← All changes | languages/authorizer.pot +1371 -667 2.8.3 → 3.13.0 View file →

		@@ -1,18 +1,19 @@
1	1	#, fuzzy
2	2	msgid ""
3	3	msgstr ""
4		-"Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"
5	4	"Project-Id-Version: Authorizer\n"
6		-"POT-Creation-Date: 2018-04-19 14:38-1000\n"
7		-"PO-Revision-Date: 2017-11-14 14:41-1000\n"
8		-"Last-Translator: \n"
9		-"Language-Team: \n"
	5	+"POT-Creation-Date: 2025-03-25 14:37-1000\n"
	6	+"PO-Revision-Date: 2025-03-25 14:37-1000\n"
	7	+"Last-Translator: University of Hawaii <[email protected]>\n"
	8	+"Language-Team: University of Hawaii <[email protected]>\n"
10	9	"MIME-Version: 1.0\n"
11	10	"Content-Type: text/plain; charset=UTF-8\n"
12	11	"Content-Transfer-Encoding: 8bit\n"
13		-"X-Generator: Poedit 1.8.12\n"
	12	+"Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"
	13	+"X-Generator: Poedit 3.5\n"
14	14	"X-Poedit-Basepath: ..\n"
	15	+"X-Poedit-Flags-xgettext: --add-comments=translators:\n"
15	16	"X-Poedit-WPHeader: authorizer.php\n"
16	17	"X-Poedit-SourceCharset: UTF-8\n"
17	18	"X-Poedit-KeywordsList: __;_e;_n:1,2;_x:1,2c;_ex:1,2c;_nx:4c,1,2;esc_attr__;"
18	19	"esc_attr_e;esc_attr_x:1,2c;esc_html__;esc_html_e;esc_html_x:1,2c;_n_noop:1,2;"
		@@ -17,483 +18,993 @@
17	18	"X-Poedit-KeywordsList: __;_e;_n:1,2;_x:1,2c;_ex:1,2c;_nx:4c,1,2;esc_attr__;"
18	19	"esc_attr_e;esc_attr_x:1,2c;esc_html__;esc_html_e;esc_html_x:1,2c;_n_noop:1,2;"
19	20	"_nx_noop:3c,1,2;__ngettext_noop:1,2\n"
20	21	"X-Poedit-SearchPath-0: .\n"
21		-"X-Poedit-SearchPathExcluded-0: *.js\n"
	22	+"X-Poedit-SearchPathExcluded-0: *.min.js\n"
	23	+"X-Poedit-SearchPathExcluded-1: node_modules\n"
	24	+"X-Poedit-SearchPathExcluded-2: vendor\n"
22	25
23		-#: authorizer.php:397
24		-msgid "<strong>ERROR</strong>: Incorrect username or password."
	26	+#: src/authorizer/class-admin-page.php:45
	27	+msgid ""
	28	+"<strong>Pending Users</strong>: Pending users are users who have successfully "
	29	+"logged in to the site, but who haven't yet been approved (or blocked) by you."
25	30	msgstr ""
26	31
27		-#. TRANSLATORS: 1: username 2: duration of lockout in seconds 3: duration of lockout as a phrase 4: lost password URL
28		-#: authorizer.php:433 authorizer.php:450
29		-#, php-format
	32	+#: src/authorizer/class-admin-page.php:46
30	33	msgid ""
31		-"<strong>ERROR</strong>: There have been too many invalid login attempts for "
32		-"the username <strong>%1$s</strong>. Please wait <strong id="
33		-"\"seconds_remaining\" data-seconds=\"%2$s\">%3$s</strong> before trying "
34		-"again. <a href=\"%4$s\" title=\"Password Lost and Found\">Lost your "
35		-"password</a>?"
	34	+"<strong>Approved Users</strong>: Approved users have access to the site once "
	35	+"they successfully log in."
36	36	msgstr ""
37	37
38		-#. TRANSLATORS: %s: Name of blog
39		-#: authorizer.php:637 authorizer.php:1743
40		-#, php-format
41		-msgid "%s - Access Restricted"
	38	+#: src/authorizer/class-admin-page.php:47
	39	+msgid ""
	40	+"<strong>Blocked Users</strong>: Blocked users will receive an error message "
	41	+"when they try to visit the site after authenticating."
42	42	msgstr ""
43	43
44		-#: authorizer.php:645 authorizer.php:951
45		-msgid "Back"
	44	+#: src/authorizer/class-admin-page.php:48
	45	+msgid ""
	46	+"Users in the <strong>Pending</strong> list appear automatically after a new "
	47	+"user tries to log in from the configured external authentication service. You "
	48	+"can add users to the <strong>Approved</strong> or <strong>Blocked</strong> "
	49	+"lists by typing them in manually, or by clicking the <em>Approve</em> or "
	50	+"<em>Block</em> buttons next to a user in the <strong>Pending</strong> list."
46	51	msgstr ""
47	52
48		-#. TRANSLATORS: 1: User email 2: Name of site
49		-#: authorizer.php:927
50		-#, php-format
51		-msgid "Action required: Pending user %1$s at %2$s"
	53	+#: src/authorizer/class-admin-page.php:53 src/authorizer/class-options.php:1147
	54	+#: src/authorizer/class-options.php:1153
	55	+msgid "Access Lists"
52	56	msgstr ""
53	57
54		-#. TRANSLATORS: 1: Name of site 2: URL of site 3: URL of authorizer
55		-#: authorizer.php:933
56		-#, php-format
	58	+#: src/authorizer/class-admin-page.php:60
57	59	msgid ""
58		-"A new user has tried to access the %1$s site you manage at:\n"
59		-"%2$s\n"
60		-"\n"
61		-"Please log in to approve or deny their request:\n"
62		-"%3$s\n"
	60	+"<strong>Who can log in to the site?</strong>: Choose the level of access "
	61	+"restriction you'd like to use on your site here. You can leave the site open "
	62	+"to anyone with a WordPress account or an account on an external service like "
	63	+"Google, CAS, or LDAP, or restrict it to WordPress users and only the external "
	64	+"users that you specify via the <em>Access Lists</em>."
63	65	msgstr ""
64	66
65		-#: authorizer.php:959
66		-msgid "Invalid login attempted."
	67	+#: src/authorizer/class-admin-page.php:61
	68	+msgid ""
	69	+"<strong>Which role should receive email notifications about pending users?</"
	70	+"strong>: If you've restricted access to <strong>approved users</strong>, you "
	71	+"can determine which WordPress users will receive a notification email "
	72	+"everytime a new external user successfully logs in and is added to the "
	73	+"pending list. All users of the specified role will receive an email, and the "
	74	+"external user will get a message (specified below) telling them their access "
	75	+"is pending approval."
67	76	msgstr ""
68	77
69		-#: authorizer.php:1109 authorizer.php:1114
70		-msgid "Invalid Google credentials provided."
	78	+#: src/authorizer/class-admin-page.php:62
	79	+msgid ""
	80	+"<strong>What message should pending users see after attempting to log in?</"
	81	+"strong>: Here you can specify the exact message a new external user will see "
	82	+"once they try to log in to the site for the first time."
71	83	msgstr ""
72	84
73		-#: authorizer.php:1139
74		-msgid "Google credentials do not match the allowed hosted domain"
	85	+#: src/authorizer/class-admin-page.php:67 src/authorizer/class-options.php:1154
	86	+msgid "Login Access"
75	87	msgstr ""
76	88
77		-#: authorizer.php:1203
	89	+#: src/authorizer/class-admin-page.php:74
78	90	msgid ""
79		-"Unable to update outdated server certificates from https://curl.haxx.se/ca/"
80		-"cacert.pem."
	91	+"<strong>Who can view the site?</strong>: You can restrict the site's "
	92	+"visibility by only allowing logged in users to see pages. If you do so, you "
	93	+"can customize the specifics about the site's privacy using the settings below."
81	94	msgstr ""
82	95
83		-#: authorizer.php:1226
84		-msgid "CAS server returned an Authentication Exception. Details:"
	96	+#: src/authorizer/class-admin-page.php:75
	97	+msgid ""
	98	+"<strong>What pages (if any) should be available to everyone?</strong>: If "
	99	+"you'd like to declare certain pages on your site as always public (such as "
	100	+"the course syllabus, introduction, or calendar), specify those pages here. "
	101	+"These pages will always be available no matter what access restrictions exist."
85	102	msgstr ""
86	103
87		-#: authorizer.php:1351
88		-msgid "You must provide a username or email."
	104	+#: src/authorizer/class-admin-page.php:76
	105	+msgid ""
	106	+"<strong>What happens to people without access when they visit a <em>private</"
	107	+"em> page?</strong>: Choose the response anonymous users receive when visiting "
	108	+"the site. You can choose between immediately taking them to the <strong>login "
	109	+"screen</strong>, or simply showing them a <strong>message</strong>."
89	110	msgstr ""
90	111
91		-#: authorizer.php:1354
92		-msgid "You must provide a password."
	112	+#: src/authorizer/class-admin-page.php:77
	113	+msgid ""
	114	+"<strong>What happens to people without access when they visit a <em>public</"
	115	+"em> page?</strong>: Choose the response anonymous users receive when visiting "
	116	+"a page on the site marked as public. You can choose between showing them the "
	117	+"page without any message, or showing them a the page with a message above the "
	118	+"content."
93	119	msgstr ""
94	120
95		-#: authorizer.php:1751 authorizer.php:1847
96		-msgid "Log In"
	121	+#: src/authorizer/class-admin-page.php:78
	122	+msgid ""
	123	+"<strong>What message should people without access see?</strong>: If you chose "
	124	+"to show new users a <strong>message</strong> above, type that message here."
97	125	msgstr ""
98	126
99		-#: authorizer.php:1996
100		-msgid "Sign in with Google"
	127	+#: src/authorizer/class-admin-page.php:83 src/authorizer/class-options.php:1155
	128	+msgid "Public Access"
101	129	msgstr ""
102	130
103		-#. TRANSLATORS: %s: Custom CAS label from authorizer options
104		-#: authorizer.php:2006
105		-#, php-format
106		-msgid "Sign in with %s"
	131	+#: src/authorizer/class-admin-page.php:90
	132	+msgid ""
	133	+"<strong>Type of external service to authenticate against</strong>: Choose "
	134	+"which authentication service type you will be using. You'll have to fill out "
	135	+"different fields below depending on which service you choose."
107	136	msgstr ""
108	137
109		-#: authorizer.php:2026
110		-msgid "or"
	138	+#: src/authorizer/class-admin-page.php:91
	139	+msgid ""
	140	+"<strong>Enable OAuth2 Logins</strong>: Choose if you want to allow users to "
	141	+"log in with one of the supported OAuth2 providers. You will need to enter "
	142	+"your API Client ID and Secret to enable these logins."
111	143	msgstr ""
112	144
113		-#: authorizer.php:2207
114		-msgid "Settings"
	145	+#: src/authorizer/class-admin-page.php:92
	146	+msgid ""
	147	+"<strong>Enable Google Logins</strong>: Choose if you want to allow users to "
	148	+"log in with their Google Account credentials. You will need to enter your API "
	149	+"Client ID and Secret to enable Google Logins."
115	150	msgstr ""
116	151
117		-#: authorizer.php:2222
118		-msgid "Network Settings"
	152	+#: src/authorizer/class-admin-page.php:93
	153	+msgid ""
	154	+"<strong>Enable CAS Logins</strong>: Choose if you want to allow users to log "
	155	+"in with via CAS (Central Authentication Service). You will need to enter "
	156	+"details about your CAS server (host, port, and path) to enable CAS Logins."
119	157	msgstr ""
120	158
121		-#: authorizer.php:2264 authorizer.php:5343 authorizer.php:5634
122		-msgid "Authorizer Settings"
	159	+#: src/authorizer/class-admin-page.php:94
	160	+msgid ""
	161	+"<strong>Enable LDAP Logins</strong>: Choose if you want to allow users to log "
	162	+"in with their LDAP (Lightweight Directory Access Protocol) credentials. You "
	163	+"will need to enter details about your LDAP server (host, port, search base, "
	164	+"uid attribute, directory user, directory user password, and whether to use "
	165	+"STARTTLS) to enable LDAP Logins."
123	166	msgstr ""
124	167
125		-#: authorizer.php:2291
126		-msgid "Saved"
	168	+#: src/authorizer/class-admin-page.php:95
	169	+msgid ""
	170	+"<strong>Default role for new CAS users</strong>: Specify which role new "
	171	+"external users will get by default. Be sure to choose a role with limited "
	172	+"permissions!"
127	173	msgstr ""
128	174
129		-#: authorizer.php:2292
130		-msgid "Duplicate"
	175	+#: src/authorizer/class-admin-page.php:96
	176	+msgid "If you enable OAuth2 logins:"
131	177	msgstr ""
132	178
133		-#: authorizer.php:2293
134		-msgid "Failed"
	179	+#: src/authorizer/class-admin-page.php:98
	180	+msgid ""
	181	+"<strong>Client ID</strong>: You can generate this ID following the "
	182	+"instructions for your specific provider."
135	183	msgstr ""
136	184
137		-#: authorizer.php:2294
138		-msgid "Local WordPress user"
	185	+#: src/authorizer/class-admin-page.php:98
	186	+msgid ""
	187	+"Note: for increased security, you can leave this field blank and instead "
	188	+"define this value either in wp-config.php via "
	189	+"<code>define( 'AUTHORIZER_OAUTH2_CLIENT_ID', '...' );</code>, or you may "
	190	+"fetch it from an external service like AWS Secrets Manager by hooking into "
	191	+"the <code>authorizer_oauth2_client_id</code> filter. This will prevent it "
	192	+"from being stored in plaintext in the WordPress database."
139	193	msgstr ""
140	194
141		-#: authorizer.php:2295 authorizer.php:3923
142		-msgid "Block/Ban user"
	195	+#: src/authorizer/class-admin-page.php:99
	196	+msgid ""
	197	+"<strong>Client Secret</strong>: You can generate this secret by following the "
	198	+"instructions for your specific provider."
143	199	msgstr ""
144	200
145		-#: authorizer.php:2296 authorizer.php:3563 authorizer.php:3925
146		-#: authorizer.php:3976
147		-msgid "Remove user"
	201	+#: src/authorizer/class-admin-page.php:99
	202	+msgid ""
	203	+"Note: for increased security, you can leave this field blank and instead "
	204	+"define this value either in wp-config.php via "
	205	+"<code>define( 'AUTHORIZER_OAUTH2_CLIENT_SECRET', '...' );</code>, or you may "
	206	+"fetch it from an external service like AWS Secrets Manager by hooking into "
	207	+"the <code>authorizer_oauth2_client_secret</code> filter. This will prevent it "
	208	+"from being stored in plaintext in the WordPress database."
