OpenSolaris Launch

1 files changed, 1060 insertions, 0 deletions

diff --git a/usr/src/cmd/krb5/kadmin/gui/HelpData.java b/usr/src/cmd/krb5/kadmin/gui/HelpData.java
new file mode 100644
index 0000000000..c5551c655f
--- /dev/null
+++ b/usr/src/cmd/krb5/kadmin/gui/HelpData.java
@@ -0,0 +1,1060 @@
+/*
+ * CDDL HEADER START
+ *
+ * The contents of this file are subject to the terms of the
+ * Common Development and Distribution License, Version 1.0 only
+ * (the "License").  You may not use this file except in compliance
+ * with the License.
+ *
+ * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
+ * or http://www.opensolaris.org/os/licensing.
+ * See the License for the specific language governing permissions
+ * and limitations under the License.
+ *
+ * When distributing Covered Code, include this CDDL HEADER in each
+ * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
+ * If applicable, add the following below this CDDL HEADER, with the
+ * fields enclosed by brackets "[]" replaced with your own identifying
+ * information: Portions Copyright [yyyy] [name of copyright owner]
+ *
+ * CDDL HEADER END
+ */
+/*
+ * ident	"%Z%%M%	%I%	%E% SMI"
+ *
+ * Copyright (c) 2000 by Sun Microsystems, Inc.
+ * All rights reserved.
+ *
+ */
+
+import java.util.ListResourceBundle;
+
+// On-line spot help.  Defined as strings of a "contents" object.
+
+public class HelpData extends ListResourceBundle {
+    public Object [][] getContents() {
+        return contents;
+    }
+    
+    static final Object [][] contents = {
+        
+        //
+        //  Main Login Panel
+        //
+        
+        {"MainLoginPanel",
+	 // Not currently available in GUI
+	 "This window enables you to log in and use the SEAM Administration"
+	 +"Tool. The default information that initially fills in the fields"
+	 +" is read from the system's /etc/krb5/krb5.conf file (except"
+	 +" for the principal name)."},
+        
+        
+        {"LoginName",
+	 "The principal name to log in with (without realm included)."
+	 +"In order to use the SEAM Administration Tool, your principal"
+	 +" must have the appropriate privileges specified in the master"
+	 +" KDC's kadm5.acl"
+	 +" file.\n"
+	 +" \n"
+	 +"The default principal name consists of your user name with the"
+	 +" 'admin' instance appended. For example, 'jdb/admin'."},
+        
+        
+        {"LoginPass",
+	 "The password for the principal."},
+        
+        
+        {"LoginRealm",
+	 "The Kerberos realm, which is similar to a DNS domain."
+	 +"In most cases, the realm name is your domain name, and it should"
+	 +" be upper-case. For example, 'MTN.ACME.COM'.\n"
+	 +" \n"
+	 +"Each realm has one master KDC and may include slave"
+	 +" KDCs that contain read-only copies of the master."
+	 +"The default realm is read from the system's"
+	 +" /etc/krb5/krb5.conf file."},
+        
+        
+        {"LoginServer",
+	 "The master KDC where the Kerberos administration server, kadmind,"
+	 +" is running and where the KDC (Key Distribution Center) is located."
+	 +"You must provide a fully-qualified host name for the master KDC.\n"
+	 +" \n"
+	 +"The default admin server is read from the"
+	 +" system's /etc/krb5/krb5.conf file."},
+        
+        
+        {"LoginOK",
+	 "Checks the information"
+	 +" in this window, and if valid, logs you into the tool."},
+        
+        
+        {"LoginStartOver",
+	 "Resets all fields in this window to their initial"
+	 +" settings (when the tool was started)."},
+        
+        
+        //
+        // Panel Tabs
+        //
+        
+        
+        {"PrincipalTab",
+	 "Sends you to the list of principals. If you are currently"
+	 +" working on a principal or policy and you've made"
+	 +" changes, you'll be prompted to cancel or save"
+	 +" the changes before being sent to Principal List panel."},
+        
+        
+        {"PolicyTab",
+	 "Sends you to the list of policies. If you are currently working on a"
+	 +" principal or policy and you've made changes, you'll be prompted to"
+	 +" cancel or save the changes before being sent to Policy"
+	 +" List panel."},
+        
+        
+        
+        //
+        // Principal List Panel
+        //
+        
+        
+        {"PrinListPanel",
+	 // Not currently available in GUI
+	 "This panel enables you to select a principal from the list to modify,"
+	 +" delete, and duplicate. You can also create a new principal.\n"
+	 +" \n"
+	 +"  principal is an entity to which tickets may be assigned, generally"
+	 +" of the form <primary>/<instance>@<REALM>. For example,"
+	 +" jdb/admin@MTN.ACME.COM.\n"
+	 +" \n"
+	 +" display a specific principal or"
+	 +" sublist of principals, enter a filter string in the Filter Pattern"
+	 +" field and press"
+	 +" return.\n"
+	 +" \n"
+	 +"To perform an operation on a principal, select it from the list and"
+	 +" click the appropriate button. To create a new principal, click"
+	 +" Create New."},
+        
+        
+        {"PrList",
+	 "Displays all the available principals in the specified realm.\n"
+	 +" \n"
+	 +"To select a principal, click on its name in the list;"
+	 +" double-clicking on a principal is equivalent to selecting"
+	 +" the principal and clicking Modify."},
+        
+        
+        {"PrNoList",
+	 "This list panel is blank when you don't have list privileges"
+	 +" or you've chosen not to show lists."},
+        
+        
+        {"PrListPattern",
+	 "Enables you to apply a filter on the available principals to"
+	 +" display a particular principal or sublist of principals."
