amAuthAD.properties revision eff90ff0c76aeda1c8a5f091602c67f929ee29a2
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# The contents of this file are subject to the terms
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# of the Common Development and Distribution License
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# (the License). You may not use this file except in
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# compliance with the License.
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# You can obtain a copy of the License at
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# https://opensso.dev.java.net/public/CDDLv1.0.html or
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# See the License for the specific language governing
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# permission and limitations under the License.
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# When distributing Covered Code, include this CDDL
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# Header Notice in each file and include the License file
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# If applicable, add the following below the CDDL Header,
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# with the fields enclosed by brackets [] replaced by
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# your own identifying information:
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# "Portions Copyrighted [year] [name of copyright owner]"
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# $Id: amAuthAD.properties,v 1.5 2009/12/11 01:43:23 goodearth Exp $
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng# Portions Copyrighted 2011 ForgeRock AS
da14cebe459d3275048785f25bd869cb09b5307fEric Chengauthentication=Authentication Modules
da14cebe459d3275048785f25bd869cb09b5307fEric ChengLDAPex=Unknown LDAP exception.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengUPerror=Both user ID and password required.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengclasspathError=Class not found. Check class path.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengInvalidUP=Invalid user ID and password. Try again.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengNoUser=User ID not found.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengNoServer=Server cannot be contacted.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengNaming=Naming error has occurred.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengsunAMAuthADServiceDescription=Active Directory
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPasswordExp=Password Expires In: {0}
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPasswordReset=Reset the password.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPasswdMismatch=The password and the confirm password do not match.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengUPsame=Username and password must be different. Try again.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPInvalid=The password you have entered is invalid.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPasswdSame=The password must be different. Try again.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPasswdMinChars=Password contains fewer than minimum number of characters.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga101=Primary Active Directory Server
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga101.help=Use this list to set the primary Active Directory server used for authentication.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga101.help.txt=The Active Directory authentication module will use this list as the primary server for authentication. A single entry must \
da14cebe459d3275048785f25bd869cb09b5307fEric Chengbe in the format:<br/><br/><code>server:port</code><br/><br/>Multiple entries allow associations between OpenAM servers and an \
da14cebe459d3275048785f25bd869cb09b5307fEric ChengActive Directory server. \
da14cebe459d3275048785f25bd869cb09b5307fEric ChengThe format is:<br/><br/><code>local server name | server:port</code><br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric ChengThe local server name is the full name of the server from the list of servers and sites.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga102=Secondary Active Directory Server
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga102.help=Use this list to set the secondary (failover) Active Directory server used for authentication.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga102.help.txt=If the primary Active Directory server fails, the Active Directory authentication module will failover to the secondary \
da14cebe459d3275048785f25bd869cb09b5307fEric Chengserver. A single entry must be in the format:<br/><br/><code>server:port</code><br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric ChengMultiple entries allow associations between OpenAM servers and an Active Directory server.\
da14cebe459d3275048785f25bd869cb09b5307fEric ChengThe format is:<br/><br/><code>local server name | server:port</code><br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<i>NB </i>The local server name is the full name of the server from the list of servers and sites.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga103=DN to Start User Search
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga103.help=The search for accounts to be authenticated start from this base DN
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga103.help.txt=For a single server just enter the Base DN to be searched. Multiple OpenAM servers can have different base DNs for the search \
da14cebe459d3275048785f25bd869cb09b5307fEric ChengThe format is as follows:<br/><br/><code>local server name | search DN</code><br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<i>NB </i>The local server name is the full name of the server from the list of servers and sites.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga104=Bind User DN
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga104.help=The DN of an admin user used by the module to authentication to the LDAP server
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga104.help.txt=The LDAP module requires an administration account in order to perform functionality such as password reset.<br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<i>NB </i><code>cn=Directory Manager</code> should not be used in production systems.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga105=Bind User Password
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga105.help=The password of the administration account.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga106=Attribute Used to Retrieve User Profile
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga106.help=The LDAP module will use this attribute to search of the profile of an authenticated user.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga106.help.txt=This is the attribute used to find the profile of the authenticated user. Normally this will be the same attribute used to \
