c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederuser-friendly-name=GSSAPI SASL Mechanism Handler

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederuser-friendly-plural-name=GSSAPI SASL Mechanism Handlers

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroedersynopsis=The GSSAPI SASL mechanism performs all processing related to SASL GSSAPI authentication using Kerberos V5.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederdescription=The GSSAPI SASL mechanism provides the ability for clients to authenticate themselves to the server using existing authentication in a Kerberos environment. This mechanism provides the ability to achieve single sign-on for Kerberos-based clients.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.enabled.synopsis=Indicates whether the SASL mechanism handler is enabled for use.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.identity-mapper.synopsis=Specifies the name of the identity mapper that is to be used with this SASL mechanism handler to match the Kerberos principal included in the SASL bind request to the corresponding user in the directory.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.identity-mapper.syntax.aggregation.constraint-synopsis=The referenced identity mapper must be enabled when the GSSAPI SASL Mechanism Handler is enabled.

ad1df93673cf323534cdfe18981ad5daae4c90c0Jonathan von Schroederproperty.java-class.synopsis=Specifies the fully-qualified name of the Java class that provides the SASL mechanism handler implementation.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.kdc-address.synopsis=Specifies the address of the KDC that is to be used for Kerberos processing.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.kdc-address.description=If provided, this property must be a fully-qualified DNS-resolvable name. If this property is not provided, then the server attempts to determine it from the system-wide Kerberos configuration.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.kdc-address.default-behavior.alias.synopsis=The server attempts to determine the KDC address from the underlying system configuration.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.keytab.synopsis=Specifies the path to the keytab file that should be used for Kerberos processing.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.keytab.description=If provided, this is either an absolute path or one that is relative to the server instance root.

6da084dda913e1fcb8cd9a828b9b5e349aac17a4Christian Maederproperty.keytab.default-behavior.alias.synopsis=The server attempts to use the system-wide default keytab.

bf453a6867cca0aa530bc8cac9eed9c3f70594b4Jonathan von Schroederproperty.principal-name.synopsis=Specifies the principal name.

bf453a6867cca0aa530bc8cac9eed9c3f70594b4Jonathan von Schroederproperty.principal-name.description=It can either be a simple user name or a service name such as host/example.com. If this property is not provided, then the server attempts to build the principal name by appending the fully qualified domain name to the string "ldap/".

bf453a6867cca0aa530bc8cac9eed9c3f70594b4Jonathan von Schroederproperty.principal-name.default-behavior.alias.synopsis=The server attempts to determine the principal name from the underlying system configuration.

c40f92ca02d1553c1250dc49ed6f7b5c71401f17Jonathan von Schroederproperty.quality-of-protection.synopsis=The name of a property that specifies the quality of protection the server will support.

d09dec8cdd185e4d0b803e9b3332a6fe6b0f179aJonathan von Schroederproperty.quality-of-protection.syntax.enumeration.value.confidentiality.synopsis=Quality of protection equals authentication with integrity and confidentiality protection.

bf453a6867cca0aa530bc8cac9eed9c3f70594b4Jonathan von Schroederproperty.quality-of-protection.syntax.enumeration.value.integrity.synopsis=Quality of protection equals authentication with integrity protection.

d09dec8cdd185e4d0b803e9b3332a6fe6b0f179aJonathan von Schroederproperty.quality-of-protection.syntax.enumeration.value.none.synopsis=QOP equals authentication only.

bf453a6867cca0aa530bc8cac9eed9c3f70594b4Jonathan von Schroederproperty.realm.synopsis=Specifies the realm to be used for GSSAPI authentication.

d09dec8cdd185e4d0b803e9b3332a6fe6b0f179aJonathan von Schroederproperty.realm.default-behavior.alias.synopsis=The server attempts to determine the realm from the underlying system configuration.

01f4476103b6c879e48fd114e1a3211d7ff547d5Jonathan von Schroederproperty.server-fqdn.synopsis=Specifies the DNS-resolvable fully-qualified domain name for the system.

d09dec8cdd185e4d0b803e9b3332a6fe6b0f179aJonathan von Schroederproperty.server-fqdn.default-behavior.alias.synopsis=The server attempts to determine the fully-qualified domain name dynamically .

a72b24fae026fd4d4bf121b1dcba7cf691736816Jonathan von Schroeder