Not sure if this potentially is an issue:
JabberIDs are case in-sensitive, whereas URIs are case sensitive!
I tried a testcase where a user was called systemUser (guess what he had rights to do? 😉 ), and when using that URI in couldn’t authenticate. It has taken me at least 45 minutes to find the when calling XMPPconnection.getUser() in the smack library the username is converted to lowercase. I use this method to add the user to the list of users with system rights, so when authenticating the JabberID systemUser, then this wasn’t on the list!!
It is obviously easy to hack this problem by checking lowercase versions of IDs,, but this is an awful hack, which might break, unless we specify that MeaUserID == jabberID and must be unique in lowercase versions.
Is this a fair assumption? I don’t know…
(EDIT: I’ve added this to the issues list at www.meaggregator.org)