ID File

I know it possible to attach a users ID file to their mail DB for web access. Is it also possible to detach it from there so that it can be manipulated… for example change the password (via SECKFMChangePassword or something) and reattach it? If so how? I haven’t been able to find much on it.

I understand the ID file from a security perspective, but it really seems to make things like password management and having a Single-Sign-On environment, extremely difficult if not outright impossible.

What I’m really looking to be able to do is create a single web form where a user can go to change their password across all systems, and right now the ID file is the only one that I haven’t been able to find a good solution for. Anyone have any ideas?

Subject: C API functions

Check out the C API in ND7 for interfaces that expose the basic functionality used by DWA (attaching and detaching ID files from DBs, updating IDs with new certificates and policies, and encrypting, decrypting, signing, and verifying using that detached ID.

We’ve also exposed the ID File Recovery functionality through the C API functions in ND8, so you could leverage N/D’s built-in password reset functionality into your own custom applications.

dave

Subject: RE: C API functions

Thanks!!

Where’s the best place to find info on the C API?