Login fails for users with Cyrillic characters in their name
Technote (troubleshooting)
Problem
Users whose names contain non-ASCII characters, such as Cyrillic characters, might not be able to log in to Lotus Quickr services for WebSphere Portal. This problem begins after you configure security for Lotus Quickr services for WebSphere Portal against Domino 8.0.x LDAP.
Cause
During the authentication process, Lotus Quickr binds with the DN of the user against the LDAP server, using the DN converted to lower case. If the LDAP server is unable to resolve the lower case DN, then the bind fails and the user fails to authenticate.
Depending on the sort order of the $LDAPRDNHier view in the Domino Directory, the Domino server might not be able to resolve the DN if converted to lower case.
Environment
Lotus Quickr 8.1 or 8.1.1 services for WebSphere Portal with security configured against Lotus Domino 8.0.x server.
Resolving the problem
To correct the problem, enable "Unicode standard sorting" in the $LDAPRDNHier view of the Domino Directory (names.nsf) on the Domino server, as follows:
Open the names.nsf in the Domino Designer client
Locate the $LDAPRDNHier view
Right-click on the view name and select "Design properties"
On the third tab, select "Unicode standard sorting." Close the design properties
On the Domino server console, run "load updall -R names.nsf -T $LDAPRDNHier" to rebuild the view
Note: To make this change permanent, perform the same procedure on the pubnames.ntf file, the template for the Domino Directory.
Additional information
This issue of the view sort order has been addressed in 8.5.1. Fix details:SPR# RSOI7NHLU8 Refer to the Upgrade Central site for details on upgrading Notes/Domino.
"When an LDAP search filter specifies a name or mail attribute, the LDAP service uses views to quickly locate entries. The PUBNAMES.NTF template design property for these hidden views has "Universal" with "Unicode standard sorting" selected for the sort order. Unicode provides a unique definition for every character an LDAP client can specify regardless of the language configured on the client. Using Unicode sorting, the LDAP service can accurately process LDAP requests specified in different languages when using these views."