What is in the ID file? (Edited the ID file in Notedpad)

HCL Domino Domino Forum
1

Hi AllI have created a User on Domino 6 server using the “Unique Org Unit” attribute.

The user was registered on Domino properly, without any problem.

The ID file for this user was also created properly for this user.

My customer is asking the following question:

He edited the ID file for the user in ascii mode is notepad and he found a entry in it , the entry was “PURSAFCN”

When i did it myself, i saw this entry in the ID file and it looked like this “PURSAFCN=usersfirstname userslastname/UOU”

(UOU → Stands for Unique Org Unit)

He wants to know, whats this “PURSAFCN”?

Do let me know if you have any idea about this entry PURSAFCN in the ID file.

Any help is more than welcome

Sunil

2

Subject: What is in the ID file? (Edited the ID file in Notedpad)

Hi,

Why does he wanna know what it is - what can he use it for?

//Kjeld

3

Subject: What is in the ID file? (Edited the ID file in Notedpad)

Well, scratch one ID file…

The ID file contains binary data, so editing it in an ASCII editor is certain to destroy it. Additionally, the ID file contains checksums to verify the integrity of the file, so editing it by hand would cause the checksums to fail to match and result in the ever-popular “Your ID file has been corrupted…” error message.

“PURSAFCN” is not a field in the ID file. The relevant piece that your customer saw was “CN=”. The Unique OU showed up on the end of that, since a unique org unit is a part of the common name, not part of the PKI or certificate chain. “PURSAF” is probably the end of a different component of the ID file… possibly the Field for the PUblic RSA key, which might indicate that he was editing his Notes certificate, which would cause the signature to fail and render it invalid.

If you want to change the name in an ID file, use the admin client to recertify it, rename it, or move it between organizations. Don’t screw around with text editors – even I won’t try to change an ID file with a text editor, and I have the source code. :slight_smile:

4

Subject: RE: What is in the ID file? (Edited the ID file in Notedpad)

This is interesting to me. I am interested in finding a user’s NotesName from their id file. It appears that I could parse the id file myself looking for the name, but I’m a bit hesitant to do so. Are there API calls out there that I can use to do this in a more elegant way?Thanks

Sam

5

Subject: *Use SECKFMGetUserName

6

Subject: RE: *Use SECKFMGetUserName

I can’t firgure out how to specify the id file for SECKFMGetUserName. It appears that this does the same thing as NotesSession.EffectiveUserName does (return the current user’s username). I am interested in getting the NotesName for an id file that is not the current user (without having to supply the password).Thanks

Sam

7

Subject: What is in the ID file? (Edited the ID file in Notedpad)

It’s a bad idea to go poking around the id file with Notepad - if you make a change and save the file you could destroy the file. If his org units are wrong then you should recertify the id.

8

Subject: What is in the ID file? (Edited the ID file in Notedpad)

What in the world is this user thinking???