amPasswordReset.properties revision 029810b6eb7faa8ff527921f9a2ea897b05a2006
4765N/A# $Id: amPasswordReset.properties,v 1.2 2008/06/25 05:40:36 qcheng Exp $
1094N/Ap102.help.txt=The user can select from this list the question to which they would like to provide a password reset question.
1094N/Ap107.help.txt=When the user successfully answers their password reset question, they are emailed a new password. This class is used to \
1094N/Agenerate said password. The custom implementation can be used as must implement the following interface:<br/><br/>\
1094N/Ap108.help.txt=The default implementation using email to notify the user of their new password. A custom implementation can be used \
1094N/A(perhaps to inform the user using SMS). A custom interface must implement the following interface:<br/><br/>\
1094N/Ap111.1.help=The user must change their password when they first login with their reset password.
1094N/Ap112.help.txt=OpenAM can track the number of failed password reset questions answered by a user over time and if a pre-defined limit is \
1094N/Abreached, OpenAM can lockout the users account and perform additional functions.<br/><br/><i>NB </i>This functionality \
1094N/Ap113.help=The maximum number of failed password reset question for a user before their account is locked.
1094N/Ap113.help.txt=This setting controls the maximum number of failed password reset questions a user can have during the lockout \
1094N/Ap114.help.txt=OpenAM tracks the failed password reset question count for a user over the lockout interval.<br/><br/>For example: If \
1094N/Athe lockout interval is 5 minutes and the lockout count is 5; the user will have to have failed to answer a password reset question 5 times \
1094N/Aover the previous 5 minutes for the account to be locked. Failed attempts to answer a password reset question that occurred outside of the \
1094N/Ap115.help=An email address or set of email addresses that receive notifications about account lockout events.
1948N/Ap115.help.txt=OpenAM can be configured to send a localisable email message to a set of email addresses when account lockout \
1948N/Aevents occur. The contents of the email message is configured using the following properties in the \
1094N/A<code>amAuth.properties</code> file.<br/><ul><li><code>lockOutEmailFrom</code> : The "From" address of the email message</li>\
1094N/AThe identity for whom the account has been locked is included in the email message.<br/><br/>\
1094N/A<code>emailaddress|locale|charset</code>. Multiple email addresses are space-separated.<br/>\
1094N/Ap116.help.txt=The user will be given a warning when they reach this level of failed password reset questions during the lockout interval.\
1094N/A<br/>The text of the lockout warning is configured using the <code>lockOutWarning</code> property in the <code>amAuth.properties</code> file.
1094N/Ap117.help.txt=OpenAM can either lockout the users account indefinitely (until administration action) by setting the duration to 0, \
1094N/A(the default) or OpenAM can lock the users account for a given number of minutes. After the lockout interval, the user will be able \
1094N/Ap118.help.txt=When OpenAM locks an account, the <code>inetuserstatus</code> attribute in the locked account is set to Inactive. \
1094N/Ap119.help.txt=This is the value that will be set on the custom attribute in the users profile when they account is locked.
1094N/Ap120.help=Name of the identity attribute that holds the e-mail address. Default value is <code>mail</code>.
1094N/Ap120.help.txt=When a password reset process initiated OpenAM will try to send out an e-mail about the attempt of resetting the password, and later on the new password value as well. This property will tell OpenAM which attribute holds the user's e-mail address in the data store.
1094N/Ap121.help.txt=OpenAM will throw error when any of the invalid characters are found in naming attribute by running regular expression defined in this property. The defaults are <code>whitespace, parentheses, underscore, percent, asterisk</code>. This property can be changed to any regular expression to locate invalid characters.