National/unicode characters in login name

[Cantor, Scott]

> Is this a bug or a feature? How can make sure that only my correct username
> (gugalto) is working?

There may or may not sufficient pre-transform hooks to let you do that if you wanted to, but in terms of the end result, that's entirely on you, that's what the Subject Canonicalization feature is for. If you leave it on "simple" and default it, you'll get whatever they enter, and that's rarely a good idea. It's just the only usable default we can provide. An indirect lookup to LDAP via the resolver is a good strategy for normalizing names down, so that's provided as a built-in feature.

-- Scott