amAuthLDAP.properties revision 0e08f95a8576577e8f203d929bf12828c6545d1d
97a9a944b5887e91042b019776c41d5dd74557aferikabele# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
c3ff7979929443ce8cbc881239f6cf130b4e256aslive# Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
c3ff7979929443ce8cbc881239f6cf130b4e256aslive# The contents of this file are subject to the terms
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# of the Common Development and Distribution License
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# (the License). You may not use this file except in
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# compliance with the License.
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen# You can obtain a copy of the License at
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen# https://opensso.dev.java.net/public/CDDLv1.0.html or
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen# See the License for the specific language governing
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# permission and limitations under the License.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# When distributing Covered Code, include this CDDL
d229f940abfb2490dee17979e9a5ff31b7012eb5rbowen# Header Notice in each file and include the License file
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# If applicable, add the following below the CDDL Header,
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# with the fields enclosed by brackets [] replaced by
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# your own identifying information:
3f08db06526d6901aa08c110b5bc7dde6bc39905nd# "Portions Copyrighted [year] [name of copyright owner]"
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nd# $Id: amAuthLDAP.properties,v 1.8 2010/01/25 22:09:15 qcheng Exp $
ceb80b53389aae381f54a02e75cca69077c4fb2fgryzor# Portions Copyrighted 2011-2015 ForgeRock AS.
f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung# Portions Copyrighted 2012 Open Source Solution Technology Corporation
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndauthentication=Authentication Modules
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cndiplanet-am-auth-ldap-service-description=LDAP
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndUPerror=Both user ID and password are required.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndclasspathError=Class not found. Check the class path.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndNoServer=Server cannot be contacted.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndNaming=Naming error has occurred.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivePasswordExp=Password expires in: {0}
c3ff7979929443ce8cbc881239f6cf130b4e256asliveGraceLogins=Your password has expired and you have {0} grace logins remaining.
c3ff7979929443ce8cbc881239f6cf130b4e256asliveTimeBeforeExpiration=Password expires in: {0}
c3ff7979929443ce8cbc881239f6cf130b4e256aslivePasswordReset=Password must be reset.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivePasswdMismatch=The password and the confirm password do not match.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivePasswordInvalid=Your password does not comply with present password policy.
c3ff7979929443ce8cbc881239f6cf130b4e256asliveNewPasswordInvalid=Your new password does not comply with present password policy.
c3ff7979929443ce8cbc881239f6cf130b4e256asliveUPsame=Username and password must be different. Try again.
9bcfc3697a91b5215893a7d0206865b13fc72148ndinPwdQual=New password does not meet the password policy requirements.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivepwdInHist=New password has been used previously.
294efc5b9fb1368ce132894789845581e2b4c574erikabelepwdToShort=New password is too short.
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cndpwdToYoung=Password has been changed recently, cannot change password.
20189240503ef2c8f5dc6e2248b57faab4b23b5andPInvalid=The password you entered is invalid.
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cndPasswdSame=The password must be different. Try again.
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cnda101=Primary LDAP Server
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cnda101.help=Use this list to set the primary LDAP server used for authentication.
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cnda101.help.txt=The LDAP authentication module will use this list as the primary server for authentication. A single entry must be in the \
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cndformat:<br/><br/><code>ldap_server:port</code><br/><br/>Multiple entries allow associations between OpenAM servers and a LDAP server. \
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cndThe format is:<br/><br/><code>local server name | server:port</code><br/><br/>\
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cndThe local server name is the full name of the server from the list of servers and sites.
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cnda102=Secondary LDAP Server
294efc5b9fb1368ce132894789845581e2b4c574erikabelea102.help=Use this list to set the secondary (failover) LDAP server used for authentication.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda102.help.txt=If the primary LDAP server fails, the LDAP authentication module will failover to the secondary server. \
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndA single entry must be in the format:<br/><br/><code>ldap_server:port</code><br/><br/>\
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndMultiple entries allow associations between OpenAM servers and a LDAP server. \
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndThe format is:<br/><br/><code>local server name | server:port</code><br/><br/>\
117c1f888a14e73cdd821dc6c23eb0411144a41cnd<i>NB </i>The local server name is the full name of the server from the list of servers and sites.
