amPasswordReset.properties revision e8721886dbfd32e88cc7077cbee4b6bb1b44b443
ec79b29695b183f794264bbb578c51e93d1f9b1emartin# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
ee508128c414648982d1cca7801f63b01a0a4f8aminfrin# Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
47d8d3d8c3092026d268457e5d53607a26d28945minfrin# The contents of this file are subject to the terms
47d8d3d8c3092026d268457e5d53607a26d28945minfrin# of the Common Development and Distribution License
47d8d3d8c3092026d268457e5d53607a26d28945minfrin# (the License). You may not use this file except in
47d8d3d8c3092026d268457e5d53607a26d28945minfrin# compliance with the License.
47d8d3d8c3092026d268457e5d53607a26d28945minfrin# You can obtain a copy of the License at
47d8d3d8c3092026d268457e5d53607a26d28945minfrin# https://opensso.dev.java.net/public/CDDLv1.0.html or
23daa0524ddc988dc8abefed7dbd900595545ecbminfrin# See the License for the specific language governing
23daa0524ddc988dc8abefed7dbd900595545ecbminfrin# permission and limitations under the License.
23daa0524ddc988dc8abefed7dbd900595545ecbminfrin# When distributing Covered Code, include this CDDL
23daa0524ddc988dc8abefed7dbd900595545ecbminfrin# Header Notice in each file and include the License file
1ba81b5553888a91574c360460b45e517169e9adminfrin# If applicable, add the following below the CDDL Header,
1ba81b5553888a91574c360460b45e517169e9adminfrin# with the fields enclosed by brackets [] replaced by
1ba81b5553888a91574c360460b45e517169e9adminfrin# your own identifying information:
ce26c909953968ede7c5097e508d37b2fa91ea3arpluem# "Portions Copyrighted [year] [name of copyright owner]"
ce26c909953968ede7c5097e508d37b2fa91ea3arpluem# $Id: amPasswordReset.properties,v 1.2 2008/06/25 05:40:36 qcheng Exp $
c7eeb0a294d58c75aee6ed86f73c6e1e8cf600a3rpluem# Portions Copyrighted 2011 ForgeRock Inc
c7eeb0a294d58c75aee6ed86f73c6e1e8cf600a3rpluem# Portions Copyrighted 2012 Open Source Solution Technology Corporation
9a60abfb324ea66f9d7089b856f315efeb7056b4trawickiplanet-am-password-reset-service-description=Password Reset
9a60abfb324ea66f9d7089b856f315efeb7056b4trawickp109=Password Reset
9a60abfb324ea66f9d7089b856f315efeb7056b4trawickp101=User Validation
686ce4eade942e515b1725d0c9751da36b759a6ctrawickp101.help=The naming attribute used to find the account where the password is being reset
686ce4eade942e515b1725d0c9751da36b759a6ctrawickp102=Secret Question
686ce4eade942e515b1725d0c9751da36b759a6ctrawickp102.help=List of secret questions available to the user
1ce78cf71b5baaf2c1ab48e818cb1f2397df5010trawickp102.help.txt=The user can select from this list the question to which they would like to provide a password reset question.
886f0852a0b7e9f0b6414b157ea9dc403d282e3erpluemp103=Search Filter
886f0852a0b7e9f0b6414b157ea9dc403d282e3erpluemp104=Base DN
886f0852a0b7e9f0b6414b157ea9dc403d282e3erpluemp105=Bind DN
886f0852a0b7e9f0b6414b157ea9dc403d282e3erpluemp106=Bind Password
fafad9231a6b47368d4b690346f90698542caa50trawickp107=Reset Password Creator
fafad9231a6b47368d4b690346f90698542caa50trawickp107.help=The class that generates the new password as part of password reset
fafad9231a6b47368d4b690346f90698542caa50trawickp107.help.txt=When the user successfully answers their password reset question, they are emailed a new password. This class is used to \
b1bb7fe353e0f1759febb0c67e517195137275d3rpluemgenerate said password. The custom implementation can be used as must implement the following interface:<br/><br/>\
b1bb7fe353e0f1759febb0c67e517195137275d3rpluem<code>com.sun.identity.password.plugins.PasswordGenerator</code>
b1bb7fe353e0f1759febb0c67e517195137275d3rpluemp108=Password Reset Notification Class
b1bb7fe353e0f1759febb0c67e517195137275d3rpluemp108.help=The class used to notify the user of their new password
b1bb7fe353e0f1759febb0c67e517195137275d3rpluemp108.help.txt=The default implementation using email to notify the user of their new password. A custom implementation can be used \
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd(perhaps to inform the user using SMS). A custom interface must implement the following interface:<br/><br/>\
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd<code>com.sun.identity.password.plugins.NotifyPassword</code>
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisdp110=Personal Question
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisdp110.help=Allows users to have their own <i>personal</i> password reset question
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisdp111=Maximum Number of Questions
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisdp111.help=Sets the maximum number of questions displayed on the password reset page.