+	 +"The filter string you enter may consist of one or more"
+	 +" characters. And, because the filter mechanism is case"
+	 +" sensitive, you need to use the appropriate upper-case and"
+	 +" lower-case letters for the filter.\n"
+	 +" \n"
+	 +"For example, entering 'user' for the filter would match"
+	 +" and display principals such as 'enguser', 'user1',"
+	 +" and 'useradmin'.\n"
+	 +" '\n"
+	 +"To display a particular principal or sublist of"
+	 +" principals, enter a filter string and press return.\n"
+	 +" \n"
+	 +"To display the entire list of principals, click Clear"
+	 +" Filter(or clear the Filter Pattern field and press return)."},
+        
+        
+        {"PrNameNoList",
+	 "When the principal list is not displayed,"
+	 +" you must enter principal names in this field to perform"
+	 +" operations on them. Entering a name is equivalent to selecting"
+	 +" an item from the principal list in normal operation.\n"
+	 +" \n"
+	 +"To clear the principal entry, click Clear Name (or clear the"
+	 +" Name field and press return)."},
+        
+        
+        {"PrListClear",
+	 "Clears the filter and displays the full list of available",
+	 " principals."},
+        
+        
+        {"PrNoListClear",
+	 "Clears the Name field."},
+        
+        
+        {"PrListModify",
+	 "Opens a series of panels that enable you to modify the selected"
+	 +" principal, such as the principal's password, expiry date,"
+	 +" and policy."},
+        
+        
+        {"PrListAdd",
+	 "Opens a series of panels that enable you to create a new principal."
+	 +" The panels will have some of the fields already filled in with"
+	 +" default values, which you can set up by choosing Properties from"
+	 +" the Edit menu.\n"
+	 +" \n"
+	 +"The Duplicate button performs the same function; however,"
+	 +" instead of the fields filled in with default values, the fields"
+	 +" are filled in with the same values as the selected principal."},
+        
+        
+        {"PrListDelete",
+	 "Deletes the selected principal from the Kerberos realm.  The deleted"
+	 +" principal can no longer be assigned Kerberos tickets."},
+        
+        
+        {"PrListDuplicate",
+	 "Opens a series of panels that enable you to duplicate the selected"
+	 +" principal. The panels will have the fields already filled in"
+	 +" with the same values as the selected principal,"
+	 +" except for the principal's name and password."
+	 +"You can use this button to quickly create a new principal using "
+	 +" another principal as a template.\n"
+	 +" \n"
+	 +"The Create New button performs the same function; however,"
+	 +" instead of"
+	 +" the fields filled in with the same values as the selected"
+	 +" principal, the fields are filled in with default values."},
+        
+        
+        
+        //
+        //  Principal Basics Panel
+        //
+        
+        
+        {"PrincipalBasicsPanel",
+	 // Not currently available in GUI
+	 "This panel enables you to specify the basic attributes for a"
+	 +" principal."},
+        
+        
+        {"PrName",
+	 "The name of the principal (the <primary>/<instance> part of a"
+	 +" fully-qualified principal name).  A principal is a unique identity"
+	 +" to which the KDC can assign tickets.\n"
+	 +" \n"
+	 +"If you are modifying a principal,"
+	 +" you cannot edit a principal's name.\n"
+	 +" \n"
+	 +"For service (or host) principal names, the <primary> part must be"
+	 +" the name of a service, such as 'host' for telnet and rsh"
+	 +" services,'ftp', or 'nfs'."
+	 +"The < instance > part must be the name of the system"
+	 +" that requires Kerberos authentication for that service."
