I have now upgraded to Glassfish 3. No luck. The problem remains; the name of a principal may [i]only[/i] contain 7-bit ASCII characters. (For example, "übergeek" won't work.) Otherwise the user can't login.
Isn't this a bug??
[Message sent by forum member 'tmpsa']
http://forums.java.net/jive/thread.jspa?messageID=482103