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisdp111.1=Force Change Password on Next Login
c3c8103039e36494987aff50451896459826a361rpluemp111.1.help=The user must change their password when they first login with their reset password.
a71dbbcb4f19f6b1d19a45defcd3ed1988d9db56niqp112=Password Reset Failure Lockout
a71dbbcb4f19f6b1d19a45defcd3ed1988d9db56niqp112.help=Enables account lockout functionality for users using password reset
27b38d4191d5f638165e2a77ec6e6f567bd7784dniqp112.help.txt=OpenAM can track the number of failed password reset questions answered by a user over time and if a pre-defined limit is \
27b38d4191d5f638165e2a77ec6e6f567bd7784dniqbreached, OpenAM can lockout the users account and perform additional functions.<br/><br/><i>NB </i>This functionality \
27b38d4191d5f638165e2a77ec6e6f567bd7784dniqis in addition to any account lockout behaviour implemented by the LDAP Directory Server.
a87e2a23083aa62229307482afbb3b802a0c2105mturkp113=Password Reset Failure Lockout Count
a87e2a23083aa62229307482afbb3b802a0c2105mturkp113.help=The maximum number of failed password reset question for a user before their account is locked.
a87e2a23083aa62229307482afbb3b802a0c2105mturkp113.help.txt=This setting controls the maximum number of failed password reset questions a user can have during the lockout \
a87e2a23083aa62229307482afbb3b802a0c2105mturkinterval before OpenAM locks the users account.
a87e2a23083aa62229307482afbb3b802a0c2105mturkp114=Password Reset Failure Lockout Interval
a87e2a23083aa62229307482afbb3b802a0c2105mturkp114.help=The lockout interval time is in minutes.
6d8d07c0167960873d449b217da08faab50c410dmjcp114.help.txt=OpenAM tracks the failed password reset question count for a user over the lockout interval.<br/><br/>For example: If \
6d8d07c0167960873d449b217da08faab50c410dmjcthe lockout interval is 5 minutes and the lockout count is 5; the user will have to have failed to answer a password reset question 5 times \
6d8d07c0167960873d449b217da08faab50c410dmjcover the previous 5 minutes for the account to be locked. Failed attempts to answer a password reset question that occurred outside of the \
6d8d07c0167960873d449b217da08faab50c410dmjc5 minute interval are ignored.
6d8d07c0167960873d449b217da08faab50c410dmjcp115=Email Address to Send Lockout Notification
6d8d07c0167960873d449b217da08faab50c410dmjcp115.help=An email address or set of email addresses that receive notifications about account lockout events.
260825f41ee3fb517a5c5ecd675f5f58de9ea0b7rpluemp115.help.txt=OpenAM can be configured to send a localisable email message to a set of email addresses when account lockout \
260825f41ee3fb517a5c5ecd675f5f58de9ea0b7rpluemevents occur. The contents of the email message is configured using the following properties in the \
260825f41ee3fb517a5c5ecd675f5f58de9ea0b7rpluem<code>amAuth.properties</code> file.<br/><ul><li><code>lockOutEmailFrom</code> : The "From" address of the email message</li>\
260825f41ee3fb517a5c5ecd675f5f58de9ea0b7rpluem<li><code>lockOutEmailSub</code> : The subject of the email message</li>\
188befd3a49e3a126bd801d7dc5a7f6e63ad4332mturk<li><code>lockOutEmailMsg</code> : The contents of the email message</li></ul><br/>\
188befd3a49e3a126bd801d7dc5a7f6e63ad4332mturkThe identity for whom the account has been locked is included in the email message.<br/><br/>\
188befd3a49e3a126bd801d7dc5a7f6e63ad4332mturkThe format of this property is:<br/>\
188befd3a49e3a126bd801d7dc5a7f6e63ad4332mturk<code>emailaddress|locale|charset</code>. Multiple email addresses are space-separated.<br/>\
188befd3a49e3a126bd801d7dc5a7f6e63ad4332mturkEmail addresses must include the domain name, such as <code>admin@example.com</code>.
188befd3a49e3a126bd801d7dc5a7f6e63ad4332mturkp116=Warn User After N Failures
8fd638698262130d00458b2c95548f6f94875847rpluemp116.help=Warn the user when they reach this level of failed authentications.
534611d341a1a48b93c7a1fd5e333dbd261527d3rpluemp116.help.txt=The user will be given a warning when they reach this level of failed password reset questions during the lockout interval.\
534611d341a1a48b93c7a1fd5e333dbd261527d3rpluem<br/>The text of the lockout warning is configured using the <code>lockOutWarning</code> property in the <code>amAuth.properties</code> file.
534611d341a1a48b93c7a1fd5e333dbd261527d3rpluemp117=Password Reset Failure Lockout Duration
e99dfd55d29a7b4209b814efc7270d0b74ccee74niqp117.help=The duration of the users account lockout, in minutes.
c3c8103039e36494987aff50451896459826a361rpluemp117.help.txt=OpenAM can either lockout the users account indefinitely (until administration action) by setting the duration to 0, \
e99dfd55d29a7b4209b814efc7270d0b74ccee74niq(the default) or OpenAM can lock the users account for a given number of minutes. After the lockout interval, the user will be able \
127aef4ce9f7b6b32a95c5ed9a93b796d18755e6rpluemto successfully authenticate to OpenAM.
127aef4ce9f7b6b32a95c5ed9a93b796d18755e6rpluemp118=Password Reset Lockout Attribute Name
127aef4ce9f7b6b32a95c5ed9a93b796d18755e6rpluemp118.help=Name of custom lockout attribute
127aef4ce9f7b6b32a95c5ed9a93b796d18755e6rpluemp118.help.txt=When OpenAM locks an account, the <code>inetuserstatus</code> attribute in the locked account is set to Inactive. \
62a2cea4c337100e330fd31c786c5323de2ff1a2rpluemIn addition, OpenAM can set the value of another attribute in the users profile.
62a2cea4c337100e330fd31c786c5323de2ff1a2rpluemp119=Password Reset Lockout Attribute Value
62a2cea4c337100e330fd31c786c5323de2ff1a2rpluemp119.help=Value to set in custom lockout attribute
62a2cea4c337100e330fd31c786c5323de2ff1a2rpluemp119.help.txt=This is the value that will be set on the custom attribute in the users profile when they account is locked.
c3c8103039e36494987aff50451896459826a361rpluemfavourite-restaurant=What is your favorite restaurant?