+	 +"For example, 'host/denver.mtn.acme.com'.\n"
+	 +" \n"
+	 +"For user principal names, the < primary > part must be"
+	 +" the name of the"
+	 +" user."
+	 +"The < instance > part is optional, but it can be a term used to"
+	 +" describe the intended use for the principals, such as 'admin', or"
+	 +" it can be the name of a system, which enables you to create"
+	 +" different"
+	 +" principals for the same user on a per-system basis."
+	 +" For example, 'jdb/admin', 'jdb/denver@acme.com', or 'jdb'."},
+        
+        
+        {"PrComments",
+	 "Comments related to the principal (for example,"
+	 +" 'Temporary Account')."},
+        
+        
+        {"PrPolicy",
+	 "A menu of available policies for the principal."},
+        
+        
+        {"PrPassword",
+	 "The password for the principal."},
+        
+        
+        {"PrBasicRandomPw",
+	 "Creates a random password for the principal and copies it into"
+	 +" the Password field."},
+        
+        
+        {"PrinBasLastPrincipalChange",
+	 "The date on which information for the principal was"
+	 +" last modified."},
+        
+        
+        {"PrinBasLastChangedBy",
+	 "The name of the principal who last modified the account for this"
+	 +" principal."},
+        
+        
+        {"PrExpiry",
+	 "The date and time on which the principal's account expires. When the"
+	 +" account expires, the principal can no longer"
+	 +" get a ticket-granting ticket (TGT) and may not be able to log in.\n"
+	 +" \n"
+	 +"To set up the account with no expiration date,"
+	 +" enter the word 'never' in the field.\n"
+	 +" \n"
+	 +"To help create a formatted date and time entry, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"PrSave",
+	 "Saves any changes you've made to the current principal."},
+        
+        
+        {"PrCancel",
+	 "Discards all the changes you've made to the current principal"
+	 +" and sends you back to the list of principals."},
+        
+        
+        {"PrBasicPrevious",
+	 "Sends you back to the list of principals.\n"
+	 +" \n"
+	 +"Note that you must save or cancel any changes you've made to"
+	 +" the current principal before you can go back to the list."},
+        
+        
+        {"PrBasicNext",
+	 "Sends you to the next Principal Details panel that contains"
+	 +" the password and ticket lifetime attributes for the principal."},
+        
+        
+        
+        //
+        // Principal Detail Panel
+        //
+        
+        
+        {"PrincipalDetailPanel",
+	 // Not currently available in GUI
+	 "This panel enables you to specify the password and"
+	 +" ticket lifetime attributes for the principal principal."},
+        
+        
+        {"PrinDetLastSuccess",
+	 "The date and time when the principal last logged in successfully."},
+        
+        
+        {"PrinDetLastFailure",
+	 "The date and time when the last login failure for the"
+	 +" principal occurred."},
+        
+        
+        {"PrinDetFailureCount",
+	 "The number of times that there has been a login failure"
+	 +" for the principal."},
+        
+        
+        {"PrinDetLastPasswordChange",
+	 "The date and time when the principal's password was "
+	 +" last changed."},
+        
+        
+        {"PrPwExpiry",
+	 "The date and time when the principal's current password"
+	 +" will expire.\n"
+	 +" \n"
+	 +"To set up the password with no expiration date, enter the"
+	 +" word 'never'in the field.\n"
+	 +" \n"
+	 +"To help create a formatted date and time entry, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"PrKvno",
+	 "The key version number for the principal; this is normally"
+	 +" changed only when a password has been compromised."},
+        
+        
+        {"PrMaxLifetime",
+	 "The maximum length of time for which a ticket can be"
+	 +" granted for the principal (without renewal).\n"
+	 +" \n"
+	 +"To help create a time duration in seconds, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"PrMaxRenewal",
+	 "The maximum length of time for which an existing"
+	 +" ticket may be renewed for the principal.\n"
+	 +" \n"
+	 +"To help create a time duration in seconds, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"PrDetailPrevious",
+	 "Sends you back to the previous Principal Basics panel."},
+        
+        
+        {"PrDetailNext",
+	 "Sends you to the next Principal Flags panel that contains"
+	 +" security, ticket control, and miscellaneous attributes for"
+	 +" the principal."},
+        
+        
+        
+        //
+        // Principal Flags Panel
+        //
+        
+        
+        
+        {"PrincipalFlagsPanel",
+	 // Not currently available in GUI
+	 "This panel enables you to specify the security, ticket control, and"
+	 +" miscellaneous attributes for the principal."},
+        
+        
+        {"PrLockAcct",
+	 "When checked, prevents the principal from logging in."
