John Paschoud wrote:
> We don't use the visible userID (e.g. 'paschoud' in my case) as part of
> the ePTID hash; but we maintain a directory attribute that's a
> serially-assigned number (never re-used, AFAIK, and invented originally
> as an arbitrary unique database key) and use that instead.
I'd say that was an even better solution than (say) a year-qualified
user name, as it even allows for the user name to change without
changing the resulting ePTI values.
If you don't have a serial number attribute, you may have (or can
establish) a GUID-type record identifier that can serve equally well.
Such a value can be arbitrarily long, as the hashing process will boil
everything down to the same length ePTI value in the end anyway.
-- Ian
|