resolve the lower case DN, then the bind fails and the user fails to authenticate. Depending on the sort order of the $LDAPRDNHier view in the Domino Directory, the Domino server might not be able to resolve the DN if converted to lower case.     Environment Lotus Quickr 8.1 or 8.1.1 services for WebSphere Portal with security configured against Lotus Domino 8.0.x server.     Resolving the problem To correct the problem, enable "Unicode standard sorting" in the $LDAPRDNHier view of the Domino Directory (names.nsf) on the Domino server, as follows: Open the names.nsf in the Domino Designer client Locate the $LDAPRDNHier view Right-click on the view name and select "Design properties" On the third tab, select "Unicode standard sorting." Close the design properties On the Domino server console, run "load updall -R names.nsf -T $LDAPRDNHier" to rebuild the view Note: To make this change permanent, perform the same procedure on the pubnames.ntf file, the template for the Domino Directory. Additional information This issue of the view sort order has been addressed in 8.5.1. Fix details: SPR# RSOI7NHLU8 Refer to the Upgrade Central site for details on upgrading Notes/Domino. For more on "Unicode standard sorting", you can refer to Lotus Domino Administrator topic "How the LDAP service works", excerpt as follows: "When an LDAP search filter specifies a name or mail attribute, the LDAP service uses views to quickly locate entries. The PUBNAMES.NTF template design property for these hidden views has "Universal" with "Unicode standard sorting" selected for the sort order. Unicode provides a unique definition for every character an LDAP client can specify regardless of the language configured on the client. Using Unicode sorting, the LDAP service can accurately process LDAP requests specified in different languages when using these views." http://www-01.ibm.com/support/docview.wss?rs=3264&context=SSVGKL&dc=DB560&dc=DB520&uid=swg21377621&loc=en_US&cs=UTF-8&lang=en&rss=ct3264lotus