# The contents of this file are subject to the terms of the Common Development and

# Distribution License (the License). You may not use this file except in compliance with the

# License.

#

# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the

# specific language governing permission and limitations under the License.

#

# When distributing Covered Software, include this CDDL Header Notice in each file and include

# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL

# Header, with the fields enclosed by brackets [] replaced by your own identifying

# information: "Portions copyright [year] [name of copyright owner]".

#

# Copyright 2014-2015 ForgeRock AS.

#

# Portions Copyrighted 2015 Nomura Research Institute, Ltd.

# Module name on console

iplanet-am-auth-scripted-service-description=Scripted Module

# Global settings

g101=Server-side Script Timeout

g101.help=The maximum execution time any individual script should take on the server (in seconds).

g101.help.txt=Server-side scripts will be forcibly stopped after this amount of execution time.

g102=Core thread pool size

g102.help=The core size of the thread pool from which scripts will operate.

g103=Maximum thread pool size

g103.help=The maximum size of the thread pool from which scripts will operate.

g103.help.txt=New threads will be created up to this size once the task queue reaches capacity. Has no effect if the \

queue is unbounded.

g104=Thread pool queue size

g104.help=Size of queue to use for buffering script execution request when core pool is at capacity.

g104.help.txt=Use -1 for an unbounded queue (this disables the maximum pool size setting). For short, CPU-bound \

scripts, consider a small pool size and larger queue length. For I/O-bound scripts (e.g., REST calls) consider \

a larger maximum pool size and a smaller queue. Not hot-swappable: restart server for changes to take effect.

g105=Thread idle timeout (seconds)

g105.help=Length of time (in seconds) to wait before terminating threads.

g105.help.txt=Length of time (in seconds) to wait before terminating threads that were started when the queue reached \

capacity. Only applies to threads beyond the core pool size (up to the maximum size).

g106=Java class whitelist

g106.help=List of patterns of allowed Java classes that may be loaded/accessed by scripts.

g106.help.txt=Each Java class accessed by a script must match at least one of these patterns. Use '*' as a wildcard, \

e.g. <code>java.lang.*</code>

g107=Java class blacklist

g107.help=List of patterns of Java classes that must not be accessed by a script.

g107.help.txt=This blacklist is applied after the whitelist to apply additional restrictions. For instance you may \

whitelist java.lang.* and then blacklist java.lang.System and java.lang.Runtime. It is recommended to always prefer \

specific whitelists where possible.

g108=Use system SecurityManager

g108.help=Indicates whether the system SecurityManager should also be consulted when checking access to Java classes.

g108.help.txt=If enabled, then the checkPackageAccess method will be called for each Java class accessed. If no \

SecurityManager is configured, then this has no effect.

# Module settings

a101=Client-side Script Enabled

a101.help=Enable this setting if the client-side script should be executed.

a102=Client-side Script

a102.help=The client-side script.

a103=Server-side Script Language

a103.help=The language the server-side script is written in.

a103.help.txt=This is used to determine how to validate the script, as well as which engine to run the script within.

a104=Server-side Script

a104.help=The server-side script to execute.

a104.help.txt=This script will be run on the server, subsequent to any client script having returned. It can be \

written in the selected language.

a500=Authentication Level

a500.help=The authentication level associated with the authentication module.

a500.help.txt=Each authentication module has an authentication level that can be used to indicate the level of \

security associated with the module; 0 is the lowest (and the default).

# Module localizations

choice1=JavaScript

choice2=Groovy

language-not-supported=The chosen Scripting Language is not supported