User authentication using Kerberos - case sensitivity problems

Are there any workarounds for the fact that Kerberos usernames are case sensitive, when trying to authenticate (Active Directory) users that don't know (or care) what the correct capitalization of their username is? Logging into a windows workstation isn't case sensitive, so nobody would reasonably expect that logging into anything else using the same account would be case sensitive.

Users expect to be able to type in a username and have it function in a case-insensitive way, but with Kerberos this seems impossible unless you use a "lookup" account that goes and discovers the correct capitalization of a username before attempting to authenticate. Besides being ugly, this is needless, slow, and requires maintanence of an additional account...isn't there a better way?

[792 byte] By [Tebriela] at [2007-10-2 22:58:06]
# 1

Why does nobody on any forum seem to have an answer for this? Is this really hard to understand?

Or is the answer just that capitalization of usernames in Active Directory should be made consistent? (Right now a small number of usernames are mixed case or all uppercase, so it can't be assumed that they are all lowercase, etc.)

Tebriela at 2007-7-14 6:12:09 > top of Java-index,Security,Other Security APIs, Tools, and Issues...