Finding out what distributed identity information RACF has about you

Your user profile indicates whether any distributed identities have been associated with your RACF® user ID. The associations, also referred to as mappings, are defined in profiles in the IDIDMAP class. Use the RACMAP command to see information about the distributed identities that are associated with your RACF user ID.

Note: The RACF security administrator controls whether you can use the RACMAP command to view the distributed identities associated with your user ID.

Enter any one of the following commands to see information about all of the distributed identities associated with your user ID. Because the ID keyword defaults to your RACF user ID, and the LISTMAP keyword is the default if you do not specify MAP or DELMAP. these commands all have the same effect:

RACMAP
RACMAP LISTMAP
RACMAP ID(your_RACF_user_ID)
RACMAP ID(your_RACF_user_ID) LISTMAP

If your RACF user ID was NET1ID, you would see output similar to the following sample:

Figure 1. Sample RACMAP output

Mapping information for user NET1ID:
 Label: General Internet ID Map
 Distributed Identity User Name Filter:
   >OU=Internet Demo,O=BobsMart Software Inc,L=Internet<
 Registry name:
   >ldaps//us.bobsmart.com<

Label is a text string assigned to the mapping that is unique to the user ID.
Distributed Identity User Name Filter is a filter for a distributed identity in X.500 distributed name format.
Registry name is the name of the registry used to authenticate the distributed identity.