d994ffd6424147f22d3d0e7afd827f3b021c201fcovenera103=DN to Start User Search
46fb146a4ec8c97d8dccb8c0c96a6cfddfc5442cnda103.help=The search for accounts to be authenticated start from this base DN
0f60998368b493f90120180a93fc2e1e74490872covenera103.help.txt=For a single server just enter the Base DN to be searched. Multiple OpenAM servers can have different base DNs for the search \
117c1f888a14e73cdd821dc6c23eb0411144a41cndThe format is as follows:<br/><br/><code>local server name | search DN</code><br/><br/>\
117c1f888a14e73cdd821dc6c23eb0411144a41cnd<i>NB </i>The local server name is the full name of the server from the list of servers and sites.
6eed902e5b4d3e016e220bfbf8769a87c4cb242enoodla104=Bind User DN
6eed902e5b4d3e016e220bfbf8769a87c4cb242enoodla104.help=The DN of an admin user used by the module to authentication to the LDAP server
0567f5109ab8fca175d5b7c7dab793bd2ea7ade0rbowena104.help.txt=The LDAP module requires an administration account in order to perform functionality such as password reset.<br/><br/>\
0567f5109ab8fca175d5b7c7dab793bd2ea7ade0rbowen<i>NB </i><code>cn=Directory Manager</code> should not be used in production systems.
117c1f888a14e73cdd821dc6c23eb0411144a41cnda105=Bind User Password
fd145f5b8eb9e25c01ad6c9bdfcd799a030c2cc8covenera105.help=The password of the administration account.
2a0b626c070fea0a68a071a4160ff695eb4731danda106=Attribute Used to Retrieve User Profile
2a0b626c070fea0a68a071a4160ff695eb4731danda106.help=The LDAP module will use this attribute to search of the profile of an authenticated user.
2a0b626c070fea0a68a071a4160ff695eb4731danda106.help.txt=This is the attribute used to find the profile of the authenticated user. Normally this will be the same attribute used to \
281c0b44de97d9942428ff51bc2be0e8e61ed87bkessfind the user account. The value will be the name of the user used for authentication.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda107=Attributes Used to Search for a User to be Authenticated
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda107.help=The attributes specified in this list form the LDAP search filter.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda107.help.txt=The default value of uid will form the following search filter of <code>uid=<i>user</i></code>, if there are multiple \
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndvalues such as uid and cn, the module will create a search filter as follows <code>(|(uid=<i>user</i>)(cn=<i>user</i>))</code>
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda108=User Search Filter
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda108.help=This search filter will be appended to the standard user search filter.
2a0b626c070fea0a68a071a4160ff695eb4731danda108.help.txt=This attribute can be used to append a custom search filter to the standard filter. For example: \
2a0b626c070fea0a68a071a4160ff695eb4731dand<code>(objectClass=person)</code>would result in the following user search filter:<br/><br/>\
30471a4650391f57975f60bbb6e4a90be7b284bfhumbedooh<code>(&(uid=<i>user</i>)(objectClass=person))</code>
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda109=Search Scope
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda109.help=The level in the Directory Server that will be searched for a matching user profile.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda109.help.txt=This attribute controls how the directory is searched.<br/><br/>\
08842292d2f1550b40ae73e0dafc7641c5955c82nd<ul><li><code>OBJECT</code>: Only the Base DN is searched.</li>\
08842292d2f1550b40ae73e0dafc7641c5955c82nd<li><code>ONELEVEL</code>: Only the single level below (and not the Base DN) is searched</li>\
42af92a661a06b3cebc88d585aad75064a309d51nd<li><code>SUBTREE</code>: The Base DN and all levels below are searched</li></ul>
08842292d2f1550b40ae73e0dafc7641c5955c82nda110=LDAP Connection Mode
17ade6df5ec233536985eb1c130a906c725dd614humbedooha110.help=Defines which protocol/operation is used to establish the connection to the LDAP Directory Server.
17ade6df5ec233536985eb1c130a906c725dd614humbedooha110.help.txt=If 'LDAP' is selected, the connection <b>won't be secured</b> and passwords are transferred in <b>cleartext</b> over the network.<br/> \
17ade6df5ec233536985eb1c130a906c725dd614humbedoohIf 'LDAPS' is selected, the connection is secured via SSL or TLS. <br/> \
17ade6df5ec233536985eb1c130a906c725dd614humbedoohIf 'StartTLS' is selected, the connection is secured by using StartTLS extended operation.
