Using sAMAccountName instead of CN in role mapping file?

This is not possible in current releases, but improvements to role mapping are a priority for us, and we hope to be offer a better solution in the near future.

This is not intentional - you ought to be able to define role mappings for multibyte characters, if it doesn't work then that's a bug/oversight.

I'll have a look internally, but it would be helpful if you could file a support case and provide a clear reproduction of the problem.