148	209	msgstr ""
149	210
150		-#: authorizer.php:2297
151		-msgid "No users in"
	211	+#: src/authorizer/class-admin-page.php:100
	212	+msgid ""
	213	+"<strong>Authorization URL</strong>: For the generic OAuth2 provider, you will "
	214	+"need to specify the 3 endpoints required for the oauth2 authentication flow. "
	215	+"This is the first: the endpoint first contacted to initiate the "
	216	+"authentication."
152	217	msgstr ""
153	218
154		-#: authorizer.php:2298 authorizer.php:5524
155		-msgid "Save Changes"
	219	+#: src/authorizer/class-admin-page.php:101
	220	+msgid ""
	221	+"<strong>Access Token URL</strong>: For the generic OAuth2 provider, you will "
	222	+"need to specify the 3 endpoints required for the oauth2 authentication flow. "
	223	+"This is the second: the endpoint that is contacted after initiation to "
	224	+"retrieve an access token for the user that just authenticated."
156	225	msgstr ""
157	226
158		-#: authorizer.php:2299
159		-msgid "Private Pages"
	227	+#: src/authorizer/class-admin-page.php:102
	228	+msgid ""
	229	+"<strong>Resource Owner URL</strong>: For the generic OAuth2 provider, you "
	230	+"will need to specify the 3 endpoints required for the oauth2 authentication "
	231	+"flow. This is the third: the endpoint that is contacted after successfully "
	232	+"receiving an authentication token to retrieve details on the user that just "
	233	+"authenticated."
160	234	msgstr ""
161	235
162		-#: authorizer.php:2300
163		-msgid "Public Pages"
	236	+#: src/authorizer/class-admin-page.php:104
	237	+msgid "If you enable Google logins:"
164	238	msgstr ""
165	239
166		-#: authorizer.php:2301 authorizer.php:3747
167		-msgid "First page"
	240	+#: src/authorizer/class-admin-page.php:106
	241	+msgid ""
	242	+"<strong>Google Client ID</strong>: You can generate this ID by creating a new "
	243	+"Project in the <a href='https://cloud.google.com/console'>Google Developers "
	244	+"Console</a>. A Client ID typically looks something like this: 1234567890123-"
	245	+"kdjr85yt6vjr6d8g7dhr8g7d6durjf7g.apps.googleusercontent.com"
168	246	msgstr ""
169	247
170		-#: authorizer.php:2302 authorizer.php:3757
171		-msgid "Previous page"
	248	+#: src/authorizer/class-admin-page.php:106
	249	+msgid ""
	250	+"Note: for increased security, you can leave this field blank and instead "
	251	+"define this value either in wp-config.php via "
	252	+"<code>define( 'AUTHORIZER_GOOGLE_CLIENT_ID', '...' );</code>, or you may "
	253	+"fetch it from an external service like AWS Secrets Manager by hooking into "
	254	+"the <code>authorizer_google_client_id</code> filter. This will prevent it "
	255	+"from being stored in plaintext in the WordPress database."
172	256	msgstr ""
173	257
174		-#: authorizer.php:2303 authorizer.php:3782
175		-msgid "Next page"
	258	+#: src/authorizer/class-admin-page.php:107
	259	+msgid ""
	260	+"<strong>Google Client Secret</strong>: You can generate this secret by "
	261	+"creating a new Project in the <a href='https://cloud.google.com/"
	262	+"console'>Google Developers Console</a>. A Client Secret typically looks "
	263	+"something like this: sDNgX5_pr_5bly-frKmvp8jT"
176	264	msgstr ""
177	265
178		-#: authorizer.php:2304 authorizer.php:3792
179		-msgid "Last page"
	266	+#: src/authorizer/class-admin-page.php:107
	267	+msgid ""
	268	+"Note: for increased security, you can leave this field blank and instead "
	269	+"define this value either in wp-config.php via "
	270	+"<code>define( 'AUTHORIZER_GOOGLE_CLIENT_SECRET', '...' );</code>, or you may "
	271	+"fetch it from an external service like AWS Secrets Manager by hooking into "
	272	+"the <code>authorizer_google_client_secret</code> filter. This will prevent it "
	273	+"from being stored in plaintext in the WordPress database."
180	274	msgstr ""
181	275
182		-#: authorizer.php:2371
	276	+#: src/authorizer/class-admin-page.php:109
	277	+msgid "If you enable CAS logins:"
	278	+msgstr ""
	279	+
	280	+#: src/authorizer/class-admin-page.php:111
	281	+msgid ""
	282	+"<strong>CAS server hostname</strong>: Enter the hostname of the CAS server "
	283	+"you authenticate against (e.g., authn.example.edu)."
	284	+msgstr ""
	285	+
	286	+#: src/authorizer/class-admin-page.php:112
	287	+msgid ""
	288	+"<strong>CAS server port</strong>: Enter the port on the CAS server to connect "
	289	+"to (e.g., 443)."
	290	+msgstr ""
	291	+
	292	+#: src/authorizer/class-admin-page.php:113
	293	+msgid ""
	294	+"<strong>CAS server path/context</strong>: Enter the path to the login "
	295	+"endpoint on the CAS server (e.g., /cas)."
	296	+msgstr ""
	297	+
	298	+#: src/authorizer/class-admin-page.php:114
	299	+msgid ""
	300	+"<strong>CAS server method</strong>: Select the method to use when setting the "
	301	+"CAS config (e.g.,\"client\" or \"proxy\")"
	302	+msgstr ""
	303	+
	304	+#: src/authorizer/class-admin-page.php:115
	305	+msgid ""
	306	+"<strong>CAS attribute containing first name</strong>: Enter the CAS attribute "
	307	+"that has the user's first name. When this user first logs in, their WordPress "
	308	+"account will have their first name retrieved from CAS and added to their "
	309	+"WordPress profile."
	310	+msgstr ""
	311	+
	312	+#: src/authorizer/class-admin-page.php:116
	313	+msgid ""
	314	+"<strong>CAS attribute containing last name</strong>: Enter the CAS attribute "
	315	+"that has the user's last name. When this user first logs in, their WordPress "
	316	+"account will have their last name retrieved from CAS and added to their "
	317	+"WordPress profile."
	318	+msgstr ""
	319	+
	320	+#: src/authorizer/class-admin-page.php:117
	321	+msgid ""
	322	+"<strong>CAS attribute update</strong>: Select whether the first and last "
	323	+"names retrieved from CAS should overwrite any value the user has entered in "
	324	+"the first and last name fields in their WordPress profile. If this is not "
	325	+"set, this only happens the first time they log in."
	326	+msgstr ""
	327	+
	328	+#: src/authorizer/class-admin-page.php:119
	329	+msgid "If you enable LDAP logins:"
	330	+msgstr ""
	331	+
	332	+#: src/authorizer/class-admin-page.php:121
	333	+msgid ""
	334	+"<strong>LDAP Host</strong>: Enter the URL of the LDAP server you authenticate "
	335	+"against."
	336	+msgstr ""
	337	+
	338	+#: src/authorizer/class-admin-page.php:122
	339	+msgid ""
	340	+"<strong>LDAP Port</strong>: Enter the port number that the LDAP server "
	341	+"listens on."
	342	+msgstr ""
	343	+
	344	+#: src/authorizer/class-admin-page.php:123
	345	+msgid ""
	346	+"<strong>LDAP Search Base</strong>: Enter the LDAP string that represents the "
	347	+"search base, e.g., ou=people,dc=example,dc=edu"
	348	+msgstr ""
	349	+
	350	+#: src/authorizer/class-admin-page.php:124
	351	+msgid ""
	352	+"<strong>LDAP Search Filter</strong>: Enter the optional LDAP string that "
	353	+"represents the search filter, e.g., (memberOf=cn=wp_users,ou=people,"
	354	+"dc=example,dc=edu)"
	355	+msgstr ""
	356	+
	357	+#: src/authorizer/class-admin-page.php:125
	358	+msgid ""
	359	+"<strong>LDAP attribute containing username</strong>: Enter the name of the "
	360	+"LDAP attribute that contains the usernames used by those attempting to log "
	361	+"in. The plugin will search on this attribute to find the cn to bind against "
	362	+"for login attempts."
	363	+msgstr ""
	364	+
	365	+#: src/authorizer/class-admin-page.php:126
	366	+msgid ""
	367	+"<strong>LDAP Directory User</strong>: Enter the name of the LDAP user that "
	368	+"has permissions to browse the directory."
	369	+msgstr ""
	370	+
	371	+#: src/authorizer/class-admin-page.php:126
	372	+msgid ""
	373	+"Note: for increased security, you can leave this field blank and instead "
	374	+"define this value either in wp-config.php via "
	375	+"<code>define( 'AUTHORIZER_LDAP_USER', '...' );</code>, or you may fetch it "
	376	+"from an external service like AWS Secrets Manager by hooking into the "
	377	+"<code>authorizer_ldap_user</code> filter. This will prevent it from being "
	378	+"stored in plaintext in the WordPress database."
	379	+msgstr ""
	380	+
	381	+#: src/authorizer/class-admin-page.php:127
	382	+msgid ""
	383	+"<strong>LDAP Directory User Password</strong>: Enter the password for the "
	384	+"LDAP user that has permission to browse the directory."
	385	+msgstr ""
	386	+
	387	+#: src/authorizer/class-admin-page.php:127
	388	+msgid ""
	389	+"Note: for increased security, you can leave this field blank and instead "
	390	+"define this value either in wp-config.php via "
	391	+"<code>define( 'AUTHORIZER_LDAP_PASSWORD', '...' );</code>, or you may fetch "
	392	+"it from an external service like AWS Secrets Manager by hooking into the "
	393	+"<code>authorizer_ldap_password</code> filter. This will prevent it from being "
	394	+"stored in the WordPress database."
	395	+msgstr ""
	396	+
	397	+#: src/authorizer/class-admin-page.php:128
	398	+msgid ""
	399	+"<strong>Use STARTTLS</strong>: Select whether unencrypted communication with "
	400	+"the LDAP server should be upgraded to a TLS-secured connection using STARTTLS."
	401	+msgstr ""
	402	+
	403	+#: src/authorizer/class-admin-page.php:129
	404	+msgid ""
	405	+"<strong>Custom lost password URL</strong>: The WordPress login page contains "
	406	+"a link to recover a lost password. If you have external users who shouldn't "
	407	+"change the password on their WordPress account, point them to the appropriate "
	408	+"location to change the password on their external authentication service here."
	409	+msgstr ""
	410	+
	411	+#: src/authorizer/class-admin-page.php:130
	412	+msgid ""
	413	+"<strong>LDAP attribute containing first name</strong>: Enter the LDAP "
	414	+"attribute that has the user's first name. When this user first logs in, their "
	415	+"WordPress account will have their first name retrieved from LDAP and added to "
	416	+"their WordPress profile."
	417	+msgstr ""
	418	+
	419	+#: src/authorizer/class-admin-page.php:131
	420	+msgid ""
	421	+"<strong>LDAP attribute containing last name</strong>: Enter the LDAP "
	422	+"attribute that has the user's last name. When this user first logs in, their "
	423	+"WordPress account will have their last name retrieved from LDAP and added to "
	424	+"their WordPress profile."
	425	+msgstr ""
	426	+
	427	+#: src/authorizer/class-admin-page.php:132
	428	+msgid ""
	429	+"<strong>LDAP attribute update</strong>: Select whether the first and last "
	430	+"names retrieved from LDAP should overwrite any value the user has entered in "
	431	+"the first and last name fields in their WordPress profile. If this is not "
	432	+"set, this only happens the first time they log in."
	433	+msgstr ""
	434	+
	435	+#: src/authorizer/class-admin-page.php:138 src/authorizer/class-options.php:1148
	436	+#: src/authorizer/class-options.php:1156
	437	+msgid "External Service"
	438	+msgstr ""
	439	+
	440	+#: src/authorizer/class-admin-page.php:145
	441	+msgid ""
	442	+"<strong>Limit invalid login attempts</strong>: Choose how soon (and for how "
	443	+"long) to restrict access to individuals (or bots) making repeated invalid "
	444	+"login attempts. You may set a shorter delay first, and then a longer delay "
	445	+"after repeated invalid attempts; you may also set how much time must pass "
	446	+"before the delays will be reset to normal."
	447	+msgstr ""
	448	+
	449	+#: src/authorizer/class-admin-page.php:146
	450	+msgid ""
	451	+"<strong>Hide WordPress Logins</strong>: If you want to hide the WordPress "
	452	+"username and password fields and the Log In button on the wp-login screen, "
	453	+"enable this option. Note: You can always access the WordPress logins by "
	454	+"adding external=wordpress to the wp-login URL, like so:"
	455	+msgstr ""
	456	+
	457	+#: src/authorizer/class-admin-page.php:147
	458	+msgid ""
	459	+"<strong>Disable WordPress Logins</strong>: If you want to prevent users from "
	460	+"logging in with their WordPress passwords and instead only allow logins from "
	461	+"external services, enable this option. Note: enabling this will also hide "
	462	+"WordPress logins unless the LDAP external service is enabled."
	463	+msgstr ""
	464	+
	465	+#: src/authorizer/class-admin-page.php:148
	466	+msgid ""
	467	+"<strong>Custom WordPress login branding</strong>: If you'd like to use custom "
	468	+"branding on the WordPress login page, select that here. You will need to use "
	469	+"the <code>authorizer_add_branding_option</code> filter in your theme to add "
	470	+"it. You can see an example theme that implements this filter in the plugin "
	471	+"directory under sample-theme-add-branding."
	472	+msgstr ""
	473	+
	474	+#: src/authorizer/class-admin-page.php:148
	475	+#: src/authorizer/options/class-advanced.php:213
	476	+msgid ""
	477	+"Note: you can leave this field blank and instead define this value either in "
	478	+"wp-config.php via <code>define( 'AUTHORIZER_ADVANCED_BRANDING', '...' );</"
	479	+"code>, or you may set it in the <code>authorizer_advanced_branding</code> "
	480	+"filter."
	481	+msgstr ""
	482	+
	483	+#: src/authorizer/class-admin-page.php:153 src/authorizer/class-options.php:1149
	484	+#: src/authorizer/class-options.php:1157
	485	+msgid "Advanced"
	486	+msgstr ""
	487	+
	488	+#: src/authorizer/class-admin-page.php:185
183	489	msgid "Can't reach CAS server. Please provide"
184	490	msgstr ""
185	491
186		-#: authorizer.php:2371
	492	+#: src/authorizer/class-admin-page.php:185
187	493	msgid "accurate CAS settings"
188	494	msgstr ""
189	495
190		-#: authorizer.php:2371
	496	+#: src/authorizer/class-admin-page.php:185
191	497	msgid "if you intend to use it."
