I have a user name with Cyrillic letters, configured SSO authorization according to the instructions, an error appears when checking the login:
org.jivesoftware.smack.SmackException exception: javax.security.sasl.SaslException exception: Failed to initiate GSS [Caused by GSSException exception: valid credentials are not provided (mechanism level: ticket and authenticator do not match (36))]
For verification, I also used the usernames in English and they are logged in normally. Using packet capture, I came to the conclusion that the domain controller first checks the Kerberos ticket for the user in the current session, but the credentials in Cyrillic are not fully converted for Java if you run the utility kinit.exe from the java package, it will first ask for a password, and then it will throw an exception error: krb_error 6 the client was not found in in the Kerberos database (6), the client was not found in the Kerberos database. At the same time, there is a message on the domain controller - Failure Audit, where it is written in the user name ???.
Perhaps this is due to the conversion by the com.sun.security.auth.module module.Krb5LoginModule in ASCII encoding.
I understand that only Latin letters should be used, but perhaps some users may encounter this problem.
Any thoughts on how to solve this problem?