3139N/A# The contents of this file are subject to the terms of the Common Development and

3139N/A# Distribution License (the License). You may not use this file except in compliance with the

3139N/A# License.

3139N/A#

3139N/A# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the

3139N/A# specific language governing permission and limitations under the License.

2852N/A#

3356N/A# When distributing Covered Software, include this CDDL Header Notice in each file and include

3356N/A# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL

3237N/A# Header, with the fields enclosed by brackets [] replaced by your own identifying

3356N/A# information: "Portions copyright [year] [name of copyright owner]".

3139N/A#

3139N/A# Copyright 2014-2015 ForgeRock AS.

3356N/A#

3139N/A# Portions Copyrighted 2015 Nomura Research Institute, Ltd.

3139N/A

3139N/A# Module name on console

3139N/Aiplanet-am-auth-scripted-service-description=Scripted Module

3139N/A

3139N/A# Global settings

3139N/Ag101=Server-side Script Timeout

3139N/Ag101.help=The maximum execution time any individual script should take on the server (in seconds).

3139N/Ag101.help.txt=Server-side scripts will be forcibly stopped after this amount of execution time.

3139N/Ag102=Core thread pool size

3139N/Ag102.help=The core size of the thread pool from which scripts will operate.

3139N/Ag103=Maximum thread pool size

3139N/Ag103.help=The maximum size of the thread pool from which scripts will operate.

3139N/Ag103.help.txt=New threads will be created up to this size once the task queue reaches capacity. Has no effect if the \

3139N/A queue is unbounded.

3139N/Ag104=Thread pool queue size

3139N/Ag104.help=Size of queue to use for buffering script execution request when core pool is at capacity.

3139N/Ag104.help.txt=Use -1 for an unbounded queue (this disables the maximum pool size setting). For short, CPU-bound \

3139N/A scripts, consider a small pool size and larger queue length. For I/O-bound scripts (e.g., REST calls) consider \

3139N/A a larger maximum pool size and a smaller queue. Not hot-swappable: restart server for changes to take effect.

3139N/Ag105=Thread idle timeout (seconds)

3139N/Ag105.help=Length of time (in seconds) to wait before terminating threads.

3139N/Ag105.help.txt=Length of time (in seconds) to wait before terminating threads that were started when the queue reached \

3139N/A capacity. Only applies to threads beyond the core pool size (up to the maximum size).

3139N/Ag106=Java class whitelist

3139N/Ag106.help=List of patterns of allowed Java classes that may be loaded/accessed by scripts.

3139N/Ag106.help.txt=Each Java class accessed by a script must match at least one of these patterns. Use '*' as a wildcard, \

3139N/A e.g. <code>java.lang.*</code>

3139N/Ag107=Java class blacklist

3139N/Ag107.help=List of patterns of Java classes that must not be accessed by a script.

3139N/Ag107.help.txt=This blacklist is applied after the whitelist to apply additional restrictions. For instance you may \

3139N/A whitelist java.lang.* and then blacklist java.lang.System and java.lang.Runtime. It is recommended to always prefer \

3139N/A specific whitelists where possible.

3139N/Ag108=Use system SecurityManager

3139N/Ag108.help=Indicates whether the system SecurityManager should also be consulted when checking access to Java classes.

3139N/Ag108.help.txt=If enabled, then the checkPackageAccess method will be called for each Java class accessed. If no \

3139N/A SecurityManager is configured, then this has no effect.

3139N/A

3139N/A# Module settings

3139N/Aa101=Client-side Script Enabled

3139N/Aa101.help=Enable this setting if the client-side script should be executed.

3139N/Aa102=Client-side Script

3139N/Aa102.help=The client-side script.

3139N/Aa103=Server-side Script Language

3139N/Aa103.help=The language the server-side script is written in.

3139N/Aa103.help.txt=This is used to determine how to validate the script, as well as which engine to run the script within.

3139N/Aa104=Server-side Script

3139N/Aa104.help=The server-side script to execute.

3139N/Aa104.help.txt=This script will be run on the server, subsequent to any client script having returned. It can be \

3139N/A written in the selected language.

3139N/Aa500=Authentication Level

3139N/Aa500.help=The authentication level associated with the authentication module.

3139N/Aa500.help.txt=Each authentication module has an authentication level that can be used to indicate the level of \

3139N/A security associated with the module; 0 is the lowest (and the default).

3139N/A

3139N/A# Module localizations

3139N/Achoice1=JavaScript

3139N/Achoice2=Groovy

3139N/Alanguage-not-supported=The chosen Scripting Language is not supported

3139N/A