192	498	msgstr ""
193	499
194		-#: authorizer.php:2421
	500	+#: src/authorizer/class-admin-page.php:230
	501	+#: src/authorizer/class-dashboard-widget.php:70
	502	+msgid "Settings"
	503	+msgstr ""
	504	+
	505	+#: src/authorizer/class-admin-page.php:245
	506	+msgid "Network Settings"
	507	+msgstr ""
	508	+
	509	+#: src/authorizer/class-admin-page.php:294
195	510	msgid "Who can log into the site?"
196	511	msgstr ""
197	512
198		-#: authorizer.php:2428
	513	+#: src/authorizer/class-admin-page.php:301
199	514	msgid "Which role should receive email notifications about pending users?"
200	515	msgstr ""
201	516
202		-#: authorizer.php:2435
	517	+#: src/authorizer/class-admin-page.php:308
203	518	msgid "What message should pending users see after attempting to log in?"
204	519	msgstr ""
205	520
206		-#: authorizer.php:2442
	521	+#: src/authorizer/class-admin-page.php:315
207	522	msgid "What message should blocked users see after attempting to log in?"
208	523	msgstr ""
209	524
210		-#: authorizer.php:2449
	525	+#: src/authorizer/class-admin-page.php:322
211	526	msgid "Send welcome email to new approved users?"
212	527	msgstr ""
213	528
214		-#: authorizer.php:2456
	529	+#: src/authorizer/class-admin-page.php:329
215	530	msgid "Welcome email subject"
216	531	msgstr ""
217	532
218		-#: authorizer.php:2463
	533	+#: src/authorizer/class-admin-page.php:336
219	534	msgid "Welcome email body"
220	535	msgstr ""
221	536
222		-#: authorizer.php:2478
	537	+#: src/authorizer/class-admin-page.php:351
223	538	msgid "Who can view the site?"
224	539	msgstr ""
225	540
226		-#: authorizer.php:2485
	541	+#: src/authorizer/class-admin-page.php:358
227	542	msgid "What pages (if any) should be available to everyone?"
228	543	msgstr ""
229	544
230		-#: authorizer.php:2492
	545	+#: src/authorizer/class-admin-page.php:365
231	546	msgid "What happens to people without access when they visit a private page?"
232	547	msgstr ""
233	548
234		-#: authorizer.php:2499
	549	+#: src/authorizer/class-admin-page.php:372
235	550	msgid "What happens to people without access when they visit a public page?"
236	551	msgstr ""
237	552
238		-#: authorizer.php:2506
	553	+#: src/authorizer/class-admin-page.php:379
239	554	msgid "What message should people without access see?"
240	555	msgstr ""
241	556
242		-#: authorizer.php:2521 authorizer.php:5377
	557	+#: src/authorizer/class-admin-page.php:394
	558	+#: src/authorizer/class-admin-page.php:976
243	559	msgid "Default role for new users"
244	560	msgstr ""
245	561
246		-#: authorizer.php:2528 authorizer.php:5381
	562	+#: src/authorizer/class-admin-page.php:402
	563	+#: src/authorizer/class-admin-page.php:981
	564	+msgid "OAuth2 Logins"
	565	+msgstr ""
	566	+
	567	+#: src/authorizer/class-admin-page.php:412
	568	+#: src/authorizer/class-admin-page.php:985
	569	+msgid "OAuth2 automatic login"
	570	+msgstr ""
	571	+
	572	+#: src/authorizer/class-admin-page.php:419
	573	+msgid "Provider"
	574	+msgstr ""
	575	+
	576	+#: src/authorizer/class-admin-page.php:426
	577	+msgid "Custom label"
	578	+msgstr ""
	579	+
	580	+#: src/authorizer/class-admin-page.php:433
	581	+#: src/authorizer/class-admin-page.php:997
	582	+msgid "Client ID"
	583	+msgstr ""
	584	+
	585	+#: src/authorizer/class-admin-page.php:440
	586	+#: src/authorizer/class-admin-page.php:1001
	587	+msgid "Client Secret"
	588	+msgstr ""
	589	+
	590	+#: src/authorizer/class-admin-page.php:447
	591	+#: src/authorizer/class-admin-page.php:1005
	592	+msgid "OAuth2 Hosted Domain"
	593	+msgstr ""
	594	+
	595	+#: src/authorizer/class-admin-page.php:454
	596	+#: src/authorizer/class-admin-page.php:1009
	597	+msgid "Tenant ID"
	598	+msgstr ""
	599	+
	600	+#: src/authorizer/class-admin-page.php:461
	601	+#: src/authorizer/class-admin-page.php:1013
	602	+msgid "Authorization URL"
	603	+msgstr ""
	604	+
	605	+#: src/authorizer/class-admin-page.php:468
	606	+#: src/authorizer/class-admin-page.php:1017
	607	+msgid "Access Token URL"
	608	+msgstr ""
	609	+
	610	+#: src/authorizer/class-admin-page.php:475
	611	+#: src/authorizer/class-admin-page.php:1021
	612	+msgid "Resource Owner URL"
	613	+msgstr ""
	614	+
	615	+#: src/authorizer/class-admin-page.php:482
	616	+#: src/authorizer/class-admin-page.php:1026
	617	+msgid "Attribute containing username"
	618	+msgstr ""
	619	+
	620	+#: src/authorizer/class-admin-page.php:489
	621	+#: src/authorizer/class-admin-page.php:1030
	622	+msgid "Attribute containing email"
	623	+msgstr ""
	624	+
	625	+#: src/authorizer/class-admin-page.php:496
	626	+#: src/authorizer/class-admin-page.php:1034
	627	+msgid "Attribute containing first name"
	628	+msgstr ""
	629	+
	630	+#: src/authorizer/class-admin-page.php:503
	631	+#: src/authorizer/class-admin-page.php:1039
	632	+msgid "Attribute containing last name"
	633	+msgstr ""
	634	+
	635	+#: src/authorizer/class-admin-page.php:510
	636	+#: src/authorizer/class-admin-page.php:1043
	637	+msgid "Name attribute update"
	638	+msgstr ""
	639	+
	640	+#: src/authorizer/class-admin-page.php:518
	641	+#: src/authorizer/class-admin-page.php:1048
247	642	msgid "Google Logins"
248	643	msgstr ""
249	644
250		-#: authorizer.php:2535 authorizer.php:5385
	645	+#: src/authorizer/class-admin-page.php:528
	646	+#: src/authorizer/class-admin-page.php:1052
251	647	msgid "Google Client ID"
252	648	msgstr ""
253	649
254		-#: authorizer.php:2542 authorizer.php:5389
	650	+#: src/authorizer/class-admin-page.php:535
	651	+#: src/authorizer/class-admin-page.php:1056
255	652	msgid "Google Client Secret"
256	653	msgstr ""
257	654
258		-#: authorizer.php:2549 authorizer.php:5393
	655	+#: src/authorizer/class-admin-page.php:542
	656	+#: src/authorizer/class-admin-page.php:1060
259	657	msgid "Google Hosted Domain"
260	658	msgstr ""
261	659
262		-#: authorizer.php:2556 authorizer.php:5397
	660	+#: src/authorizer/class-admin-page.php:550
	661	+#: src/authorizer/class-admin-page.php:1064
263	662	msgid "CAS Logins"
264	663	msgstr ""
265	664
266		-#: authorizer.php:2563
	665	+#: src/authorizer/class-admin-page.php:560
	666	+#: src/authorizer/class-admin-page.php:1068
	667	+msgid "CAS server(s)"
	668	+msgstr ""
	669	+
	670	+#: src/authorizer/class-admin-page.php:568
	671	+#: src/authorizer/class-admin-page.php:1073
	672	+msgid "CAS automatic login"
	673	+msgstr ""
	674	+
	675	+#: src/authorizer/class-admin-page.php:582
267	676	msgid "CAS custom label"
268	677	msgstr ""
269	678
270		-#: authorizer.php:2570 authorizer.php:5405
	679	+#: src/authorizer/class-admin-page.php:593
	680	+#: src/authorizer/class-admin-page.php:1092
271	681	msgid "CAS server hostname"
272	682	msgstr ""
273	683
274		-#: authorizer.php:2577 authorizer.php:5409
	684	+#: src/authorizer/class-admin-page.php:603
	685	+#: src/authorizer/class-admin-page.php:1103
275	686	msgid "CAS server port"
276	687	msgstr ""
277	688
278		-#: authorizer.php:2584 authorizer.php:5413
	689	+#: src/authorizer/class-admin-page.php:613
	690	+#: src/authorizer/class-admin-page.php:1114
279	691	msgid "CAS server path/context"
280	692	msgstr ""
281	693
282		-#: authorizer.php:2598
	694	+#: src/authorizer/class-admin-page.php:623
	695	+#: src/authorizer/class-admin-page.php:1125
	696	+msgid "CAS server method"
	697	+msgstr ""
	698	+
	699	+#: src/authorizer/class-admin-page.php:633
	700	+#: src/authorizer/class-admin-page.php:1136
	701	+msgid "CAS server protocol"
	702	+msgstr ""
	703	+
	704	+#: src/authorizer/class-admin-page.php:643
283	705	msgid "CAS attribute containing email address"
284	706	msgstr ""
285	707
286		-#: authorizer.php:2605 authorizer.php:5425
	708	+#: src/authorizer/class-admin-page.php:653
	709	+#: src/authorizer/class-admin-page.php:1158
287	710	msgid "CAS attribute containing first name"
288	711	msgstr ""
289	712
290		-#: authorizer.php:2612 authorizer.php:5429
	713	+#: src/authorizer/class-admin-page.php:663
	714	+#: src/authorizer/class-admin-page.php:1169
291	715	msgid "CAS attribute containing last name"
292	716	msgstr ""
293	717
294		-#: authorizer.php:2619 authorizer.php:5433
	718	+#: src/authorizer/class-admin-page.php:673
	719	+#: src/authorizer/class-admin-page.php:1180
295	720	msgid "CAS attribute update"
296	721	msgstr ""
297	722
298		-#: authorizer.php:2626 authorizer.php:5437
299		-msgid "CAS automatic login"
	723	+#: src/authorizer/class-admin-page.php:683
	724	+#: src/authorizer/class-admin-page.php:1191
	725	+msgid "CAS users linked by username"
300	726	msgstr ""
301	727
302		-#: authorizer.php:2633 authorizer.php:5441
	728	+#: src/authorizer/class-admin-page.php:695
	729	+#: src/authorizer/class-admin-page.php:1204
303	730	msgid "LDAP Logins"
304	731	msgstr ""
305	732
306		-#: authorizer.php:2640 authorizer.php:5445
	733	+#: src/authorizer/class-admin-page.php:705
	734	+#: src/authorizer/class-admin-page.php:1208
307	735	msgid "LDAP Host"
308	736	msgstr ""
309	737
310		-#: authorizer.php:2647 authorizer.php:5449
	738	+#: src/authorizer/class-admin-page.php:712
	739	+#: src/authorizer/class-admin-page.php:1212
311	740	msgid "LDAP Port"
312	741	msgstr ""
313	742
314		-#: authorizer.php:2654 authorizer.php:4725 authorizer.php:5453
315		-msgid "Use TLS"
	743	+#: src/authorizer/class-admin-page.php:719
	744	+#: src/authorizer/class-admin-page.php:1216
	745	+#: src/authorizer/options/external/class-ldap.php:104
	746	+msgid "Use STARTTLS"
316	747	msgstr ""
317	748
318		-#: authorizer.php:2661 authorizer.php:5457
	749	+#: src/authorizer/class-admin-page.php:726
	750	+#: src/authorizer/class-admin-page.php:1220
319	751	msgid "LDAP Search Base"
320	752	msgstr ""
321	753
322		-#: authorizer.php:2668 authorizer.php:5461
	754	+#: src/authorizer/class-admin-page.php:733
	755	+#: src/authorizer/class-admin-page.php:1224
	756	+msgid "LDAP Search Filter"
	757	+msgstr ""
	758	+
	759	+#: src/authorizer/class-admin-page.php:740
	760	+#: src/authorizer/class-admin-page.php:1228
323	761	msgid "LDAP attribute containing username"
324	762	msgstr ""
325	763
326		-#: authorizer.php:2675
	764	+#: src/authorizer/class-admin-page.php:747
327	765	msgid "LDAP attribute containing email address"
328	766	msgstr ""
329	767
330		-#: authorizer.php:2682 authorizer.php:5469
	768	+#: src/authorizer/class-admin-page.php:754
	769	+#: src/authorizer/class-admin-page.php:1236
331	770	msgid "LDAP Directory User"
332	771	msgstr ""
333	772
334		-#: authorizer.php:2689 authorizer.php:5473
	773	+#: src/authorizer/class-admin-page.php:761
	774	+#: src/authorizer/class-admin-page.php:1240
335	775	msgid "LDAP Directory User Password"
336	776	msgstr ""
337	777
338		-#: authorizer.php:2696 authorizer.php:5477
	778	+#: src/authorizer/class-admin-page.php:768
	779	+#: src/authorizer/class-admin-page.php:1244
339	780	msgid "Custom lost password URL"
340	781	msgstr ""
341	782
342		-#: authorizer.php:2703 authorizer.php:5481
	783	+#: src/authorizer/class-admin-page.php:775
	784	+#: src/authorizer/class-admin-page.php:1248
343	785	msgid "LDAP attribute containing first name"
344	786	msgstr ""
345	787
346		-#: authorizer.php:2710 authorizer.php:5485
	788	+#: src/authorizer/class-admin-page.php:782
	789	+#: src/authorizer/class-admin-page.php:1252
347	790	msgid "LDAP attribute containing last name"
348	791	msgstr ""
349	792
350		-#: authorizer.php:2717 authorizer.php:5489
	793	+#: src/authorizer/class-admin-page.php:789
	794	+#: src/authorizer/class-admin-page.php:1256
351	795	msgid "LDAP attribute update"
352	796	msgstr ""
353	797
354		-#: authorizer.php:2732 authorizer.php:5497
	798	+#: src/authorizer/class-admin-page.php:796
	799	+#: src/authorizer/class-admin-page.php:1260
	800	+msgid "LDAP test connection"
	801	+msgstr ""
	802	+
	803	+#: src/authorizer/class-admin-page.php:811
	804	+#: src/authorizer/class-admin-page.php:1268
355	805	msgid "Limit invalid login attempts"
356	806	msgstr ""
357	807
358		-#: authorizer.php:2739
	808	+#: src/authorizer/class-admin-page.php:818
359	809	msgid "Hide WordPress Login"
360	810	msgstr ""
361	811
362		-#: authorizer.php:2746
	812	+#: src/authorizer/class-admin-page.php:825
	813	+#: src/authorizer/class-admin-page.php:1276
	814	+#: src/authorizer/options/class-advanced.php:102
	815	+msgid "Disable WordPress Logins"
	816	+msgstr ""
	817	+
	818	+#: src/authorizer/class-admin-page.php:832
	819	+#: src/authorizer/class-admin-page.php:1280
	820	+msgid "Bypass Usernames"
	821	+msgstr ""
	822	+
	823	+#: src/authorizer/class-admin-page.php:839
363	824	msgid "Custom WordPress login branding"
364	825	msgstr ""
365	826
366		-#: authorizer.php:2753
	827	+#: src/authorizer/class-admin-page.php:846
367	828	msgid "Authorizer admin menu item location"
368	829	msgstr ""
369	830
370		-#: authorizer.php:2760
	831	+#: src/authorizer/class-admin-page.php:853
371	832	msgid "Show custom usermeta in user list"
372	833	msgstr ""
373	834
374		-#: authorizer.php:2767 authorizer.php:5505
	835	+#: src/authorizer/class-admin-page.php:860
	836	+#: src/authorizer/class-admin-page.php:1284
375	837	msgid "Number of users per page"
376	838	msgstr ""
377	839
378		-#: authorizer.php:2774 authorizer.php:5509
	840	+#: src/authorizer/class-admin-page.php:867
	841	+#: src/authorizer/class-admin-page.php:1288
379	842	msgid "Approved users sort method"
380	843	msgstr ""
381	844
382		-#: authorizer.php:2781 authorizer.php:5513
	845	+#: src/authorizer/class-admin-page.php:874
	846	+#: src/authorizer/class-admin-page.php:1292
383	847	msgid "Approved users sort order"
384	848	msgstr ""
385	849
386		-#: authorizer.php:2788
	850	+#: src/authorizer/class-admin-page.php:881
387	851	msgid "Show dashboard widget to admin users"
388	852	msgstr ""
389	853
390		-#: authorizer.php:2797
	854	+#: src/authorizer/class-admin-page.php:890
391	855	msgid "Override multisite options"
392	856	msgstr ""
393	857
394		-#: authorizer.php:2841
	858	+#: src/authorizer/class-admin-page.php:905
	859	+#: src/authorizer/class-admin-page.php:941
	860	+#: src/authorizer/class-dashboard-widget.php:34
	861	+msgid "Authorizer Settings"
	862	+msgstr ""
	863	+
	864	+#: src/authorizer/class-admin-page.php:925
	865	+msgid "You do not have sufficient permissions to access this page."