+	 +" This is a easy way to temporarily freeze"
+	 +" a principal account for any reason."},
+        
+        
+        {"PrForcePwChange",
+	 "When checked, expires the principal's current password, forcing the"
+	 +" user to use the kpasswd command to create a new password."
+	 +" This is useful if"
+	 +" there is a security breach and you need to make sure that old"
+	 +" passwords are replaced."},
+        
+        
+        {"PrAllowPostdated",
+	 "When checked, allows the principal to obtain postdated tickets.\n"
+	 +" \n"
+	 +"For example, you may need to use postdated tickets for cron jobs"
+	 +" that need to run after hours and can't obtain tickets in"
+	 +" advance because of short ticket lifetimes."},
+        
+        
+        {"PrAllowRenewable",
+	 "When checked, allows the principal to obtain renewable tickets.\n"
+	 +" \n"
+	 +"A principal can automatically extend the expiration date or time of"
+	 +" a ticket that is renewable (rather than having to get a new"
+	 +" ticket after the first one expires). Currently, the NFS service"
+	 +" is the only service that can renew tickets."},
+        
+        
+        {"PrAllowSvr",
+	 "When checked, allows service tickets to be issued for"
+	 +" the principal.\n"
+	 +" \n"
+	 +"You should not allow service tickets to be issued for the"
+	 +" 'kadmin/admin' and 'changepw/admin' principals."
+	 +"  This will ensure that these"
+	 +" principals can only update the KDC database." },
+        
+        
+        {"PrAllowForwardable",
+	 "When checked, allows the principal to obtain forwardable"
+	 +" tickets.\n"
+	 +" \n"
+	 +"Forwardable tickets are tickets that are forwarded to the"
+	 +" remote host to provide a single-sign-on session."
+	 +"For example, if you are using forwardable tickets and you"
+	 +" authenticate yourself through ftp or rsh, other services,"
+	 +" such as NFS, are available without you being prompted"
+	 +" for another password."},
+        
+        
+        {"PrAllowProxiable",
+	 "When checked, allows the principal to obtain proxiable tickets.\n"
+	 +" \n"
+	 +"A proxiable ticket is a ticket that can be used by a service"
+	 +" on behalf  of a client to perform an operation for the client."
+	 +" With a proxiable ticket, a service can take on the identity"
+	 +" of a client and obtain a ticket for another service, but it"
+	 +" cannot obtain a ticket-granting ticket."},
+        
+        
+        {"PrEnforcePolicy",
+	 "When checked, the policy selected for this principal"
+	 +" will be enforced."},
+        
+        
+        {"PrAllowTGT",
+	 "When checked, allows the service principal to provide services"
+	 +" to another principal. More specifically, it allows the KDC to"
+	 +" issue a service ticket for the service principal.\n"
+	 +" \n"
+	 +"This attribute is valid only for service principals."
+	 +"When not checked, service tickets cannot be issued for"
+	 +" the service principal."},
+        
+        
+        {"PrRequirePreAuth",
+	 "When checked, the KDC will not send a requested ticket-granting"
+	 +" ticket(TGT) to the principal until it can"
+	 +" authenticate (through software) that it is really the principal"
+	 +" requesting the TGT. This preauthentication is usually done"
+	 +" through an  extra password, for example, from a DES card.\n"
+	 +" \n"
+	 +"When not checked, the KDC will not need to preauthenticate"
+	 +" the principal before it sends a requested TGT to it."},
+        
+        
+        {"PrAllowDupAuth",
+	 "When checked, allows the user principal to obtain service tickets for"
+	 +" other user principals.\n"
+	 +" \n"
+	 +"This attribute is valid only for user principals. When not checked,"
+	 +" the user principal can still obtain service tickets for"
+	 +" service principals, but not for other user principals."},
+        
+        
+        {"PrRequireHwPreAuth",
+	 "When checked, the KDC will not send a requested ticket-granting"
+	 +" ticket(TGT) to the principal until"
+	 +" it can authenticate (through hardware) that it is really the"
+	 +" principal requesting the TGT. Hardware preauthentication could"
+	 +" be something like a Java ring reader.\n"
+	 +" \n"
+	 +"When not checked, the KDC will not need to preauthenticate"
+	 +" the principal before it sends a requested TGT to it."},
+        
+        
+        {"PrFlagsPrevious",
+	 "Sends you back to the previous Principal Details panel."},
+        
+        //
+        // Done Button
+        //
+        
+        {"PrFlagsNext",
+	 "Saves any changes you've made to the current principal and"
+	 +" sends you back to list of principals."},
+        
+        
+        
+        //
+        // Policies Panel
+        //
+        
+        
+        
+        {"PoliciesPanel",
+	 // Not currently available in GUI
+	 "This panel enables you to select a policy from the list to"
+	 +" modify, delete, or duplicate. You can also create a new policy.\n"
+	 +" \n"
+	 +"A policy is a set of behaviors regarding"
+	 +" passwords and tickets that can be applied to a principal."
