I've noticed that if the Forgot Password portlet in the User Application
is set to not allow wildcards it results in the user having to enter their
username in the correct case when they have forgotten their password,
which causes confusion for the user. When wildcards are allowed it is not
case sensistive, but the use of wildcards can allow users to see the DN of
other users, which is not something we want to allow. Is this a bug or is
it designed to work this way? Is there any way to disallow wildcards but
allow the username entry to be case insensitive?