	866	+msgstr ""
	867	+
	868	+#: src/authorizer/class-admin-page.php:942
395	869	msgid ""
396		-"You're not currently allowed to view this site. Your administrator has been "
397		-"notified, and once he/she has approved your request, you will be able to log "
398		-"in. If you need any other help, please contact your administrator."
	870	+"Most <strong>Authorizer</strong> settings are set in the individual sites, "
	871	+"but you can specify a few options here that apply to <strong>all sites in the "
	872	+"network</strong>. These settings will override settings in the individual "
	873	+"sites."
399	874	msgstr ""
400	875
401		-#: authorizer.php:2844
	876	+#: src/authorizer/class-admin-page.php:944
	877	+msgid "Override individual site settings with the settings below"
	878	+msgstr ""
	879	+
	880	+#: src/authorizer/class-admin-page.php:945
402	881	msgid ""
403		-"You're not currently allowed to log into this site. If you think this is a "
404		-"mistake, please contact your administrator."
	882	+"Prevent site administrators from overriding any multisite settings defined "
	883	+"here (via Authorizer > Advanced > Override multisite options)"
405	884	msgstr ""
406	885
407		-#. TRANSLATORS: %s: Shortcode for name of site
408		-#: authorizer.php:2852
409		-#, php-format
410		-msgid "Welcome to %s!"
	886	+#: src/authorizer/class-admin-page.php:956
	887	+msgid "Manage who has access to all sites in the network."
411	888	msgstr ""
412	889
413		-#. TRANSLATORS: 1: Shortcode for user email 2: Shortcode for site name 3: Shortcode for site URL
414		-#: authorizer.php:2859
415		-#, php-format
	890	+#: src/authorizer/class-admin-page.php:960
	891	+msgid "Who can log in to sites in this network?"
	892	+msgstr ""
	893	+
	894	+#: src/authorizer/class-admin-page.php:964
	895	+msgid "Who can view sites in this network?"
	896	+msgstr ""
	897	+
	898	+#: src/authorizer/class-admin-page.php:968
	899	+msgid "Approved Users (All Sites)"
	900	+msgstr ""
	901	+
	902	+#: src/authorizer/class-admin-page.php:968
416	903	msgid ""
417		-"Hello %1$s,\n"
418		-"Welcome to %2$s! You now have access to all content on the site. Please "
419		-"visit us here:\n"
420		-"%3$s\n"
	904	+"Note: these users will <strong>not</strong> receive welcome emails when "
	905	+"approved. Only users approved from individual sites can receive these "
	906	+"messages."
421	907	msgstr ""
422	908
423		-#: authorizer.php:2880
424		-msgid ""
425		-"Notice: You are browsing this site anonymously, and only have access to a "
426		-"portion of its content."
	909	+#: src/authorizer/class-admin-page.php:989
	910	+msgid "OAuth2 Provider"
427	911	msgstr ""
428	912
429		-#: authorizer.php:3481 authorizer.php:3487 authorizer.php:5209
430		-msgid "Access Lists"
	913	+#: src/authorizer/class-admin-page.php:993
	914	+msgid "Custom Label"
431	915	msgstr ""
432	916
433		-#: authorizer.php:3482 authorizer.php:3490 authorizer.php:5283
434		-msgid "External Service"
	917	+#: src/authorizer/class-admin-page.php:1081
	918	+msgid "CAS Custom Label"
435	919	msgstr ""
436	920
437		-#: authorizer.php:3483 authorizer.php:3491 authorizer.php:5297
438		-msgid "Advanced"
	921	+#: src/authorizer/class-admin-page.php:1147
	922	+msgid "CAS attribute containing email"
439	923	msgstr ""
440	924
441		-#: authorizer.php:3488 authorizer.php:5223
442		-msgid "Login Access"
	925	+#: src/authorizer/class-admin-page.php:1232
	926	+msgid "LDAP attribute containing email"
443	927	msgstr ""
444	928
445		-#: authorizer.php:3489 authorizer.php:5239
446		-msgid "Public Access"
	929	+#: src/authorizer/class-admin-page.php:1272
	930	+#: src/authorizer/options/class-advanced.php:82
	931	+msgid "Hide WordPress Logins"
447	932	msgstr ""
448	933
449		-#: authorizer.php:3506
450		-msgid "Manage who has access to this site using these lists."
	934	+#: src/authorizer/class-admin-page.php:1296
	935	+#: src/authorizer/options/class-advanced.php:414
	936	+msgid "Show Dashboard Widget"
451	937	msgstr ""
452	938
453		-#: authorizer.php:3516 authorizer.php:5646
454		-msgid "Pending Users"
	939	+#: src/authorizer/class-admin-page.php:1303
	940	+#: src/authorizer/class-admin-page.php:1384
	941	+msgid "Save Changes"
455	942	msgstr ""
456	943
457		-#: authorizer.php:3520 authorizer.php:5650
458		-msgid "Approved Users"
	944	+#: src/authorizer/class-admin-page.php:1377
	945	+msgid "Saved"
459	946	msgstr ""
460	947
461		-#: authorizer.php:3524 authorizer.php:5654
462		-msgid "Blocked Users"
	948	+#: src/authorizer/class-admin-page.php:1378
	949	+msgid "Duplicate"
463	950	msgstr ""
464	951
465		-#: authorizer.php:3561 authorizer.php:3692
466		-msgid "Approve"
	952	+#: src/authorizer/class-admin-page.php:1379
	953	+msgid "Failed"
467	954	msgstr ""
468	955
469		-#: authorizer.php:3562 authorizer.php:3985
470		-msgid "Block"
	956	+#: src/authorizer/class-admin-page.php:1380
	957	+msgid "Local WordPress user"
471	958	msgstr ""
472	959
473		-#: authorizer.php:3563
474		-msgid "Ignore"
	960	+#: src/authorizer/class-admin-page.php:1381
	961	+#: src/authorizer/options/class-access-lists.php:550
	962	+msgid "Block/Ban user"
475	963	msgstr ""
476	964
477		-#: authorizer.php:3567
478		-msgid "No pending users"
	965	+#: src/authorizer/class-admin-page.php:1382
	966	+#: src/authorizer/options/class-access-lists.php:89
	967	+#: src/authorizer/options/class-access-lists.php:278
	968	+#: src/authorizer/options/class-access-lists.php:545
	969	+#: src/authorizer/options/class-access-lists.php:551
	970	+msgid "Remove user"
479	971	msgstr ""
480	972
481		-#: authorizer.php:3687 authorizer.php:3981
482		-msgid "email address"
	973	+#: src/authorizer/class-admin-page.php:1383
	974	+msgid "No users in"
483	975	msgstr ""
484	976
485		-#: authorizer.php:3695
486		-msgid "Toggle Dropdown"
	977	+#: src/authorizer/class-admin-page.php:1385
	978	+msgid "Private Pages"
487	979	msgstr ""
488	980
489		-#: authorizer.php:3698
490		-msgid ""
491		-"Create a local WordPress account instead, and email the user their password."
	981	+#: src/authorizer/class-admin-page.php:1386
	982	+msgid "Public Pages"
492	983	msgstr ""
493	984
494		-#. TRANSLATORS: %s: number of users
495		-#: authorizer.php:3727 authorizer.php:5796
	985	+#: src/authorizer/class-admin-page.php:1387
	986	+#: src/authorizer/options/class-access-lists.php:334
	987	+msgid "First page"
	988	+msgstr ""
	989	+
	990	+#: src/authorizer/class-admin-page.php:1388
	991	+#: src/authorizer/options/class-access-lists.php:345
	992	+msgid "Previous page"
	993	+msgstr ""
	994	+
	995	+#: src/authorizer/class-admin-page.php:1389
	996	+#: src/authorizer/options/class-access-lists.php:372
	997	+msgid "Next page"
	998	+msgstr ""
	999	+
	1000	+#: src/authorizer/class-admin-page.php:1390
	1001	+#: src/authorizer/options/class-access-lists.php:383
	1002	+msgid "Last page"
	1003	+msgstr ""
	1004	+
	1005	+#: src/authorizer/class-ajax-endpoints.php:382
	1006	+#: src/authorizer/options/class-access-lists.php:310
496	1007	#, php-format
497	1008	msgid "%s user"
498	1009	msgid_plural "%s users"
499	1010	msgstr[0] ""
		@@ -498,825 +1009,1018 @@
498	1009	msgid_plural "%s users"
499	1010	msgstr[0] ""
500	1011	msgstr[1] ""
501	1012
502		-#: authorizer.php:3764 authorizer.php:3767
503		-msgid "Current Page"
	1013	+#: src/authorizer/class-authentication.php:71
	1014	+msgid "<strong>ERROR</strong>: Incorrect username or password."
504	1015	msgstr ""
505	1016
506		-#. TRANSLATORS: 1: number of current page 2: number of total pages
507		-#: authorizer.php:3775
	1017	+#: src/authorizer/class-authentication.php:109
	1018	+#: src/authorizer/class-authentication.php:127
508	1019	#, php-format
509		-msgctxt "paging"
510		-msgid "%1$s of %2$s"
	1020	+msgid ""
	1021	+"<strong>ERROR</strong>: There have been too many invalid login attempts for "
	1022	+"the username <strong>%1$s</strong>. Please wait <strong "
	1023	+"id=\"seconds_remaining\" data-seconds=\"%2$s\">%3$s</strong> before trying "
	1024	+"again. <a href=\"%4$s\" title=\"Password Lost and Found\">Lost your password</"
	1025	+"a>?"
511	1026	msgstr ""
512	1027
513		-#: authorizer.php:3804
514		-msgid "Search Users"
	1028	+#: src/authorizer/class-authentication.php:248
	1029	+#: src/authorizer/class-login-form.php:708
	1030	+msgid "<strong>ERROR</strong>: The username field is empty."
515	1031	msgstr ""
516	1032
517		-#: authorizer.php:3806
518		-msgid "Search"
	1033	+#: src/authorizer/class-authentication.php:252
	1034	+msgid "<strong>ERROR</strong>: The password field is empty."
519	1035	msgstr ""
520	1036
521		-#: authorizer.php:3904 authorizer.php:4364 authorizer.php:5025
522		-msgid "-- None --"
	1037	+#: src/authorizer/class-authentication.php:716
	1038	+msgid "Email address does not match the allowed hosted domain"
523	1039	msgstr ""
524	1040
525		-#: authorizer.php:4001
526		-msgid "Choose who is able to log into this site below."
	1041	+#: src/authorizer/class-authentication.php:834
	1042	+msgid "The authentication timestamp is too old, please try again."
527	1043	msgstr ""
528	1044
529		-#: authorizer.php:4033
530		-msgid ""
531		-"All authenticated users (All external service users and all WordPress users)"
	1045	+#: src/authorizer/class-authentication.php:837
	1046	+#: src/authorizer/class-authentication.php:842
	1047	+msgid "Invalid Google credentials provided."
532	1048	msgstr ""
533	1049
534		-#: authorizer.php:4034
535		-msgid "Only"
	1050	+#: src/authorizer/class-authentication.php:868
	1051	+msgid "Google credentials do not match the allowed hosted domain"
536	1052	msgstr ""
537	1053
538		-#: authorizer.php:4034
539		-msgid "approved users"
	1054	+#: src/authorizer/class-authentication.php:961
	1055	+msgid "CAS server returned an Authentication Exception. Details:"
540	1056	msgstr ""
541	1057
542		-#: authorizer.php:4034
543		-msgid "(Approved external users and all WordPress users)"
	1058	+#: src/authorizer/class-authentication.php:1090
	1059	+#, php-format
	1060	+msgid "[%s] Attempting to authenticate via LDAP."
544	1061	msgstr ""
545	1062
546		-#: authorizer.php:4051
547		-msgid "None (Don't send notification emails)"
	1063	+#: src/authorizer/class-authentication.php:1100
	1064	+msgid "Failed: no LDAP Host(s) specified."
548	1065	msgstr ""
549	1066
550		-#: authorizer.php:4123
551		-msgid "Send a welcome email when approving a new user"
	1067	+#: src/authorizer/class-authentication.php:1111
	1068	+msgid "Failed: no LDAP Search Base(s) specified."
552	1069	msgstr ""
553	1070
554		-#: authorizer.php:4139
555		-msgid "You can use the <b>[site_name]</b> shortcode."
	1071	+#: src/authorizer/class-authentication.php:1144
	1072	+msgid "Failed: empty username and password."
556	1073	msgstr ""
557	1074
558		-#. TRANSLATORS: 1: Shortcode for site name 2: Shortcode for site URL 3: Shortcode for user email
559		-#: authorizer.php:4170
560		-#, php-format
561		-msgid "You can use %1$s, %2$s, and %3$s shortcodes."
