WPS使用Domino(8.5 with quickr) LDAP验证的问题

解决Cyrillic字符登录问题

最新推荐文章于 2019-01-09 15:01:47 发布

转载最新推荐文章于 2019-01-09 15:01:47 发布 · 767 阅读

文章标签：

#lotus #sorting #websphere #properties #server #authentication

Lotus Others 同时被 2 个专栏收录

13 篇文章

订阅专栏

wps

2 篇文章

订阅专栏

本文介绍了解决在Lotus Quickr服务中使用包含Cyrillic字符用户名的用户无法登录的问题。该问题源于配置了针对Domino 8.0.x LDAP的安全设置后，Lotus Quickr在进行身份验证时将用户名转换为小写，导致某些LDAP服务器无法解析。解决方案是在Domino目录中启用Unicode标准排序。

Login fails for users with Cyrillic characters in their name

Technote (troubleshooting)

Problem

Users whose names contain non-ASCII characters, such as Cyrillic characters, might not be able to log in to Lotus Quickr services for WebSphere Portal. This problem begins after you configure security for Lotus Quickr services for WebSphere Portal against Domino 8.0.x LDAP.

Cause

During the authentication process, Lotus Quickr binds with the DN of the user against the LDAP server, using the DN converted to lower case. If the LDAP server is unable to resolve the lower case DN, then the bind fails and the user fails to authenticate.

Depending on the sort order of the $LDAPRDNHier view in the Domino Directory, the Domino server might not be able to resolve the DN if converted to lower case.

Environment

Lotus Quickr 8.1 or 8.1.1 services for WebSphere Portal with security configured against Lotus Domino 8.0.x server.

Resolving the problem

To correct the problem, enable "Unicode standard sorting" in the $LDAPRDNHier view of the Domino Directory (names.nsf) on the Domino server, as follows:

Open the names.nsf in the Domino Designer client
Locate the $LDAPRDNHier view
Right-click on the view name and select "Design properties"
On the third tab, select "Unicode standard sorting." Close the design properties
On the Domino server console, run "load updall -R names.nsf -T $LDAPRDNHier" to rebuild the view

Note: To make this change permanent, perform the same procedure on the pubnames.ntf file, the template for the Domino Directory.

Additional information

This issue of the view sort order has been addressed in 8.5.1. Fix details: SPR# RSOI7NHLU8 Refer to the Upgrade Central site for details on upgrading Notes/Domino.

For more on "Unicode standard sorting", you can refer to Lotus Domino Administrator topic "How the LDAP service works", excerpt as follows:

"When an LDAP search filter specifies a name or mail attribute, the LDAP service uses views to quickly locate entries. The PUBNAMES.NTF template design property for these hidden views has "Universal" with "Unicode standard sorting" selected for the sort order. Unicode provides a unique definition for every character an LDAP client can specify regardless of the language configured on the client. Using Unicode sorting, the LDAP service can accurately process LDAP requests specified in different languages when using these views."

http://www-01.ibm.com/support/docview.wss?rs=3264&context=SSVGKL&dc=DB560&dc=DB520&uid=swg21377621&loc=en_US&cs=UTF-8&lang=en&rss=ct3264lotus