da14cebe459d3275048785f25bd869cb09b5307fEric Chengfind the user account. The value will be the name of the user used for authentication.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga107=Attributes Used to Search for a User to be Authenticated
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga107.help=The attributes specified in this list form the LDAP search filter.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga107.help.txt=The default value of uid will form the following search filter of <code>uid=<i>user</i></code>, if there are multiple \
da14cebe459d3275048785f25bd869cb09b5307fEric Chengvalues such as uid and cn, the module will create a search filter as follows <code>(|(uid=<i>user</i>)(cn=<i>user</i>))</code>
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga108=User Search Filter
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga108.help=This search filter will be appended to the standard user search filter.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga108.help.txt=This attribute can be used to append a custom search filter to the standard filter. For example: \
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<code>(objectClass=person)</code>would result in the following user search filter:<br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<code>(&(uid=<i>user</i>)(objectClass=person))</code>
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga109=Search Scope
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga109.help=The level in the Directory Server that will be searched for a matching user profile.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga109.help.txt=This attribute controls how the directory is searched.<br/><br/>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<ul><li><code>OBJECT</code>: Only the Base DN is searched.</li>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<li><code>ONELEVEL</code>: Only the single level below (and not the Base DN) is searched</li>\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<li><code>SUBTREE</code>: The Base DN and all levels below are searched</li></ul>
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga110=SSL/TLS Access to Active Directory Server
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga110.help=Ensures the SSL/TLS will be used to establish connections to the LDAP server.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga110.help.txt=If this property is enabled; all connections to the Active Directory server will be over SSL/TLS. The SSL certificate on \
da14cebe459d3275048785f25bd869cb09b5307fEric Chengthe Active Directory server must be valid or the certificate must be trusted and stored in the OpenAM local certificate file.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga111=Return User DN to DataStore
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga111.help=Controls whether the DN or the username is returned as the authentication principal.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga113=Active Directory Server Check Interval
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga113.help=The interval of the check used to detect failure in the Active Directory server; in minutes.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga113.help.txt=This is the frequency that the Active Directory module will check if the current Active Directory server is available. \
da14cebe459d3275048785f25bd869cb09b5307fEric ChengIf the server is not available then the module will failover to the other server.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga114=User Creation Attributes
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga114.help=Controls the mapping of local attribute to external attribute for dynamic profile creation.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga114.help.txt=If dynamic profile creation is enabled; this feature allows for a mapping between the attribute/values retrieved from \
da14cebe459d3275048785f25bd869cb09b5307fEric Chengthe users authenticated profile and the attribute/values that will be provisioned into their matching account in the data store.\
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng<br/><br/>The format of this property is: <br/><br/><code> local attr1|external attr1</code>
da14cebe459d3275048785f25bd869cb09b5307fEric ChengAcctInactive=Account in-activated or locked. Unlock or activate the account.
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng## Note level should have the highest
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng## number for i18N key since it should
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng## be the last attribute when viewed in
da14cebe459d3275048785f25bd869cb09b5307fEric Cheng## the adminconsole
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga500=Authentication Level
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga500.help=The authentication level associated with this module.
da14cebe459d3275048785f25bd869cb09b5307fEric Chenga500.help.txt=Each authentication module has an authentication level that can be used to indicate the level of security \
4ac67f0276a8313b5cefec38af347b94b7bfb526Anurag S. Maskeyassociated with the module; 0 is the lowest (and the default).
4ac67f0276a8313b5cefec38af347b94b7bfb526Anurag S. MaskeyInappAuth=Inappropriate Authentication
da14cebe459d3275048785f25bd869cb09b5307fEric ChengnoUserMatchFound=User not found.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengmultipleUserMatchFound=Multiple matches found for the user. Contact your system administrator to fix the problem.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengNosecserver=No secondary server provided.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengchoiceObject=OBJECT
da14cebe459d3275048785f25bd869cb09b5307fEric ChengchoiceOneLevel=ONELEVEL
da14cebe459d3275048785f25bd869cb09b5307fEric ChengchoiceSubTree=SUBTREE
da14cebe459d3275048785f25bd869cb09b5307fEric ChengHostInvalid=Invalid host name.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengHostUnknown=Unknown host {0}
da14cebe459d3275048785f25bd869cb09b5307fEric ChengSchBaseInvalid=Invalid search base.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengPwdInvalid=Invalid user password.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengFConnect=Connection failed.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengCredInvalid=Invalid credentials.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengUsrNotExist=User does not exist.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengFAuth=Authentication failed.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengUNAttr=User naming attribute is null.
da14cebe459d3275048785f25bd869cb09b5307fEric ChengUSchAttr=User search attributes must have at least one value.