	1075	+#: src/authorizer/class-authentication.php:1152
	1076	+msgid "Failed: empty username."
562	1077	msgstr ""
563	1078
564		-#: authorizer.php:4186
565		-msgid "Choose your public access options here."
	1079	+#: src/authorizer/class-authentication.php:1154
	1080	+msgid "You must provide a username or email."
566	1081	msgstr ""
567	1082
568		-#: authorizer.php:4218
569		-msgid "Everyone can see the site"
	1083	+#: src/authorizer/class-authentication.php:1158
	1084	+msgid "Failed: empty password."
570	1085	msgstr ""
571	1086
572		-#: authorizer.php:4219
573		-msgid "Only logged in users can see the site"
	1087	+#: src/authorizer/class-authentication.php:1160
	1088	+msgid "You must provide a password."
574	1089	msgstr ""
575	1090
576		-#: authorizer.php:4235
577		-msgid "Send them to the login screen"
	1091	+#: src/authorizer/class-authentication.php:1166
	1092	+msgid "Failed: php-ldap extension not installed."
578	1093	msgstr ""
579	1094
580		-#: authorizer.php:4236
581		-msgid "Show them the anonymous access message (below)"
	1095	+#: src/authorizer/class-authentication.php:1197
	1096	+#, php-format
	1097	+msgid "Warning: could not parse host %s with wp_parse_url()."
582	1098	msgstr ""
583	1099
584		-#: authorizer.php:4252
585		-msgid ""
586		-"Show them the page <strong>without</strong> the anonymous access message"
	1100	+#: src/authorizer/class-authentication.php:1223
	1101	+#, php-format
	1102	+msgid "Warning: syntax check failed on host %s in ldap_connect()."
587	1103	msgstr ""
588	1104
589		-#: authorizer.php:4253
590		-msgid ""
591		-"Show them the page <strong>with</strong> the anonymous access message "
592		-"(marked up as a <a href=\"http://getbootstrap.com/components/#alerts-"
593		-"dismissible\" target=\"_blank\">Bootstrap Dismissible Alert</a>)"
	1105	+#: src/authorizer/class-authentication.php:1234
	1106	+#, php-format
	1107	+msgid "Warning: unable to start TLS on host %s:"
594	1108	msgstr ""
595	1109
596		-#: authorizer.php:4301
597		-msgid "Home"
	1110	+#: src/authorizer/class-authentication.php:1288
	1111	+#, php-format
	1112	+msgid "Performing bind as user logging in: %s."
598	1113	msgstr ""
599	1114
600		-#: authorizer.php:4302
601		-msgid "Home Page"
	1115	+#: src/authorizer/class-authentication.php:1298
	1116	+#, php-format
	1117	+msgid "Warning: unable to bind on host %1$s using directory user:"
602	1118	msgstr ""
603	1119
604		-#: authorizer.php:4303
605		-msgid "Nonexistent (404) Pages"
	1120	+#: src/authorizer/class-authentication.php:1312
	1121	+#, php-format
	1122	+msgid "Successful bind using LDAP user DN %s instead of directory user."
606	1123	msgstr ""
607	1124
608		-#: authorizer.php:4318
609		-msgid "Categories"
	1125	+#: src/authorizer/class-authentication.php:1322
	1126	+#: src/authorizer/class-authentication.php:1469
	1127	+#, php-format
	1128	+msgid "Failed: password incorrect for LDAP user %s."
610	1129	msgstr ""
611	1130
612		-#: authorizer.php:4345
613		-msgid "Enter your external server settings below."
	1131	+#: src/authorizer/class-authentication.php:1335
	1132	+#, php-format
	1133	+msgid "Connected to LDAP host %s."
614	1134	msgstr ""
615	1135
616		-#: authorizer.php:4381
617		-msgid "Enable Google Logins"
	1136	+#: src/authorizer/class-authentication.php:1343
	1137	+msgid "Failed: unable to connect to any LDAP host."
618	1138	msgstr ""
619	1139
620		-#: authorizer.php:4399
621		-msgid ""
622		-"If you don't have a Google Client ID and Secret, generate them by following "
623		-"these instructions:"
	1140	+#: src/authorizer/class-authentication.php:1404
	1141	+#, php-format
	1142	+msgid "Using LDAP search filter: %s"
624	1143	msgstr ""
625	1144
626		-#: authorizer.php:4401
627		-msgid ""
628		-"Click <strong>Create a Project</strong> on the <a href=\"https://cloud."
629		-"google.com/console\" target=\"_blank\">Google Developers Console</a>. You "
630		-"can name it whatever you want."
	1145	+#: src/authorizer/class-authentication.php:1419
	1146	+#, php-format
	1147	+msgid "Found user %1$s in search base: %2$s"
631	1148	msgstr ""
632	1149
633		-#: authorizer.php:4402
634		-msgid ""
635		-"Within the project, navigate to <em>APIs and Auth</em> &gt; <em>Credentials</"
636		-"em>, then click <strong>Create New Client ID</strong> under OAuth. Use these "
637		-"settings:"
	1150	+#: src/authorizer/class-authentication.php:1424
	1151	+#, php-format
	1152	+msgid "Failed to find user %1$s in %2$s. Trying next search base."
638	1153	msgstr ""
639	1154
640		-#: authorizer.php:4404
641		-msgid "Application Type: <strong>Web application</strong>"
	1155	+#: src/authorizer/class-authentication.php:1432
	1156	+#, php-format
	1157	+msgid "Failed: no LDAP user %s found."
642	1158	msgstr ""
643	1159
644		-#: authorizer.php:4405
645		-msgid "Authorized Javascript Origins:"
	1160	+#: src/authorizer/class-authentication.php:1488
	1161	+#, php-format
	1162	+msgid "[%1$s] Successfully authenticated user %2$s (%3$s) via LDAP."
646	1163	msgstr ""
647	1164
648		-#: authorizer.php:4406
649		-msgid "Authorized Redirect URI: <em>none</em>"
	1165	+#: src/authorizer/class-authorization.php:132
	1166	+#: src/authorizer/class-authorization.php:701
	1167	+#, php-format
	1168	+msgid "%s - Access Restricted"
650	1169	msgstr ""
651	1170
652		-#: authorizer.php:4409
653		-msgid "Copy/paste your new Client ID/Secret pair into the fields below."
	1171	+#: src/authorizer/class-authorization.php:140
	1172	+#: src/authorizer/class-authorization.php:538
	1173	+msgid "Back"
654	1174	msgstr ""
655	1175
656		-#: authorizer.php:4410
657		-msgid ""
658		-"<strong>Note</strong>: Navigate to <em>APIs and Auth</em> &gt; <em>Consent "
659		-"screen</em> to change the way the Google consent screen appears after a user "
660		-"has successfully entered their password, but before they are redirected back "
661		-"to WordPress."
	1176	+#: src/authorizer/class-authorization.php:144
	1177	+#: src/authorizer/class-authorization.php:546
	1178	+msgid "Invalid login attempted."
662	1179	msgstr ""
663	1180
664		-#: authorizer.php:4411
	1181	+#: src/authorizer/class-authorization.php:506
	1182	+#, php-format
	1183	+msgid "Action required: Pending user %1$s at %2$s"
	1184	+msgstr ""
	1185	+
	1186	+#: src/authorizer/class-authorization.php:512
	1187	+#, php-format
665	1188	msgid ""
666		-"Note: Google may have a more recent version of these instructions in their "
667		-"<a href=\"https://developers.google.com/identity/sign-in/web/devconsole-"
668		-"project\" target=\"_blank\">developer documentation</a>."
	1189	+"A new user has tried to access the %1$s site you manage at:\n"
	1190	+"%2$s\n"
	1191	+"\n"
	1192	+"Please log in to approve or deny their request:\n"
	1193	+"%3$s\n"
669	1194	msgstr ""
670	1195
671		-#: authorizer.php:4414
672		-msgid ""
673		-"Example: 1234567890123-kdjr85yt6vjr6d8g7dhr8g7d6durjf7g.apps."
674		-"googleusercontent.com"
	1196	+#: src/authorizer/class-authorization.php:709
	1197	+#: src/authorizer/class-login-form.php:40
	1198	+msgid "Log In"
675	1199	msgstr ""
676	1200
677		-#: authorizer.php:4431
678		-msgid "Example: sDNgX5_pr_5bly-frKmvp8jT"
	1201	+#: src/authorizer/class-dashboard-widget.php:54
	1202	+#: src/authorizer/options/class-access-lists.php:40
	1203	+msgid "Pending Users"
679	1204	msgstr ""
680	1205
681		-#: authorizer.php:4448
682		-msgid ""
683		-"Restrict Google logins to a specific Google Apps hosted domain (for example, "
684		-"mycollege.edu). Leave blank to allow all Google sign-ins."
	1206	+#: src/authorizer/class-dashboard-widget.php:59
	1207	+#: src/authorizer/options/class-access-lists.php:44
	1208	+msgid "Approved Users"
685	1209	msgstr ""
686	1210
687		-#: authorizer.php:4448
688		-msgid "If restricting to multiple domains, add one domain per line."
	1211	+#: src/authorizer/class-dashboard-widget.php:64
	1212	+#: src/authorizer/options/class-access-lists.php:48
	1213	+msgid "Blocked Users"
689	1214	msgstr ""
690	1215
691		-#: authorizer.php:4465
692		-msgid ""
693		-"<a href=\"http://www.php.net//manual/en/curl.installation.php\" target="
694		-"\"_blank\" style=\"color: red;\">PHP CURL extension</a> is not installed"
	1216	+#: src/authorizer/class-helper.php:289
	1217	+msgid "&mdash; No role for this site &mdash;"
695	1218	msgstr ""
696	1219
697		-#: authorizer.php:4468
698		-msgid ""
699		-"<a href=\"http://stackoverflow.com/questions/23424459/enable-php-openssl-not-"
700		-"working\" target=\"_blank\" style=\"color: red;\">PHP openssl extension</a> "
701		-"is not installed"
	1220	+#: src/authorizer/class-login-form.php:238
	1221	+#: src/authorizer/class-login-form.php:255
	1222	+#: src/authorizer/class-login-form.php:279
	1223	+#, php-format
	1224	+msgid "Sign in with %s"
702	1225	msgstr ""
703	1226
704		-#: authorizer.php:4474
705		-msgid "Warning"
	1227	+#: src/authorizer/class-login-form.php:305
	1228	+msgid "or"
706	1229	msgstr ""
707	1230
708		-#: authorizer.php:4482
709		-msgid "Enable CAS Logins"
	1231	+#: src/authorizer/class-login-form.php:483
	1232	+#, php-format
	1233	+msgid ""
	1234	+"Authorizer lockout triggered for %1$s on user %2$s after the %3$s invalid "
	1235	+"attempt."
710	1236	msgstr ""
711	1237
712		-#: authorizer.php:4498
713		-msgid "The button on the login page will read:"
	1238	+#: src/authorizer/class-login-form.php:486
	1239	+#, php-format
	1240	+msgid ""
	1241	+"Authorizer lockout triggered for %1$s on all non-existent user names after "
	1242	+"the %3$s invalid attempt (triggered by non-existent user name: %2$s)."
714	1243	msgstr ""
715	1244
716		-#: authorizer.php:4498
717		-msgid "Sign in with"
	1245	+#: src/authorizer/class-options.php:83
	1246	+#: src/authorizer/options/class-advanced.php:435
	1247	+msgid "This setting is overridden by a"
718	1248	msgstr ""
719	1249
720		-#: authorizer.php:4515
721		-msgid "Example: authn.example.edu"
	1250	+#: src/authorizer/class-options.php:83
	1251	+#: src/authorizer/options/class-advanced.php:435
	1252	+msgid "multisite option"
722	1253	msgstr ""
723	1254
724		-#: authorizer.php:4532
725		-msgid "Example: 443"
	1255	+#: src/authorizer/class-options.php:327
	1256	+msgid ""
	1257	+"You're not currently allowed to view this site. Your administrator has been "
	1258	+"notified, and once he/she has approved your request, you will be able to log "
	1259	+"in. If you need any other help, please contact your administrator."
726	1260	msgstr ""
727	1261
728		-#: authorizer.php:4549
729		-msgid "Example: /cas"
	1262	+#: src/authorizer/class-options.php:330
	1263	+msgid ""
	1264	+"You're not currently allowed to log into this site. If you think this is a "
	1265	+"mistake, please contact your administrator."
730	1266	msgstr ""
731	1267
732		-#: authorizer.php:4587 authorizer.php:4779
733		-msgid "Example: mail"
	1268	+#: src/authorizer/class-options.php:338
	1269	+#, php-format
	1270	+msgid "Welcome to %s!"
734	1271	msgstr ""
735	1272
736		-#: authorizer.php:4588
	1273	+#: src/authorizer/class-options.php:345
	1274	+#, php-format
737	1275	msgid ""
738		-"Note: If your CAS server doesn't return an attribute containing an email, "
739		-"you can specify the @domain portion of the email address here, and the email "
740		-"address will be constructed from it and the username. For example, if user "
741		-"'bob' logs in and his email address should be [email protected], then enter "
742		-"<strong>@example.edu</strong> in this field."
	1276	+"Hello %1$s,\n"
	1277	+"Welcome to %2$s! You now have access to all content on the site. Please visit "
	1278	+"us here:\n"
	1279	+"%3$s\n"
743	1280	msgstr ""
744	1281
745		-#: authorizer.php:4605
746		-msgid "Example: givenName"
	1282	+#: src/authorizer/class-options.php:366
	1283	+msgid ""
	1284	+"Notice: You are browsing this site anonymously, and only have access to a "
	1285	+"portion of its content."
747	1286	msgstr ""
748	1287
749		-#: authorizer.php:4622 authorizer.php:4865
750		-msgid "Example: sn"
	1288	+#: src/authorizer/options/class-access-lists.php:30
	1289	+msgid "Manage who has access to this site using these lists."
751	1290	msgstr ""
752	1291
753		-#: authorizer.php:4638 authorizer.php:4881
	1292	+#: src/authorizer/options/class-access-lists.php:32
754	1293	msgid ""
755		-"Update first and last name fields on login (will overwrite any name the user "
756		-"has supplied in their profile)"
	1294	+"<strong>Pending</strong> users are users who have successfully logged in to "
	1295	+"the site, but who haven't yet been approved (or blocked) by you."
757	1296	msgstr ""
758	1297
759		-#: authorizer.php:4654
	1298	+#: src/authorizer/options/class-access-lists.php:33
760	1299	msgid ""
761		-"Immediately redirect to CAS login form if it's the only enabled external "
762		-"service and WordPress logins are hidden"
	1300	+"<strong>Approved</strong> users have access to the site once they "
	1301	+"successfully log in."
