Github user VipinRathor commented on the issue: https://github.com/apache/zeppelin/pull/2923 This can also be tested via REST APIs like this: 1. Login and get cookie as CaMel case user: curl -iv -b /tmp/cookie -c /tmp/cookie --data "userName=CaMel&password=passw0rd" -X POST http://localhost:9995/api/login 2. Access a notebook or run some paragraph using the same cookie: curl -iv -b /tmp/cookie -c /tmp/cookie http://localhost:9995/api/notebook/2D9Q95A3K 3. Operation will be allowed with following debug log message: DEBUG [2018-04-12 08:33:20,274] ({qtp2146608740-19 - /api/notebook/2D9Q95A3K} SecurityUtils.java[getPrincipal]:105) - converting principal name CaMel to lower case:camel
---