amPasswordReset.properties revision 4a48635cccc646ac479830fd4df0ee8e10c5bd8d
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# The contents of this file are subject to the terms
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# of the Common Development and Distribution License
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# (the License). You may not use this file except in
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# compliance with the License.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# You can obtain a copy of the License at
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# https://opensso.dev.java.net/public/CDDLv1.0.html or
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# See the License for the specific language governing
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# permission and limitations under the License.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# When distributing Covered Code, include this CDDL
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# Header Notice in each file and include the License file
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# If applicable, add the following below the CDDL Header,
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# with the fields enclosed by brackets [] replaced by
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# your own identifying information:
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# "Portions Copyrighted [year] [name of copyright owner]"
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# $Id: amPasswordReset.properties,v 1.2 2008/06/25 05:40:36 qcheng Exp $
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# Portions Copyrighted 2011 ForgeRock Inc
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major# Portions Copyrighted 2012 Open Source Solution Technology Corporation
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majoriplanet-am-password-reset-service-description=Password Reset
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp109=Password Reset
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp101=User Validation
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp101.help=The naming attribute used to find the account where the password is being reset
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp102=Secret Question
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp102.help=List of secret questions available to the user
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp102.help.txt=The user can select from this list the question to which they would like to provide a password reset question.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp103=Search Filter
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp106=Bind Password
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp107=Reset Password Creator
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp107.help=The class that generates the new password as part of password reset
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp107.help.txt=When the user successfully answers their password reset question, they are emailed a new password. This class is used to \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorgenerate said password. The custom implementation can be used as must implement the following interface:<br/><br/>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<code>com.sun.identity.password.plugins.PasswordGenerator</code>
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp108=Password Reset Notification Class
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp108.help=The class used to notify the user of their new password
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp108.help.txt=The default implementation using email to notify the user of their new password. A custom implementation can be used \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major(perhaps to inform the user using SMS). A custom interface must implement the following interface:<br/><br/>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<code>com.sun.identity.password.plugins.NotifyPassword</code>
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp110=Personal Question
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp110.help=Allows users to have their own <i>personal</i> password reset question
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp111=Maximum Number of Questions
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp111.help=Sets the maximum number of questions displayed on the password reset page.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp111.1=Force Change Password on Next Login
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp111.1.help=The user must change their password when they first login with their reset password.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp112=Password Reset Failure Lockout
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp112.help=Enables account lockout functionality for users using password reset
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp112.help.txt=OpenAM can track the number of failed password reset questions answered by a user over time and if a pre-defined limit is \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorbreached, OpenAM can lockout the users account and perform additional functions.<br/><br/><i>NB </i>This functionality \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majoris in addition to any account lockout behaviour implemented by the LDAP Directory Server.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp113=Password Reset Failure Lockout Count
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp113.help=The maximum number of failed password reset question for a user before their account is locked.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp113.help.txt=This setting controls the maximum number of failed password reset questions a user can have during the lockout \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorinterval before OpenAM locks the users account.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp114=Password Reset Failure Lockout Interval
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp114.help=The lockout interval time is in minutes.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp114.help.txt=OpenAM tracks the failed password reset question count for a user over the lockout interval.<br/><br/>For example: If \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorthe lockout interval is 5 minutes and the lockout count is 5; the user will have to have failed to answer a password reset question 5 times \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorover the previous 5 minutes for the account to be locked. Failed attempts to answer a password reset question that occurred outside of the \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major5 minute interval are ignored.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp115=Email Address to Send Lockout Notification
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp115.help=An email address or set of email addresses that receive notifications about account lockout events.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp115.help.txt=OpenAM can be configured to send a localisable email message to a set of email addresses when account lockout \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorevents occur. The contents of the email message is configured using the following properties in the \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<code>amAuth.properties</code> file.<br/><ul><li><code>lockOutEmailFrom</code> : The "From" address of the email message</li>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<li><code>lockOutEmailSub</code> : The subject of the email message</li>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<li><code>lockOutEmailMsg</code> : The contents of the email message</li></ul><br/>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter MajorThe identity for whom the account has been locked is included in the email message.<br/><br/>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter MajorThe format of this property is:<br/>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<code>emailaddress|locale|charset</code>. Multiple email addresses are space-separated.<br/>\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter MajorEmail addresses must include the domain name, such as <code>admin@example.com</code>.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp116=Warn User After N Failures
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp116.help=Warn the user when they reach this level of failed authentications.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp116.help.txt=The user will be given a warning when they reach this level of failed password reset questions during the lockout interval.\
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major<br/>The text of the lockout warning is configured using the <code>lockOutWarning</code> property in the <code>amAuth.properties</code> file.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp117=Password Reset Failure Lockout Duration
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp117.help=The duration of the users account lockout, in minutes.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp117.help.txt=OpenAM can either lockout the users account indefinitely (until administration action) by setting the duration to 0, \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Major(the default) or OpenAM can lock the users account for a given number of minutes. After the lockout interval, the user will be able \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorto successfully authenticate to OpenAM.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp118=Password Reset Lockout Attribute Name
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp118.help=Name of custom lockout attribute
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp118.help.txt=When OpenAM locks an account, the <code>inetuserstatus</code> attribute in the locked account is set to Inactive. \
fb379c70e3fd8a537f311b99be4759ae41e02750Peter MajorIn addition, OpenAM can set the value of another attribute in the users profile.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp119=Password Reset Lockout Attribute Value
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp119.help=Value to set in custom lockout attribute
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorp119.help.txt=This is the value that will be set on the custom attribute in the users profile when they account is locked.
fb379c70e3fd8a537f311b99be4759ae41e02750Peter Majorfavourite-restaurant=What is your favorite restaurant?