763	1302	msgstr ""
764	1303
765		-#: authorizer.php:4655
	1304	+#: src/authorizer/options/class-access-lists.php:34
766	1305	msgid ""
767		-"Note: This feature will only work if you have checked \"Hide WordPress Logins"
768		-"\" in Advanced settings, and if CAS is the only enabled service (i.e., no "
769		-"Google or LDAP). If you have enabled CAS Single Sign-On (SSO), and a user "
770		-"has already logged into CAS elsewhere, enabling this feature will allow "
771		-"automatic logins without any user interaction."
	1306	+"<strong>Blocked</strong> users will receive an error message when they try to "
	1307	+"visit the site after authenticating."
772	1308	msgstr ""
773	1309
774		-#: authorizer.php:4671
	1310	+#: src/authorizer/options/class-access-lists.php:34
775	1311	msgid ""
776		-"Warning: <a href=\"http://www.php.net/manual/en/ldap.installation.php\" "
777		-"target=\"_blank\" style=\"color: red;\">PHP LDAP extension</a> is "
778		-"<strong>not</strong> installed"
	1312	+"Note: if you want to block all email addresses from a domain, say "
	1313	+"[email protected], simply add \"@example.com\" to the blocked list."
779	1314	msgstr ""
780	1315
781		-#: authorizer.php:4674
782		-msgid "Enable LDAP Logins"
	1316	+#: src/authorizer/options/class-access-lists.php:87
	1317	+#: src/authorizer/options/class-access-lists.php:224
	1318	+msgid "Approve"
783	1319	msgstr ""
784	1320
785		-#: authorizer.php:4691
786		-msgid ""
787		-"Specify either a hostname (for example, ldap.example.edu) or a full LDAP URI "
788		-"(for example, ldaps://ldap.example.edu:636)."
	1321	+#: src/authorizer/options/class-access-lists.php:88
	1322	+#: src/authorizer/options/class-access-lists.php:287
	1323	+msgid "Block"
789	1324	msgstr ""
790	1325
791		-#: authorizer.php:4708
792		-msgid "Example: 389"
	1326	+#: src/authorizer/options/class-access-lists.php:89
	1327	+msgid "Ignore"
793	1328	msgstr ""
794	1329
795		-#: authorizer.php:4709
796		-msgid ""
797		-"If a full LDAP URI (ldaps://hostname:port) is specified above, this field is "
798		-"ignored."
	1330	+#: src/authorizer/options/class-access-lists.php:93
	1331	+msgid "No pending users"
799	1332	msgstr ""
800	1333
801		-#: authorizer.php:4726
802		-msgid "If ldaps is used, this should be unchecked"
	1334	+#: src/authorizer/options/class-access-lists.php:219
	1335	+#: src/authorizer/options/class-access-lists.php:283
	1336	+msgid "email address"
803	1337	msgstr ""
804	1338
805		-#: authorizer.php:4743
806		-msgid "Example: ou=people,dc=example,dc=edu"
	1339	+#: src/authorizer/options/class-access-lists.php:227
	1340	+msgid "Toggle Dropdown"
807	1341	msgstr ""
808	1342
809		-#: authorizer.php:4744
810		-msgid ""
811		-"If you have multiple search bases, separate them by newlines (one per line)."
	1343	+#: src/authorizer/options/class-access-lists.php:230
	1344	+msgid "Create a new WordPress account, and email the user an activation link."
812	1345	msgstr ""
813	1346
814		-#: authorizer.php:4762
815		-msgid "Example: uid"
	1347	+#: src/authorizer/options/class-access-lists.php:352
	1348	+#: src/authorizer/options/class-access-lists.php:356
	1349	+msgid "Current Page"
816	1350	msgstr ""
817	1351
818		-#: authorizer.php:4780
819		-msgid ""
820		-"Note: If your LDAP server doesn't return an attribute containing an email, "
821		-"you can specify the @domain portion of the email address here, and the email "
822		-"address will be constructed from it and the username. For example, if user "
823		-"'bob' logs in and his email address should be [email protected], then enter "
824		-"<strong>@example.edu</strong> in this field."
	1352	+#: src/authorizer/options/class-access-lists.php:364
	1353	+#, php-format
	1354	+msgctxt "paging"
	1355	+msgid "%1$s of %2$s"
825	1356	msgstr ""
826	1357
827		-#: authorizer.php:4797
828		-msgid "Example: cn=directory-user,ou=specials,dc=example,dc=edu"
	1358	+#: src/authorizer/options/class-access-lists.php:396
	1359	+msgid "Search Users"
829	1360	msgstr ""
830	1361
831		-#: authorizer.php:4831
832		-msgid "Example: https://myschool.example.edu:8888/am-forgot-password"
	1362	+#: src/authorizer/options/class-access-lists.php:398
	1363	+msgid "Search"
833	1364	msgstr ""
834	1365
835		-#: authorizer.php:4848
836		-msgid "Example: givenname"
	1366	+#: src/authorizer/options/class-access-lists.php:515
	1367	+#: src/authorizer/options/class-advanced.php:260
	1368	+#: src/authorizer/options/class-external.php:51
	1369	+#: src/authorizer/options/external/class-oauth2.php:87
	1370	+msgid "-- None --"
837	1371	msgstr ""
838	1372
839		-#: authorizer.php:4893
	1373	+#: src/authorizer/options/class-advanced.php:29
840	1374	msgid "You may optionally specify some advanced settings below."
841	1375	msgstr ""
842	1376
843		-#: authorizer.php:4910 authorizer.php:4916
	1377	+#: src/authorizer/options/class-advanced.php:48
	1378	+#: src/authorizer/options/class-advanced.php:55
844	1379	msgid "After"
845	1380	msgstr ""
846	1381
847		-#: authorizer.php:4912
	1382	+#: src/authorizer/options/class-advanced.php:51
848	1383	msgid "invalid password attempts, delay further attempts on that user for"
849	1384	msgstr ""
850	1385
851		-#: authorizer.php:4914
	1386	+#: src/authorizer/options/class-advanced.php:53
852	1387	msgid "minute(s)."
853	1388	msgstr ""
854	1389
855		-#: authorizer.php:4918
	1390	+#: src/authorizer/options/class-advanced.php:57
856	1391	msgid "more invalid attempts, increase the delay to"
857	1392	msgstr ""
858	1393
859		-#: authorizer.php:4920
	1394	+#: src/authorizer/options/class-advanced.php:59
860	1395	msgid "minutes."
861	1396	msgstr ""
862	1397
863		-#: authorizer.php:4922
	1398	+#: src/authorizer/options/class-advanced.php:61
864	1399	msgid "Reset the delays after"
865	1400	msgstr ""
866	1401
867		-#: authorizer.php:4924
	1402	+#: src/authorizer/options/class-advanced.php:63
868	1403	msgid "minutes with no invalid attempts."
869	1404	msgstr ""
870	1405
871		-#: authorizer.php:4940 authorizer.php:5501
872		-msgid "Hide WordPress Logins"
	1406	+#: src/authorizer/options/class-advanced.php:83
	1407	+msgid ""
	1408	+"Note: You can always access the WordPress logins by adding external=wordpress "
	1409	+"to the wp-login URL, like so:"
873	1410	msgstr ""
874	1411
875		-#: authorizer.php:4941
	1412	+#: src/authorizer/options/class-advanced.php:103
876	1413	msgid ""
877		-"Note: You can always access the WordPress logins by adding "
878		-"external=wordpress to the wp-login URL, like so:"
	1414	+"Warning: Disabling WordPress logins means you will not be able to access "
	1415	+"WordPress administration if your external service(s) are not working. Use "
	1416	+"with caution. Note: If no external services are enabled, WordPress logins "
	1417	+"will not be disabled."
879	1418	msgstr ""
880	1419
881		-#: authorizer.php:4957
	1420	+#: src/authorizer/options/class-advanced.php:123
	1421	+msgid ""
	1422	+"If you have specific WordPress users that need to bypass disabled WordPress "
	1423	+"logins and use their WordPress credentials to log in, list them here, one "
	1424	+"username per line. Leave this field blank to prevent all users from using "
	1425	+"their WordPress credentials to log in."
	1426	+msgstr ""
	1427	+
	1428	+#: src/authorizer/options/class-advanced.php:150
	1429	+#: src/authorizer/options/class-login-access.php:196
	1430	+#: src/authorizer/options/class-login-access.php:249
	1431	+#: src/authorizer/options/external/class-google.php:82
	1432	+#: src/authorizer/options/external/class-google.php:136
	1433	+#: src/authorizer/options/external/class-ldap.php:221
	1434	+#: src/authorizer/options/external/class-ldap.php:304
	1435	+#: src/authorizer/options/external/class-oauth2.php:157
	1436	+#: src/authorizer/options/external/class-oauth2.php:212
	1437	+#, php-format
	1438	+msgid "This setting is not editable since it has been defined in the %s filter."
	1439	+msgstr ""
	1440	+
	1441	+#: src/authorizer/options/class-advanced.php:166
	1442	+#: src/authorizer/options/class-login-access.php:212
	1443	+#: src/authorizer/options/class-login-access.php:265
	1444	+#: src/authorizer/options/external/class-google.php:98
	1445	+#: src/authorizer/options/external/class-google.php:152
	1446	+#: src/authorizer/options/external/class-ldap.php:237
	1447	+#: src/authorizer/options/external/class-ldap.php:320
	1448	+#: src/authorizer/options/external/class-oauth2.php:173
	1449	+#: src/authorizer/options/external/class-oauth2.php:228
	1450	+#, php-format
	1451	+msgid ""
	1452	+"This setting is not editable since it has been defined in wp-config.php via %s"
	1453	+msgstr ""
	1454	+
	1455	+#: src/authorizer/options/class-advanced.php:179
882	1456	msgid "Default WordPress login screen"
883	1457	msgstr ""
884	1458
885		-#: authorizer.php:4989
	1459	+#: src/authorizer/options/class-advanced.php:213
886	1460	msgid ""
887	1461	"<strong>Note for theme developers</strong>: Add more options here by using "
888		-"the `authorizer_add_branding_option` filter in your theme. You can see an "
889		-"example theme that implements this filter in the plugin directory under "
890		-"sample-theme-add-branding."
	1462	+"the <code>authorizer_add_branding_option</code> filter in your theme. You can "
	1463	+"see an example theme that implements this filter in the plugin directory "
	1464	+"under sample-theme-add-branding."
891	1465	msgstr ""
892	1466
893		-#: authorizer.php:5006
	1467	+#: src/authorizer/options/class-advanced.php:237
894	1468	msgid "Show in Settings menu"
895	1469	msgstr ""
896	1470
897		-#: authorizer.php:5007
	1471	+#: src/authorizer/options/class-advanced.php:239
898	1472	msgid "Show in sidebar (top level)"
899	1473	msgstr ""
900	1474
901		-#: authorizer.php:5074
	1475	+#: src/authorizer/options/class-advanced.php:320
902	1476	msgid "All Usermeta:"
903	1477	msgstr ""
904	1478
905		-#: authorizer.php:5115
	1479	+#: src/authorizer/options/class-advanced.php:369
906	1480	msgid "Date approved"
907	1481	msgstr ""
908	1482
909		-#: authorizer.php:5116
	1483	+#: src/authorizer/options/class-advanced.php:370
910	1484	msgid "Email"
911	1485	msgstr ""
912	1486
913		-#: authorizer.php:5117
	1487	+#: src/authorizer/options/class-advanced.php:371
914	1488	msgid "Role"
915	1489	msgstr ""
916	1490
917		-#: authorizer.php:5118
	1491	+#: src/authorizer/options/class-advanced.php:372
918	1492	msgid "Date registered"
919	1493	msgstr ""
920	1494
921		-#: authorizer.php:5136
	1495	+#: src/authorizer/options/class-advanced.php:393
922	1496	msgid "Ascending"
923	1497	msgstr ""
924	1498
925		-#: authorizer.php:5137
	1499	+#: src/authorizer/options/class-advanced.php:394
926	1500	msgid "Descending"
927	1501	msgstr ""
928	1502
929		-#: authorizer.php:5154 authorizer.php:5517
930		-msgid "Show Dashboard Widget"
931		-msgstr ""
932		-
933		-#: authorizer.php:5155
	1503	+#: src/authorizer/options/class-advanced.php:415
934	1504	msgid ""
935	1505	"Note: Only users with the create_users capability will be able to see the "
936	1506	"dashboard widget."
937	1507	msgstr ""
938	1508
939		-#: authorizer.php:5171
	1509	+#: src/authorizer/options/class-advanced.php:442
	1510	+msgid "Configure this site independently (don't inherit any multisite settings)"
	1511	+msgstr ""
	1512	+
	1513	+#: src/authorizer/options/class-external.php:29
	1514	+msgid "Enter your external server settings below."
	1515	+msgstr ""
	1516	+
	1517	+#: src/authorizer/options/class-login-access.php:30
	1518	+msgid "Choose who is able to log into this site below."
	1519	+msgstr ""
	1520	+
	1521	+#: src/authorizer/options/class-login-access.php:69
940	1522	msgid ""
941		-"Configure this site independently (don't inherit any multisite settings)"
	1523	+"All authenticated users (All external service users and all WordPress users)"
942	1524	msgstr ""
943	1525
944		-#: authorizer.php:5201
	1526	+#: src/authorizer/options/class-login-access.php:71
	1527	+msgid "Only"
	1528	+msgstr ""
	1529	+
	1530	+#: src/authorizer/options/class-login-access.php:71
	1531	+msgid "approved users"
	1532	+msgstr ""
	1533	+
	1534	+#: src/authorizer/options/class-login-access.php:71
	1535	+msgid "(Approved external users and all WordPress users)"
	1536	+msgstr ""
	1537	+
	1538	+#: src/authorizer/options/class-login-access.php:92
	1539	+msgid "None (Don't send notification emails)"
	1540	+msgstr ""
	1541	+
	1542	+#: src/authorizer/options/class-login-access.php:169
	1543	+msgid "Send a welcome email when approving a new user"
	1544	+msgstr ""
	1545	+
	1546	+#: src/authorizer/options/class-login-access.php:222
	1547	+msgid "You can use the <b>[site_name]</b> shortcode."
	1548	+msgstr ""
	1549	+
	1550	+#: src/authorizer/options/class-login-access.php:291
	1551	+#, php-format
	1552	+msgid "You can use %1$s, %2$s, and %3$s shortcodes."
	1553	+msgstr ""
	1554	+
	1555	+#: src/authorizer/options/class-public-access.php:29
	1556	+msgid "Choose your public access options here."