+	 +" For example, the principals for system administrators might"
+	 +" all have the same policy."
+	 +" \n"
+	 +"To display a specific policy or sublist of policy,"
+	 +" enter a filter string in the Filter Pattern field and press"
+	 +" return.\n"
+	 +" \n"
+	 +"To perform an operation on a policy, select it from the list and"
+	 +" click the appropriate button. To add a new policy, click New."},
+        
+        
+        {"Pollist",
+	 "Displays the all the available policies in the specified realm.\n"
+	 +" \n"
+	 +"To select a policy, click on its name in the list; double-clicking"
+	 +" on a policy is equivalent to selecting the policy and clicking"
+	 +" Modify"},
+        
+        {"PolNoList",
+	 "This list panel is blank when you don't have list privileges"
+	 +" or you've chosen not to show lists."},
+        
+        {"PoListPattern",
+	 "Enables you to apply a filter on the available policies to display a"
+	 +" particular policy or sublist of policies. The filter string you"
+	 +" enter may consist of one or more characters, And, because"
+	 +" the filter mechanism is case-sensitive, you need to use the"
+	 +" appropriate upper-case and lower-case letters for the filter.\n"
+	 +" \n"
+	 +"For example, entering 'adm' for the filter would match and display,"
+	 +" policies such as 'admpol', 'adm1', and 'poladmin'.\n"
+	 +" \n"
+	 +"To display a particular policy or sublist of"
+	 +" policies, enter a filter string and press"
+	 +" return.\n"
+	 +" \n"
+	 +"To display the entire list of policies, click Clear"
+	 +" Filter (or clear the Filter Pattern field and press return)."},
+        
+        
+        {"PoNameNoList",
+	 "When the policy list is not displayed,"
+	 +" you must enter policy names in this field to perform"
+	 +" operations on them. Entering a name is equivalent to selecting"
+	 +" an item from the list in normal operation.\n"
+	 +" \n"
+	 +"To clear the policy entry, click Clear Name (or clear the"
+	 +" Name field and press return)."},
+        
+        
+        {"PoListClear",
+	 "Clears the filter and displays the full list of available policies."},
+        
+        
+        {"PoNoListClear",
+	 "Clears the Name field."},
+        
+        
+        {"PoListModify",
+	 "Opens the Policy Details panel that enables you to modify the"
+	 +" selected policy attributes, such as the policy's minimum password"
+	 +" length and the minimum ticket lifetime."},
+        
+        
+        
+        {"PoListAdd",
+	 "Opens the Policy Details panel that enables you to create a new"
+	 +" policy.  The panel will have some of the fields already filled"
+	 +" in with default values.\n"
+	 +" \n"
+	 +"The Duplicate button performs the same function; however,"
+	 +" instead of the fields filled in with default values, the"
+	 +" fields are filled in with the same values as the selected policy."},
+        
+        
+        {"PoListDelete",
+	 "Deletes the selected policy from the Kerberos realm."},
+        
+        
+        
+        {"PoListDuplicate",
+	 "Opens the Policy Details panel that enables you to duplicate"
+	 +" the selected policy. The panels will have the fields already"
+	 +" filled in with the same values as the selected policy,"
+	 +" except for the policy's name."
+	 +"You can use this button to quickly create a new policy using"
+	 +" another policy as a template.\n"
+	 +" \n"
+	 +"The Create New button performs the same function; however,"
+	 +" the fields are filled in with default values."},
+        
+        
+        
+        //
+        // Policy.Detail
+        //
+        
+        
+        {"PoName",
+	 "The name of the policy. A policy is set of rules governing a"
+	 +" principal's password and tickets.\n"
+	 +" \n"
+	 +"If you are modifying a policy, you cannot edit a policy's name."},
+        
+        
+        
+        {"PoMinPwLength",
+	 "The minimum length for the principal's password."},
+        
+        
+        {"PoMinPwClass",
+	 "The minimum number of different character types required in the"
+	 +"  principal's    password."
+	 +"For example, a minimum classes value of 2 means that the"
+	 +" password must have at least two different character types,"
+	 +" such as letters and numbers(hi2mom). A value of 3 means that"
+	 +" the password must have at least three different character"
+	 +" types, such as letters, numbers, and punctuation (hi2mom!)."