17ade6df5ec233536985eb1c130a906c725dd614humbedooha1103=StartTLS
17ade6df5ec233536985eb1c130a906c725dd614humbedooha111=Return User DN to DataStore
17ade6df5ec233536985eb1c130a906c725dd614humbedooha111.help=Controls whether the DN or the username is returned as the authentication principal.
17ade6df5ec233536985eb1c130a906c725dd614humbedooh## Note level should have the highest
17ade6df5ec233536985eb1c130a906c725dd614humbedooh## number for i18N key since it should
17ade6df5ec233536985eb1c130a906c725dd614humbedooh## be the last attribute when viewed in
17ade6df5ec233536985eb1c130a906c725dd614humbedooh## the adminconsole
17ade6df5ec233536985eb1c130a906c725dd614humbedooha500=Authentication Level
17ade6df5ec233536985eb1c130a906c725dd614humbedooha500.help=The authentication level associated with this module.
17ade6df5ec233536985eb1c130a906c725dd614humbedooha500.help.txt=Each authentication module has an authentication level that can be used to indicate the level of security \
17ade6df5ec233536985eb1c130a906c725dd614humbedoohassociated with the module; 0 is the lowest (and the default).
17ade6df5ec233536985eb1c130a906c725dd614humbedooha114=User Creation Attributes
17ade6df5ec233536985eb1c130a906c725dd614humbedooha114.help=Controls the mapping of local attribute to external attribute for dynamic profile creation.
17ade6df5ec233536985eb1c130a906c725dd614humbedooha114.help.txt=If dynamic profile creation is enabled; this feature allows for a mapping between the attribute/values retrieved from \
17ade6df5ec233536985eb1c130a906c725dd614humbedoohthe users authenticated profile and the attribute/values that will be provisioned into their matching account in the data store.\
17ade6df5ec233536985eb1c130a906c725dd614humbedooh<br/><br/>The format of this property is: <br/><br/><code> local attr1|external attr1</code>
17ade6df5ec233536985eb1c130a906c725dd614humbedooha115=Minimum Password Length
17ade6df5ec233536985eb1c130a906c725dd614humbedooha115.help=Enforced when the user is resetting their password as part of the authentication.
17ade6df5ec233536985eb1c130a906c725dd614humbedooha115.help.txt=If the user needs to reset their password as part of the authentication process, the authentication module can enforce \
17ade6df5ec233536985eb1c130a906c725dd614humbedooha minimum password length. This is separate from any password length controls from the underlying LDAP server. If the external LDAP \
17ade6df5ec233536985eb1c130a906c725dd614humbedoohserver password policy is enforcing password length, set this value to 0 to avoid confusion.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda116=LDAP Behera Password Policy Support
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda116.help=Enables support for modern LDAP password policies
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4nda116.help.txt=LDAP Behera Password policies are supported by modern LDAP servers such as OpenDJ. If this functionality is disabled then \
c3ff7979929443ce8cbc881239f6cf130b4e256asliveonly the older Netscape VCHU password policy standard will be enforced.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea117=Trust All Server Certificates
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea117.help=Enables a <code>X509TrustManager</code> that trusts all certificates.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea117.help.txt=This feature will allow the LDAP authentication module to connect to LDAP servers protected by self signed or invalid \
c3ff7979929443ce8cbc881239f6cf130b4e256aslivecertificates (such as invalid hostname).<br/><br/>\
c3ff7979929443ce8cbc881239f6cf130b4e256aslive<i>NB </i>Use this feature with care as it bypasses the normal certificate verification process
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea118=LDAP Connection Heartbeat Interval
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea118.help=Specifies how often should OpenAM send a heartbeat request to the directory.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea118.help.txt=This setting controls how often OpenAM <b>should</b> send a heartbeat search request to the configured \