	1557	+msgstr ""
	1558	+
	1559	+#: src/authorizer/options/class-public-access.php:68
	1560	+msgid "Everyone can see the site"
	1561	+msgstr ""
	1562	+
	1563	+#: src/authorizer/options/class-public-access.php:70
	1564	+msgid "Only logged in users can see the site"
	1565	+msgstr ""
	1566	+
	1567	+#: src/authorizer/options/class-public-access.php:91
	1568	+msgid "Send them to the login screen"
	1569	+msgstr ""
	1570	+
	1571	+#: src/authorizer/options/class-public-access.php:93
	1572	+msgid "Show them the anonymous access message (below)"
	1573	+msgstr ""
	1574	+
	1575	+#: src/authorizer/options/class-public-access.php:114
	1576	+msgid "Show them the page <strong>without</strong> the anonymous access message"
	1577	+msgstr ""
	1578	+
	1579	+#: src/authorizer/options/class-public-access.php:116
945	1580	msgid ""
946		-"<strong>Pending Users</strong>: Pending users are users who have "
947		-"successfully logged in to the site, but who haven't yet been approved (or "
948		-"blocked) by you."
	1581	+"Show them the page <strong>with</strong> the anonymous access message (marked "
	1582	+"up as a <a href=\"http://getbootstrap.com/components/#alerts-dismissible\" "
	1583	+"target=\"_blank\">Bootstrap Dismissible Alert</a>)"
949	1584	msgstr ""
950	1585
951		-#: authorizer.php:5202
	1586	+#: src/authorizer/options/class-public-access.php:169
	1587	+msgid "Home"
	1588	+msgstr ""
	1589	+
	1590	+#: src/authorizer/options/class-public-access.php:170
	1591	+msgid "Home Page"
	1592	+msgstr ""
	1593	+
	1594	+#: src/authorizer/options/class-public-access.php:171
	1595	+msgid "Nonexistent (404) Pages"
	1596	+msgstr ""
	1597	+
	1598	+#: src/authorizer/options/class-public-access.php:194
	1599	+msgid "Categories"
	1600	+msgstr ""
	1601	+
	1602	+#: src/authorizer/options/external/class-cas.php:34
952	1603	msgid ""
953		-"<strong>Approved Users</strong>: Approved users have access to the site once "
954		-"they successfully log in."
	1604	+"<a href=\"http://www.php.net//manual/en/curl.installation.php\" "
	1605	+"target=\"_blank\" style=\"color: #dc3232;\">PHP CURL extension</a> is not "
	1606	+"installed"
955	1607	msgstr ""
956	1608
957		-#: authorizer.php:5203
	1609	+#: src/authorizer/options/external/class-cas.php:37
958	1610	msgid ""
959		-"<strong>Blocked Users</strong>: Blocked users will receive an error message "
960		-"when they try to visit the site after authenticating."
	1611	+"<a href=\"http://stackoverflow.com/questions/23424459/enable-php-openssl-not-"
	1612	+"working\" target=\"_blank\" style=\"color: #dc3232;\">PHP openssl extension</"
	1613	+"a> is not installed"
961	1614	msgstr ""
962	1615
963		-#: authorizer.php:5204
	1616	+#: src/authorizer/options/external/class-cas.php:43
	1617	+msgid "Warning"
	1618	+msgstr ""
	1619	+
	1620	+#: src/authorizer/options/external/class-cas.php:52
	1621	+msgid "Enable CAS Logins"
	1622	+msgstr ""
	1623	+
	1624	+#: src/authorizer/options/external/class-cas.php:73
	1625	+msgid "Off"
	1626	+msgstr ""
	1627	+
	1628	+#: src/authorizer/options/external/class-cas.php:79
	1629	+#, php-format
	1630	+msgid "Immediately redirect to CAS server #%s"
	1631	+msgstr ""
	1632	+
	1633	+#: src/authorizer/options/external/class-cas.php:87
964	1634	msgid ""
965		-"Users in the <strong>Pending</strong> list appear automatically after a new "
966		-"user tries to log in from the configured external authentication service. "
967		-"You can add users to the <strong>Approved</strong> or <strong>Blocked</"
968		-"strong> lists by typing them in manually, or by clicking the <em>Approve</"
969		-"em> or <em>Block</em> buttons next to a user in the <strong>Pending</strong> "
970		-"list."
	1635	+"Immediately redirect to CAS login form if it's the only enabled external "
	1636	+"service and WordPress logins are hidden"
971	1637	msgstr ""
972	1638
973		-#: authorizer.php:5216
	1639	+#: src/authorizer/options/external/class-cas.php:89
974	1640	msgid ""
975		-"<strong>Who can log in to the site?</strong>: Choose the level of access "
976		-"restriction you'd like to use on your site here. You can leave the site open "
977		-"to anyone with a WordPress account or an account on an external service like "
978		-"Google, CAS, or LDAP, or restrict it to WordPress users and only the "
979		-"external users that you specify via the <em>Access Lists</em>."
	1641	+"Note: This feature will only work if you have checked \"Hide WordPress "
	1642	+"Logins\" in Advanced settings, and if CAS is the only enabled service (i.e., "
	1643	+"no Google or LDAP). If you have enabled CAS Single Sign-On (SSO), and a user "
	1644	+"has already logged into CAS elsewhere, enabling this feature will allow "
	1645	+"automatic logins without any user interaction."
980	1646	msgstr ""
981	1647
982		-#: authorizer.php:5217
	1648	+#: src/authorizer/options/external/class-cas.php:111
983	1649	msgid ""
984		-"<strong>Which role should receive email notifications about pending users?</"
985		-"strong>: If you've restricted access to <strong>approved users</strong>, you "
986		-"can determine which WordPress users will receive a notification email "
987		-"everytime a new external user successfully logs in and is added to the "
988		-"pending list. All users of the specified role will receive an email, and the "
989		-"external user will get a message (specified below) telling them their access "
990		-"is pending approval."
	1650	+"Note: Save changes after increasing this value to see the options for "
	1651	+"additional CAS servers below."
991	1652	msgstr ""
992	1653
993		-#: authorizer.php:5218
	1654	+#: src/authorizer/options/external/class-cas.php:130
	1655	+#: src/authorizer/options/external/class-oauth2.php:109
	1656	+msgid "The button on the login page will read:"
	1657	+msgstr ""
	1658	+
	1659	+#: src/authorizer/options/external/class-cas.php:132
	1660	+#: src/authorizer/options/external/class-oauth2.php:111
	1661	+msgid "Sign in with"
	1662	+msgstr ""
	1663	+
	1664	+#: src/authorizer/options/external/class-cas.php:153
	1665	+msgid "Example: authn.example.edu"
	1666	+msgstr ""
	1667	+
	1668	+#: src/authorizer/options/external/class-cas.php:174
	1669	+msgid "Example: 443"
	1670	+msgstr ""
	1671	+
	1672	+#: src/authorizer/options/external/class-cas.php:195
	1673	+msgid "Example: /cas"
	1674	+msgstr ""
	1675	+
	1676	+#: src/authorizer/options/external/class-cas.php:225
994	1677	msgid ""
995		-"<strong>What message should pending users see after attempting to log in?</"
996		-"strong>: Here you can specify the exact message a new external user will see "
997		-"once they try to log in to the site for the first time."
	1678	+"\"Client\" is the most common, but use \"Proxy\" if your CAS server is behind "
	1679	+"a proxy server."
998	1680	msgstr ""
999	1681
1000		-#: authorizer.php:5230
	1682	+#: src/authorizer/options/external/class-cas.php:346
	1683	+#: src/authorizer/options/external/class-ldap.php:191
	1684	+msgid "Example: mail"
	1685	+msgstr ""
	1686	+
	1687	+#: src/authorizer/options/external/class-cas.php:348
1001	1688	msgid ""
1002		-"<strong>Who can view the site?</strong>: You can restrict the site's "
1003		-"visibility by only allowing logged in users to see pages. If you do so, you "
1004		-"can customize the specifics about the site's privacy using the settings "
1005		-"below."
	1689	+"Note: If your CAS server doesn't return an attribute containing an email, you "
	1690	+"can specify the @domain portion of the email address here, and the email "
	1691	+"address will be constructed from it and the username. For example, if user "
	1692	+"'bob' logs in and his email address should be [email protected], then enter "
	1693	+"<strong>@example.edu</strong> in this field."
1006	1694	msgstr ""
1007	1695
1008		-#: authorizer.php:5231
	1696	+#: src/authorizer/options/external/class-cas.php:370
	1697	+msgid "Example: givenName"
	1698	+msgstr ""
	1699	+
	1700	+#: src/authorizer/options/external/class-cas.php:391
	1701	+#: src/authorizer/options/external/class-ldap.php:394
	1702	+msgid "Example: sn"
	1703	+msgstr ""
	1704	+
	1705	+#: src/authorizer/options/external/class-cas.php:409
	1706	+#: src/authorizer/options/external/class-ldap.php:411
	1707	+#: src/authorizer/options/external/class-oauth2.php:446
	1708	+msgid "Do not update first and last name fields on login"
	1709	+msgstr ""
	1710	+
	1711	+#: src/authorizer/options/external/class-cas.php:410
	1712	+#: src/authorizer/options/external/class-ldap.php:412
	1713	+#: src/authorizer/options/external/class-oauth2.php:447
	1714	+msgid "Update first and last name fields on login"
	1715	+msgstr ""
	1716	+
	1717	+#: src/authorizer/options/external/class-cas.php:411
	1718	+#: src/authorizer/options/external/class-ldap.php:413
	1719	+#: src/authorizer/options/external/class-oauth2.php:448
	1720	+msgid "Update first and last name fields on login only if they are empty"
	1721	+msgstr ""
	1722	+
	1723	+#: src/authorizer/options/external/class-cas.php:440
1009	1724	msgid ""
1010		-"<strong>What pages (if any) should be available to everyone?</strong>: If "
1011		-"you'd like to declare certain pages on your site as always public (such as "
1012		-"the course syllabus, introduction, or calendar), specify those pages here. "
1013		-"These pages will always be available no matter what access restrictions "
1014		-"exist."
	1725	+"Link CAS accounts to WordPress accounts by their username (leave this off to "
	1726	+"link by email address)"
1015	1727	msgstr ""
1016	1728
1017		-#: authorizer.php:5232
	1729	+#: src/authorizer/options/external/class-cas.php:441
1018	1730	msgid ""
1019		-"<strong>What happens to people without access when they visit a <em>private</"
1020		-"em> page?</strong>: Choose the response anonymous users receive when "
1021		-"visiting the site. You can choose between immediately taking them to the "
1022		-"<strong>login screen</strong>, or simply showing them a <strong>message</"
1023		-"strong>."
	1731	+"Note: The default (and most secure) behavior is to associate WordPress "
	1732	+"accounts with CAS accounts by the email they have in common. However, some "
	1733	+"uncommon CAS server configurations don't contain email addresses for users. "
	1734	+"Enable this option if your CAS server doesn't have an attribute containing an "
	1735	+"email, or if you have WordPress accounts that don't have emails."
1024	1736	msgstr ""
1025	1737
1026		-#: authorizer.php:5233
	1738	+#: src/authorizer/options/external/class-google.php:35
	1739	+msgid "Enable Google Logins"
	1740	+msgstr ""
	1741	+
	1742	+#: src/authorizer/options/external/class-google.php:56
1027	1743	msgid ""
1028		-"<strong>What happens to people without access when they visit a <em>public</"
1029		-"em> page?</strong>: Choose the response anonymous users receive when "
1030		-"visiting a page on the site marked as public. You can choose between showing "
1031		-"them the page without any message, or showing them a the page with a message "
1032		-"above the content."
	1744	+"If you don't have a Google Client ID and Secret, generate them by following "
	1745	+"these instructions:"
1033	1746	msgstr ""
1034	1747
1035		-#: authorizer.php:5234
	1748	+#: src/authorizer/options/external/class-google.php:59
1036	1749	msgid ""
1037		-"<strong>What message should people without access see?</strong>: If you "
1038		-"chose to show new users a <strong>message</strong> above, type that message "
1039		-"here."
	1750	+"Click <strong>Create a Project</strong> on the <a href=\"https://cloud.google."
	1751	+"com/console\" target=\"_blank\">Google Cloud Console</a>. You can name it "
	1752	+"whatever you want."
1040	1753	msgstr ""
1041	1754
1042		-#: authorizer.php:5246
	1755	+#: src/authorizer/options/external/class-google.php:60
1043	1756	msgid ""
1044		-"<strong>Type of external service to authenticate against</strong>: Choose "
1045		-"which authentication service type you will be using. You'll have to fill out "
1046		-"different fields below depending on which service you choose."
	1757	+"Within the project, navigate to <em>APIs and Services</em> &gt; "
	1758	+"<em>Credentials</em>, then click <strong>+ Create Credentials &gt; OAuth "
	1759	+"client ID</strong>. Use these settings:"
1047	1760	msgstr ""
1048	1761
1049		-#: authorizer.php:5247
1050		-msgid ""
1051		-"<strong>Enable Google Logins</strong>: Choose if you want to allow users to "
1052		-"log in with their Google Account credentials. You will need to enter your "
1053		-"API Client ID and Secret to enable Google Logins."
	1762	+#: src/authorizer/options/external/class-google.php:62
	1763	+msgid "Application Type: <strong>Web application</strong>"
1054	1764	msgstr ""
1055	1765
1056		-#: authorizer.php:5248
	1766	+#: src/authorizer/options/external/class-google.php:63
	1767	+msgid "Authorized Javascript Origins:"
	1768	+msgstr ""
	1769	+
	1770	+#: src/authorizer/options/external/class-google.php:64
	1771	+msgid "Authorized Redirect URI: <em>none</em>"
	1772	+msgstr ""
	1773	+
	1774	+#: src/authorizer/options/external/class-google.php:67
	1775	+msgid "Copy/paste your new Client ID/Secret pair into the fields below."
	1776	+msgstr ""
	1777	+
	1778	+#: src/authorizer/options/external/class-google.php:68
1057	1779	msgid ""
1058		-"<strong>Enable CAS Logins</strong>: Choose if you want to allow users to log "
1059		-"in with via CAS (Central Authentication Service). You will need to enter "
1060		-"details about your CAS server (host, port, and path) to enable CAS Logins."
	1780	+"<strong>Note</strong>: Navigate to <em>APIs and Services</em> &gt; <em>OAuth "
	1781	+"consent screen</em> to change the way the Google consent screen appears after "
	1782	+"a user has successfully entered their password, but before they are "
	1783	+"redirected back to WordPress."
1061	1784	msgstr ""
1062	1785
1063		-#: authorizer.php:5249
	1786	+#: src/authorizer/options/external/class-google.php:69
1064	1787	msgid ""
1065		-"<strong>Enable LDAP Logins</strong>: Choose if you want to allow users to "
1066		-"log in with their LDAP (Lightweight Directory Access Protocol) credentials. "
1067		-"You will need to enter details about your LDAP server (host, port, search "
1068		-"base, uid attribute, directory user, directory user password, and whether to "
1069		-"use TLS) to enable Google Logins."
