302N/A# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
302N/A# Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
302N/A# The contents of this file are subject to the terms
302N/A# of the Common Development and Distribution License
302N/A# (the License). You may not use this file except in
302N/A# compliance with the License.
302N/A# You can obtain a copy of the License at
302N/A# See the License for the specific language governing
302N/A# permission and limitations under the License.
302N/A# When distributing Covered Code, include this CDDL
302N/A# Header Notice in each file and include the License file
302N/A# If applicable, add the following below the CDDL Header,
1498N/A# with the fields enclosed by brackets [] replaced by
302N/A# your own identifying information:
302N/A# "Portions Copyrighted [year] [name of copyright owner]"
302N/A# Portions Copyrighted 2011-2014 ForgeRock AS
302N/Aiplanet-am-auth-windowsdesktopsso-service-description=Windows Desktop SSO
302N/Aa101.help=The name of the Kerberos principal used during authentication
302N/Aa101.help.txt=This principal must match the name used in the keytab file created from the Active Directory server.<br/>\
304N/Aa102.help.txt=This is the absolute pathname of the AD keytab file. The keytab file is generated by the Active Directory server.
302N/Aa103.help=The name of the Kerberos (Active Directory) realm used for authentication
302N/Aa104=Kerberos Server Name
302N/Aa105=Return Principal with Domain Name
302N/Aa105.help=Returns the fully qualified name of the authenticated user rather than just the username.
302N/Aa108=Search for the user in the realm
1258N/Aa108.help=Validate that the user has a matched user profile configured in the data store.
1258N/Aa108.help.txt=If this option is enabled, the module validates whether the account corresponds to a user profile in the \
1498N/AData Store for the realm. The attributes to perform the search are configured under \
1498N/A<i>Access Control > Realm Name > Authentication > All Core settings > Alias Search Attribute Name</i>.
1498N/Aa106.help.txt=Each authentication module has an authentication level that can be used to indicate the level of security \
1498N/Aassociated with the module; 0 is the lowest (and the default).
1498N/Aa107=Trusted Kerberos realms
1498N/Aa107.help.txt=If realms are configured, then Kerberos tickets are only accepted if the realm part of the UserPrincipalName \
1498N/Aof the Users Kerberos ticket matches a realm from the list.
302N/Atoken=Invalid Kerberos token.
302N/Aauth=Failed to authentication.
302N/AserviceAuth=Service authentication failed.
302N/Acontext=Failed to establish context.
302N/Anullprincipal=Service principal name is null.
302N/Anullkeytab=Service keytab file is null.
302N/Anullrealm=KDC realm is null.
302N/Anullkdc=KDC server name is null.
984N/Anullauthlevel=Module auth level is null.
984N/Anokeytab=Keytab file {0} does not exist.
302N/Aauthlevel=Module auth level {0} is not correct.
302N/AidRepoSearch=IdRepo exception while trying to find the user {0} in the realm {1}
302N/AssoSearch=SSO exception while trying to find the user {0} in the realm {1}
302N/Anotfound=Unable to find the user {0} in the realm {1}
1498N/AuntrustedToken=Kerberos tokens from realm {0} are not trusted.