c3ff7979929443ce8cbc881239f6cf130b4e256aslivedirectory. If a connection becomes unresponsive (e.g. due to a network error) then it may take up to the interval \
c3ff7979929443ce8cbc881239f6cf130b4e256asliveperiod before the problem is detected. Use along with the Heartbeat Time Unit parameter to define the exact interval. \
c3ff7979929443ce8cbc881239f6cf130b4e256asliveZero or negative value will result in disabling heartbeat requests.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea119=LDAP Connection Heartbeat Time Unit
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea119.help=Defines the time unit corresponding to the Heartbeat Interval setting.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivea119.help.txt=This setting controls how often OpenAM <b>should</b> send a heartbeat search request to the \
c3ff7979929443ce8cbc881239f6cf130b4e256asliveconfigured directory. If a connection becomes unresponsive (e.g. due to a network error) then it may take up to the \
6eed902e5b4d3e016e220bfbf8769a87c4cb242enoodlinterval period before the problem is detected. Use along with the Heartbeat Interval parameter to define the exact \
6eed902e5b4d3e016e220bfbf8769a87c4cb242enoodla1191=second
6eed902e5b4d3e016e220bfbf8769a87c4cb242enoodla1192=minute
4f40306d4b89f0f3374dc5c1e0417f9c986ebeb5humbedooha120=LDAP operations timeout
4f40306d4b89f0f3374dc5c1e0417f9c986ebeb5humbedooha120.help=Defines the timeout in seconds OpenAM should wait for a response of the Directory Server - <code>0</code> means no timeout.
4f40306d4b89f0f3374dc5c1e0417f9c986ebeb5humbedooha120.help.txt=If the Directory Server's host is down completely or the TCP connection became stale OpenAM waits until operation \
4f40306d4b89f0f3374dc5c1e0417f9c986ebeb5humbedoohtimeouts from the OS or the JVM are applied. However this setting allows more granular control within OpenAM itself. \
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndA value of <code>0</code> means NO timeout is applied on OpenAM level and the timeouts from the JVM or OS will apply.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndPasswdMinChars=New password contains fewer than minimum number of characters.
0c4abc32c00611fe1d52c9661f5cc79a3f74c6d4ndAcctInactive=Account is locked or not activated. Unlock or activate the account to continue.
c3ff7979929443ce8cbc881239f6cf130b4e256aslive#ExceedRetryLimit=Exceed password retry limit. Please try later.
97a9a944b5887e91042b019776c41d5dd74557aferikabeleExceedRetryLimit=Authentication failed.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivenoUserMatchFound=User not found.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivemultipleUserMatchFound=Multiple matches found for this user. Contact your system administrator to fix the problem.
c3ff7979929443ce8cbc881239f6cf130b4e256asliveNosecserver=No secondary server provided.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivechoiceObject=OBJECT
c3ff7979929443ce8cbc881239f6cf130b4e256aslivechoiceOneLevel=ONELEVEL
08842292d2f1550b40ae73e0dafc7641c5955c82ndchoiceSubTree=SUBTREE
c3ff7979929443ce8cbc881239f6cf130b4e256asliveHostInvalid=Invalid host name.
c3ff7979929443ce8cbc881239f6cf130b4e256asliveHostUnknown=Unknown host {0}.
c3ff7979929443ce8cbc881239f6cf130b4e256asliveSchBaseInvalid=Invalid search base.
c3ff7979929443ce8cbc881239f6cf130b4e256aslivePwdInvalid=Invalid user password.
08842292d2f1550b40ae73e0dafc7641c5955c82ndFConnect=Connection failed.
08842292d2f1550b40ae73e0dafc7641c5955c82ndCredInvalid=Invalid credentials.
08842292d2f1550b40ae73e0dafc7641c5955c82ndUsrNotExist=User does not exist :
08842292d2f1550b40ae73e0dafc7641c5955c82ndUNAttr=User naming attribute is null.
08842292d2f1550b40ae73e0dafc7641c5955c82ndUSchAttr=User search attribute must have at least one value.
08842292d2f1550b40ae73e0dafc7641c5955c82ndminutes=mns
08842292d2f1550b40ae73e0dafc7641c5955c82ndseconds=sec
08842292d2f1550b40ae73e0dafc7641c5955c82ndi18nTrue=Enabled
08842292d2f1550b40ae73e0dafc7641c5955c82ndi18nFalse=Disabled