+	 +"And so on. \n"
+	 +" \n"
+	 +"A value of 1 basically sets no restriction on the number of password"
+	 +" character types."},
+        
+        
+        {"PoSavedPasswords",
+	 "The number of previous passwords that have been used by the principal"
+	 +" and cannot be reused."},
+        
+        
+        {"PoMinTicketLifetime",
+	 "The minimum time that the password must be used before it can be"
+	 +" changed.\n"
+	 +" \n"
+	 +"To help create a time duration in seconds, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"PoMaxTicketLifetime",
+	 "The maximum time that the password can be used before it must be"
+	 +" changed.\n"
+	 +" \n"
+	 +"To help create a time duration in seconds, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"PolDetPrincipalsUsingThisPolicy",
+	 "The number of principals to which this policy currently applies."},
+        
+        
+        {"PoSave",
+	 "Saves any changes you've made to the current policy."},
+        
+        
+        {"PoCancel",
+	 "Discards all the changes you've made to the current policy and sends"
+	 +" you back to the list of policies."},
+        
+        
+        {"PoDetailPrevious",
+	 "Sends you back to the list of policies.\n"
+	 +" \n"
+	 +"Note that you must save or cancel any changes you've made to the"
+	 +" current policy before you can go back to the list."},
+        
+        
+        {"PoDetailDone",
+	 "Saves any changes you've made to the current policy and sends"
+	 +" you back to list of policies."},
+        
+        
+        
+        //
+        // Defaults Panel
+        //
+        
+        
+        {"DefaultsPanel",
+	 // Not currently available in GUI
+	 "This window enables you to change the default settings for adding new"
+	 +" principals."},
+        
+        
+        {"GlobalLockAcct",
+	 "When checked, prevents the new principal from logging in."
+	 +"This is a easy way to temporarily freeze"
+	 +" new principal accounts for any reason. For example, you may want"
+	 +" to add a number of new principals in the beginning of the week,"
+	 +" but you might not want to activate them until the end of the"
+	 +" week."},
+        
+        
+        {"GlobalAllowPostdated",
+	 "When checked, allows the new principal to obtain postdated tickets.\n"
+	 +" \n"
+	 +"For example, you may need to use postdated tickets for cron jobs"
+	 +" that need to run after hours and can't obtain tickets in advance"
+	 +" because of short ticket lifetimes."},
+        
+        
+        {"GlobalAllowRenewable",
+	 "When checked, allows the new principal to obtain renewable tickets.\n"
+	 +" \n"
+	 +"A principal can automatically extend the expiration date or time of"
+	 +" a ticket that is renewable (rather than having to get a new ticket"
+	 +" after the first one expires). Currently, the NFS service is the"
+	 +" only service that can obtain renewable tickets."},
+        
+        
+        {"GlobalEnforcePolicy",
+	 "When checked, the policy selected for the new principal"
+	 +" will be enforced."},
+        
+        {"GlobalAllowTGT",
+	 "When checked, allows the new service principal to provide services to"
+	 +" another principal. More specifically, it allows the KDC to issue a"
+	 +" service ticket for the new service principal.\n"
+	 +" \n"
+	 +"This attribute is valid only for service principals."
+	 +"When not checked,"
+	 +" service tickets cannot be issued for the new service principal."},
+        
+        
+        {"GlobalForcePwChange",
+	 "When checked, expires the principal's current password, forcing the"
+	 +" user to use the kpasswd command to create a new password. This is"
+	 +" is useful if you want to force users with new principals to set"
+	 +" up their own passwords."},
+        
+        
+        {"GlobalAllowForwardable",
+	 "When checked, allows the new principal to obtain forwardable"
+	 +" tickets.\n"
+	 +" \n"
+	 +"Forwardable tickets are tickets that are forwarded to the remote"
+	 +" host to provide a single-sign-on session. For example, if you"
+	 +" are using forwardable tickets and you authenticate yourself"
+	 +" through ftp or rsh, other services, such as NFS, are available"
+	 +" without you being prompted for another password."},
+        
+        
+        {"GlobalAllowSvr",
+	 "When checked, allows service tickets to be issued for"
+	 +" the new principal.\n"
+	 +" \n"
+	 +"You should not allow service tickets to be issued for the"
+	 +" 'kadmin/admin' and the 'changepw/admin' principals."
+	 +" This will ensure that these"
+	 +" principals can only update the KDC database." },
+        
+        
+        {"GlobalAllowProxiable",
+	 "When checked, allows the new principal to obtain proxiable tickets.\n"
+	 +" \n"
+	 +"A proxiable ticket is a ticket that can be used by a service on"
+	 +" behalf of a client to perform an operation for the client."
