Environment
NetIQ Access Manager 4.3
NetIQ Access Manager 4.2
NetIQ Access Manager 4.2
Situation
Kerberos authentication enabled on the NAM IDP server. To allow non kerberos users authenticate using the same contract, the fallback configuration is setup. When this is applied and users access the kerberos contract on IDP server without any tokens, the HTTP 401 response message returned by the IDP includes the Fallback login page as payload as expected.
In the case where users falling back from Kerberos are using languages like Japanese or Chinese, the page is rendered incorrectly with many by questionmarks ("?") - see the "labelshow" below:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
<table border=0>
<tr>
<td align=left>
<label class="labelshow">????:</label>
</td>
<td align=left>
<label class="placeholder">????:<br></label>
<input type="text" name="Ecom_User_ID" value="" class="placeholderclass" >
</td>
</tr>
<tr>
<td align=left>
<label class="labelshow">?????:</label>
</td>
<td align=left>
<label class="placeholder">?????:<br></label>
<input type="password" name="Ecom_Password" class="placeholderclass" >
</td>
</tr>
<tr>
<td align=right colspan=2 style="white-space: nowrap">
<input alt="????" border="0" name="loginButton2" src="/nidp/images/ja/btnlogin_ja.gif" type="image" value="Login" onClick="return imageSubmit()">
</td>
</tr>
</table>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
In the case where users falling back from Kerberos are using languages like Japanese or Chinese, the page is rendered incorrectly with many by questionmarks ("?") - see the "labelshow" below:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
<table border=0>
<tr>
<td align=left>
<label class="labelshow">????:</label>
</td>
<td align=left>
<label class="placeholder">????:<br></label>
<input type="text" name="Ecom_User_ID" value="" class="placeholderclass" >
</td>
</tr>
<tr>
<td align=left>
<label class="labelshow">?????:</label>
</td>
<td align=left>
<label class="placeholder">?????:<br></label>
<input type="password" name="Ecom_Password" class="placeholderclass" >
</td>
</tr>
<tr>
<td align=right colspan=2 style="white-space: nowrap">
<input alt="????" border="0" name="loginButton2" src="/nidp/images/ja/btnlogin_ja.gif" type="image" value="Login" onClick="return imageSubmit()">
</td>
</tr>
</table>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Resolution
Apply NAM 4.3 SP2.
Additional Information
Question marks not displayed after applying patch:
<tbody><tr> <td align="left"> <label class="labelshow">ユーザ名:</label> </td> <td align="left"> <label class="placeholder">ユーザ名:<br></label> <input name="Ecom_User_ID" value="" class="placeholderclass" type="text"> </td> </tr> <tr> <td align="left"> <label class="labelshow">パスワード:</label> </td> <td align="left"> <label class="placeholder">パスワード:<br></label> <input name="Ecom_Password" class="placeholderclass" type="password"> </td> </tr> <tr> <td colspan="2" style="white-space: nowrap" align="right"> <input alt="ログイン" name="loginButton2" src="/nidp/images/ja/btnlogin_ja.gif" value="Login" onclick="return imageSubmit()" type="image" border="0"> </td> </tr> </tbody>