Question

We've recently moved to LDAP authentication on our TWiki installation here (using LdapContrib? ).

Initially we were set up to use the LDAP lookup of FirstnameLastname? to form the user's WikiName? . This caused some problems because of users with French accents in their names (their WikiNames? would either be missing characters or would have garbled characters). To get around this, we started using users' email addresses in LDAP to create their WikiName? (email address convention here is Firstname.Lastname@domainPLEASENOSPAM.com). That works perfectly for most of our users.

Some users (with email address in the form of username@domainPLEASENOSPAM.com) are unable to VIEW any Web. It would appear that their LDAP authentication is working (they get logged in), but that they are not recognized as being a member of any group (even though they are - as seen on TwikiGroups? after doing a RefreshCache? ). I think that their usernames are not being properly normalized. If we change their email address to UserName@domainPLEASENOSPAM.com (instead of username@domainPLEASENOSPAM.com), everything works.

We cannot change the email addresses of everyone affected (certainly not those people who are in other Active Directory sites).

Can someone provide assistance/clues as to how we can either:

- Properly convert French accented characters to their relative equivalents (é = e) so that TWiki will accept them

- Or, get those username@domainPLEASENOSPAM.com email addresses to normalize to UserName? for WikiName? compatibility.

Thank you!

Environment

-- TWikiGuest - 15 Aug 2008

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

Sorry, closing after more than 30 days. Please reopen with more details if needed...

-- PeterThoeny - 06 Nov 2008

I don't think more details are needed to answer this simple question (the first one) all TWiki users around the world having special characters in their name must face using Ldap authentication ! Thanks for helping out with it.

-- AndreLegrand - 18 Nov 2008