+	 +"With a proxiable ticket, a service can take on the identity of"
+	 +" a client and obtain a ticket for another service, but it cannot"
+	 +" obtain a ticket-granting ticket."},
+        
+        
+        
+        {"GlobalAllowDupAuth",
+	 "When checked, allows the new user principal to obtain service"
+	 +" tickets for other user principals.\n"
+	 +" \n"
+	 +"This attribute is valid only for user principals. When not checked,"
+	 +" the new user principal can still obtain service tickets for"
+	 +" service principals, but not for other user principals."},
+        
+        
+        {"GlobalRequirePreAuth",
+	 "When checked, the KDC will not send a requested ticket-granting"
+	 +" ticket(TGT)"
+	 +" for the new principal until"
+	 +" it can authenticate (through software) that it is really the"
+	 +" principal requesting the TGT. This preauthentication is usually"
+	 +" done through an extra password, for example, from a DES card.\n"
+	 +" \n"
+	 +"When not checked, the KDC will not need preauthenticate the new"
+	 +" principal before it sends a requested TGT for it."},
+        
+        
+        {"GlobalRequireHwPreAuth",
+	 "When checked, the KDC will not send a requested ticket-granting"
+	 +" ticket(TGT) for the new principal until it can authenticate"
+	 +" (through hardware) that it is really the principal"
+	 +" requesting the TGT. Hardware preauthentication could be something"
+	 +" like a Java ring reader.\n"
+	 +" \n"
+	 +"When not checked, the KDC will not need to preauthenticate the new"
+	 +" principal with hardware before it sends a requested TGT for it."},
+        
+        {"GlDefServerSide",
+	 "When checked, the ticket lifetime values in the new principal are set"
+	 +" such that "
+	 +"the maximum value is used. When issuing a ticket the KDC uses the"
+	 +" minimum of the value defined in the principal entry, in "
+	 +" /etc/krb5/kdc.conf, or whatever the client requests with kinit."},
+        
+        {"GlDefLife",
+	 "The maximum length of time for which a ticket can be"
+	 +" granted for the new principal (without renewal).\n"
+	 +" \n"
+	 +"To help create a time duration in seconds, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        {"GlDefRenewableLife",
+	 "The maximum length of time for which an existing"
+	 +" ticket may be renewed for the new principal.\n"
+	 +" \n"
+	 +"To help create a time duration in seconds, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        {"GlDefExpiry",
+	 "The date and time on which the new principal's account expires."
+	 +"When the account expires, the principal can no longer"
+	 +" get a ticket-granting ticket (TGT) and may not be able to log in.\n"
+	 +" \n"
+	 +"To set up the new account with no expiration date, enter the word"
+	 +"  'never' in the field.\n"
+	 +" \n"
+	 +"To help create a formatted date and time entry, click the adjacent"
+	 +" '...' button to bring up a helper."},
+        
+        
+        
+        {"GlDefShowLists",
+	 "When checked, the principal and policy lists will be loaded and"
+	 +" displayed in the list panels. Large lists may produce significant"
+	 +" loading times, so it may be more convenient to work without lists"
+	 +" when they are very large, or you should cache them."
+	 +"The default is on."},
+        
+        
+        {"GlDefStaticLists",
+	 "When checked, the principal and policy lists will be cached"
+	 +" when they are initially loaded, and the lists will not be refreshed"
+	 +" from the server unless you use the Refresh menu. Because large"
+	 +" lists may produce significant loading times, you should cache"
+	 +" large lists and refresh them when necessary. The default"
+	 +" is off."},
+        
+        
+        {"GlDefCacheTime",
+	 "The period of time that the principal and policy lists will be"
+	 +" cached before being considered stale and refreshed from the"
+	 +" server.  The default is 300 seconds (6 minutes)."},
+        
+        
+        {"GlobalSave",
+	 "Makes a permanent change to the default values by writing them"
+	 +" to ~/.gkadmin, updates the tool, and closes the window."},
+        
+        
+        {"GlobalApply",
+	 "Makes a temporary change to the default values in the tool and"
+	 +" closes the window. This does not update ~/.gkadmin."},
+        
+        
+        {"GlobalCancel",
+	 "Discards all the changes you've made to the current defaults and"
+	 +" closes the window."},
+        
+        //
+        // Generic Helper Button Descriptions
+        //
+        
+        {"DateHelperButton",
+	 "Opens the Date and Time Helper window to help you create"
+	 +" a formatted date and time entry for the associated field."},
+        
+        
+        {"DurationHelperButton",
+	 "Opens the Time Duration Helper window to help you create a time"
+	 +" duration in seconds for the associated field."},
+        
+        //
+        // DateTimeDialog
+        //
+        
+        {"DateTimeDialogHelp",
+	 "To change the month, choose from the Month menu.\n "
+	 +" \n"
+	 +"To change the other date and time fields, click in the field and"
+	 +" enter a value, or use the +/- buttons to increment/decrement their"
+	 +" value. (Hint: Keeping the buttons pressed makes the value change"
+	 +" at a faster rate.)\n"
+	 +" \n"
+	 +"Click Midnight to change the time to midnight, and click Now to"
+	 +" change the time to the current time based on the system's clock.\n"
+	 +" \n"
+	 +"Click OK to copy the date and time settings you've changed to"
+	 +" the corresponding field."},
+        
+        
+        //
+        // DurationHelper
+        //
+        
+        {"DurationHelperHelp",
+	 "To help create a time duration in seconds, choose a unit of time"
+	 +" from the Unit menu, enter a number of units under the"
+	 +" Value field, and press return (or click '='). The number of"
+	 +" seconds based on your input will be displayed.\n"
+	 +" \n"
+	 +"Click OK to copy the number of seconds you've specified into the"
+	 +" corresponding field."},
+        
+        //
+        // PrintUtil
+        //
+        
+        {"PrintUtilHelp",
+	 "You can either print to a printer or a file.\n"
+	 +" \n"
+	 +"To print directly to a printer, click the Print Command"
+	 +" radio button, enter a print command (if you don't want the default"
+	 +" print command), and click Print.\n"
+	 +" \n"
+	 +"To print to a file, click the File Name radio button, enter a file"
+	 +" name, and click Print. The file name can be an absolute path."
+	 +" If no path is given, the file will be saved in the directory"
+	 +" where gkadmin was started. Click '...' next to the File Name field"
+	 +" to open the File Helper window to help you specify a"
+	 +" a location and name for the file."},
+        
+        //
+        // Menubar context sensitive help
+        //
+        
+        {"ContextSensitiveHelp",
+	 "Opens the Context-Sensitive Help window and switches the tool into"
+	 +" help mode.  In help mode, you can get help on any part of the"
+	 +" current window just by clicking on it. To dismiss the Help window"
+	 +" and switch back to the normal mode, click Dismiss on the Help"
+	 +" window."},
+        
+        {"PrintCurrentPrincipal",
+	 "Prints the attributes of the currently selected principal in the"
+	 +" list or the currently loaded principal."},
+        
+        {"PrintCurrentPolicy",
+	 "Prints the attributes of the currently selected policy in the"
+	 +" list or the currently loaded policy."},
+        
+        {"PrintPrincipalList",
+	 "Prints the list of all the available principals on the master KDC."},
+        
+        {"PrintPolicyList",
+	 "Prints the list of all the available policies on the master KDC."},
+        
+        {"Logout",
+	 "Quits the current session and sends you back to the Login window, so"
+	 +" you can change the login fields and log in again."},
+        
+        {"EditPreferences",
+	 "Opens the Properties window, which enables you to"
+	 +" specify the default settings for creating new principals"
+	 +" and how the tool should manage the principal"
+	 +" and policy lists."},
+        
+        {"RefreshPrincipals",
+	 "Forces the principal list to be updated from the server."},
+        
+        {"RefreshPolicies",
+	 "Forces the policy list to be updated from the server."},
+        
+        {"Exit",
+	 "Quits the SEAM Administration Tool."},
+        
+        {"HelpBrowser",
+	 "Opens an HTML browser that provides pointers to overview and task"
+	 +" information"
+	 +" for the SEAM Administration Tool. This provides the same"
+	 +" information as the 'Sun Enterprise Authentication Management"
+	 +" Guide'."},
+        
+        {"About",
+	 "Displays the current version of the SEAM Administration Tool."},
+        
+        {"DateTime...",
+	 "Opens the SEAM Date and Time Helper window, which enables you to"
+	 +" set the date and time. After you set the date and time and click"
+	 +" OK, the settings are automatically formatted and copied into the"
+	 +" corresponding field."},
+        
+        {"Duration...",
+	 "Opens the SEAM Duration Helper window, which enables you to specify a"
+	 +" time duration and have it converted into seconds."
+	 +" After you specify the time"
+	 +" and click OK, the time duration is copied into the corresponding"
+	 +" field."},
+        
+        {"Print...",
+	 "Opens the SEAM Print Dialog window, which enables you to specify a"
+	 +" printer"
+	 +" to print the information or a file name in which to save the"
+	 +" information."},
+        
+        {"Bad Duration",
+	 "Please enter the duration (in seconds) correctly."},
+        
+        {"Bad Date",
+	 "Please enter the date correctly."},
+        
+        {"Bad Number",
+	 "Please enter the number correctly."}
+        
+    }; // end contents object
+    
+}