	1788	+"Note: Google may have a more recent version of these instructions in their <a "
	1789	+"href=\"https://developers.google.com/identity/gsi/web\" "
	1790	+"target=\"_blank\">developer documentation</a>."
1070	1791	msgstr ""
1071	1792
1072		-#: authorizer.php:5250
	1793	+#: src/authorizer/options/external/class-google.php:110
1073	1794	msgid ""
1074		-"<strong>Default role for new CAS users</strong>: Specify which role new "
1075		-"external users will get by default. Be sure to choose a role with limited "
1076		-"permissions!"
	1795	+"Example: 1234567890123-kdjr85yt6vjr6d8g7dhr8g7d6durjf7g.apps."
	1796	+"googleusercontent.com"
1077	1797	msgstr ""
1078	1798
1079		-#: authorizer.php:5251
1080		-msgid "If you enable Google logins:"
	1799	+#: src/authorizer/options/external/class-google.php:166
	1800	+msgid "Example: sDNgX5_pr_5bly-frKmvp8jT"
1081	1801	msgstr ""
1082	1802
1083		-#: authorizer.php:5253
	1803	+#: src/authorizer/options/external/class-google.php:186
1084	1804	msgid ""
1085		-"<strong>Google Client ID</strong>: You can generate this ID by creating a "
1086		-"new Project in the <a href='https://cloud.google.com/console'>Google "
1087		-"Developers Console</a>. A Client ID typically looks something like this: "
1088		-"1234567890123-kdjr85yt6vjr6d8g7dhr8g7d6durjf7g.apps.googleusercontent.com"
	1805	+"Restrict Google logins to a specific Google Apps hosted domain (for example, "
	1806	+"mycollege.edu). Leave blank to allow all Google sign-ins."
1089	1807	msgstr ""
1090	1808
1091		-#: authorizer.php:5254
	1809	+#: src/authorizer/options/external/class-google.php:186
	1810	+#: src/authorizer/options/external/class-oauth2.php:261
	1811	+msgid "If restricting to multiple domains, add one domain per line."
	1812	+msgstr ""
	1813	+
	1814	+#: src/authorizer/options/external/class-ldap.php:34
1092	1815	msgid ""
1093		-"<strong>Google Client Secret</strong>: You can generate this secret by "
1094		-"creating a new Project in the <a href='https://cloud.google.com/"
1095		-"console'>Google Developers Console</a>. A Client Secret typically looks "
1096		-"something like this: sDNgX5_pr_5bly-frKmvp8jT"
	1816	+"Warning: <a href=\"http://www.php.net/manual/en/ldap.installation.php\" "
	1817	+"target=\"_blank\" style=\"color: #dc3232;\">PHP LDAP extension</a> is "
	1818	+"<strong>not</strong> installed"
1097	1819	msgstr ""
1098	1820
1099		-#: authorizer.php:5256
1100		-msgid "If you enable CAS logins:"
	1821	+#: src/authorizer/options/external/class-ldap.php:38
	1822	+msgid "Enable LDAP Logins"
1101	1823	msgstr ""
1102	1824
1103		-#: authorizer.php:5258
	1825	+#: src/authorizer/options/external/class-ldap.php:58
1104	1826	msgid ""
1105		-"<strong>CAS server hostname</strong>: Enter the hostname of the CAS server "
1106		-"you authenticate against (e.g., authn.example.edu)."
	1827	+"Specify either a hostname (for example, ldap.example.edu) or a full LDAP URI "
	1828	+"(for example, ldaps://ldap.example.edu:636)."
1107	1829	msgstr ""
1108	1830
1109		-#: authorizer.php:5259
	1831	+#: src/authorizer/options/external/class-ldap.php:60
1110	1832	msgid ""
1111		-"<strong>CAS server port</strong>: Enter the port on the CAS server to "
1112		-"connect to (e.g., 443)."
	1833	+"If you have multiple LDAP servers (failover or high-availability "
	1834	+"configuration), separate them by newlines (one per line)."
1113	1835	msgstr ""
1114	1836
1115		-#: authorizer.php:5260
	1837	+#: src/authorizer/options/external/class-ldap.php:82
	1838	+msgid "Example: 389"
	1839	+msgstr ""
	1840	+
	1841	+#: src/authorizer/options/external/class-ldap.php:84
1116	1842	msgid ""
1117		-"<strong>CAS server path/context</strong>: Enter the path to the login "
1118		-"endpoint on the CAS server (e.g., /cas)."
	1843	+"If a full LDAP URI (ldaps://hostname:port) is specified above, this field is "
	1844	+"ignored."
1119	1845	msgstr ""
1120	1846
1121		-#: authorizer.php:5261
	1847	+#: src/authorizer/options/external/class-ldap.php:105
1122	1848	msgid ""
1123		-"<strong>CAS attribute containing first name</strong>: Enter the CAS "
1124		-"attribute that has the user's first name. When this user first logs in, "
1125		-"their WordPress account will have their first name retrieved from CAS and "
1126		-"added to their WordPress profile."
	1849	+"If an ldaps:// URL (and therefore Implicit TLS) is used, this checkbox is "
	1850	+"ignored."
1127	1851	msgstr ""
1128	1852
1129		-#: authorizer.php:5262
	1853	+#: src/authorizer/options/external/class-ldap.php:125
	1854	+msgid "Example: ou=people,dc=example,dc=edu"
	1855	+msgstr ""
	1856	+
	1857	+#: src/authorizer/options/external/class-ldap.php:127
1130	1858	msgid ""
1131		-"<strong>CAS attribute containing last name</strong>: Enter the CAS attribute "
1132		-"that has the user's last name. When this user first logs in, their WordPress "
1133		-"account will have their last name retrieved from CAS and added to their "
1134		-"WordPress profile."
	1859	+"If you have multiple search bases, separate them by newlines (one per line)."
1135	1860	msgstr ""
1136	1861
1137		-#: authorizer.php:5263
	1862	+#: src/authorizer/options/external/class-ldap.php:148
	1863	+msgid "Example: (memberOf=cn=wp_users,ou=people,dc=example,dc=edu)"
	1864	+msgstr ""
	1865	+
	1866	+#: src/authorizer/options/external/class-ldap.php:150
1138	1867	msgid ""
1139		-"<strong>CAS attribute update</strong>: Select whether the first and last "
1140		-"names retrieved from CAS should overwrite any value the user has entered in "
1141		-"the first and last name fields in their WordPress profile. If this is not "
1142		-"set, this only happens the first time they log in."
	1868	+"If you wish to use an LDAP search filter, enter it here. Otherwise leave this "
	1869	+"field blank."
1143	1870	msgstr ""
1144	1871
1145		-#: authorizer.php:5265
1146		-msgid "If you enable LDAP logins:"
	1872	+#: src/authorizer/options/external/class-ldap.php:171
	1873	+msgid "Example: uid"
1147	1874	msgstr ""
1148	1875
1149		-#: authorizer.php:5267
	1876	+#: src/authorizer/options/external/class-ldap.php:193
1150	1877	msgid ""
1151		-"<strong>LDAP Host</strong>: Enter the URL of the LDAP server you "
1152		-"authenticate against."
	1878	+"Note: If your LDAP server doesn't return an attribute containing an email, "
	1879	+"you can specify the @domain portion of the email address here, and the email "
	1880	+"address will be constructed from it and the username. For example, if user "
	1881	+"'bob' logs in and his email address should be [email protected], then enter "
	1882	+"<strong>@example.edu</strong> in this field."
1153	1883	msgstr ""
1154	1884
1155		-#: authorizer.php:5268
	1885	+#: src/authorizer/options/external/class-ldap.php:250
	1886	+msgid "Example: cn=directory-user,ou=specials,dc=example,dc=edu"
	1887	+msgstr ""
	1888	+
	1889	+#: src/authorizer/options/external/class-ldap.php:257
	1890	+#, php-format
1156	1891	msgid ""
1157		-"<strong>LDAP Port</strong>: Enter the port number that the LDAP server "
1158		-"listens on."
	1892	+"Note: You can use the %s wildcard to bind as the username of the user logging "
	1893	+"in instead of a directory user service account."
1159	1894	msgstr ""
1160	1895
1161		-#: authorizer.php:5269
	1896	+#: src/authorizer/options/external/class-ldap.php:269
	1897	+#, php-format
	1898	+msgid "Example: <strong>uid=%s,ou=people,dc=example,dc=edu</strong>."
	1899	+msgstr ""
	1900	+
	1901	+#: src/authorizer/options/external/class-ldap.php:276
1162	1902	msgid ""
1163		-"<strong>LDAP Search Base</strong>: Enter the LDAP string that represents the "
1164		-"search base, e.g., ou=people,dc=example,dc=edu"
	1903	+"Leave the LDAP Directory User Password field below blank, and the bind will "
	1904	+"be attempted with the user-supplied password."
1165	1905	msgstr ""
1166	1906
1167		-#: authorizer.php:5270
1168		-msgid ""
1169		-"<strong>LDAP attribute containing username</strong>: Enter the name of the "
1170		-"LDAP attribute that contains the usernames used by those attempting to log "
1171		-"in. The plugin will search on this attribute to find the cn to bind against "
1172		-"for login attempts."
	1907	+#: src/authorizer/options/external/class-ldap.php:354
	1908	+msgid "Example: https://myschool.example.edu:8888/am-forgot-password"
1173	1909	msgstr ""
1174	1910
1175		-#: authorizer.php:5271
1176		-msgid ""
1177		-"<strong>LDAP Directory User</strong>: Enter the name of the LDAP user that "
1178		-"has permissions to browse the directory."
	1911	+#: src/authorizer/options/external/class-ldap.php:374
	1912	+msgid "Example: givenname"
1179	1913	msgstr ""
1180	1914
1181		-#: authorizer.php:5272
1182		-msgid ""
1183		-"<strong>LDAP Directory User Password</strong>: Enter the password for the "
1184		-"LDAP user that has permission to browse the directory."
	1915	+#: src/authorizer/options/external/class-ldap.php:441
	1916	+msgid "username"
1185	1917	msgstr ""
1186	1918
1187		-#: authorizer.php:5273
1188		-msgid ""
1189		-"<strong>Use TLS</strong>: Select whether all communication with the LDAP "
1190		-"server should be performed over a TLS-secured connection."
	1919	+#: src/authorizer/options/external/class-ldap.php:443
	1920	+msgid "password"
1191	1921	msgstr ""
1192	1922
1193		-#: authorizer.php:5274
	1923	+#: src/authorizer/options/external/class-ldap.php:444
	1924	+msgid "Test"
	1925	+msgstr ""
	1926	+
	1927	+#: src/authorizer/options/external/class-ldap.php:447
1194	1928	msgid ""
1195		-"<strong>Custom lost password URL</strong>: The WordPress login page contains "
1196		-"a link to recover a lost password. If you have external users who shouldn't "
1197		-"change the password on their WordPress account, point them to the "
1198		-"appropriate location to change the password on their external authentication "
1199		-"service here."
	1929	+"Note: Make sure to save any changes to LDAP settings before clicking the Test "
	1930	+"button."
1200	1931	msgstr ""
1201	1932
1202		-#: authorizer.php:5275
1203		-msgid ""
1204		-"<strong>LDAP attribute containing first name</strong>: Enter the LDAP "
1205		-"attribute that has the user's first name. When this user first logs in, "
1206		-"their WordPress account will have their first name retrieved from LDAP and "
1207		-"added to their WordPress profile."
	1933	+#: src/authorizer/options/external/class-oauth2.php:62
	1934	+msgid "Enable OAuth2 Logins"
1208	1935	msgstr ""
1209	1936
1210		-#: authorizer.php:5276
1211		-msgid ""
1212		-"<strong>LDAP attribute containing last name</strong>: Enter the LDAP "
1213		-"attribute that has the user's last name. When this user first logs in, their "
1214		-"WordPress account will have their last name retrieved from LDAP and added to "
1215		-"their WordPress profile."
	1937	+#: src/authorizer/options/external/class-oauth2.php:81
	1938	+msgid "Other (generic OAuth2 provider)"
1216	1939	msgstr ""
1217	1940
1218		-#: authorizer.php:5277
	1941	+#: src/authorizer/options/external/class-oauth2.php:133
1219	1942	msgid ""
1220		-"<strong>LDAP attribute update</strong>: Select whether the first and last "
1221		-"names retrieved from LDAP should overwrite any value the user has entered in "
1222		-"the first and last name fields in their WordPress profile. If this is not "
1223		-"set, this only happens the first time they log in."
	1943	+"Generate your Client ID and Secret for your selected provider by following "
	1944	+"their specific instructions."
1224	1945	msgstr ""
1225	1946
1226		-#: authorizer.php:5290
1227		-msgid ""
1228		-"<strong>Limit invalid login attempts</strong>: Choose how soon (and for how "
1229		-"long) to restrict access to individuals (or bots) making repeated invalid "
1230		-"login attempts. You may set a shorter delay first, and then a longer delay "
1231		-"after repeated invalid attempts; you may also set how much time must pass "
1232		-"before the delays will be reset to normal."
	1947	+#: src/authorizer/options/external/class-oauth2.php:134
	1948	+msgid "If asked for a redirect or callback URL, use:"
1233	1949	msgstr ""
1234	1950
1235		-#: authorizer.php:5291
1236		-msgid ""
1237		-"<strong>Hide WordPress Logins</strong>: If you want to hide the WordPress "
1238		-"username and password fields and the Log In button on the wp-login screen, "
1239		-"enable this option. Note: You can always access the WordPress logins by "
1240		-"adding external=wordpress to the wp-login URL, like so:"
	1951	+#: src/authorizer/options/external/class-oauth2.php:138
	1952	+msgid "If using Microsoft Azure, omit the querystring; use:"
1241	1953	msgstr ""
1242	1954
1243		-#: authorizer.php:5292
1244		-msgid ""
1245		-"<strong>Custom WordPress login branding</strong>: If you'd like to use "
1246		-"custom branding on the WordPress login page, select that here. You will need "
1247		-"to use the `authorizer_add_branding_option` filter in your theme to add it. "
1248		-"You can see an example theme that implements this filter in the plugin "
1249		-"directory under sample-theme-add-branding."
	1955	+#: src/authorizer/options/external/class-oauth2.php:185
	1956	+msgid "Example: 0123456789abcdef0123"
1250	1957	msgstr ""
1251	1958
1252		-#: authorizer.php:5338
1253		-msgid "You do not have sufficient permissions to access this page."
	1959	+#: src/authorizer/options/external/class-oauth2.php:241
	1960	+msgid "Example: 0123456789abcdef0123456789abcdef"
1254	1961	msgstr ""
1255	1962
1256		-#: authorizer.php:5344
	1963	+#: src/authorizer/options/external/class-oauth2.php:261
1257	1964	msgid ""
1258		-"Most <strong>Authorizer</strong> settings are set in the individual sites, "
1259		-"but you can specify a few options here that apply to <strong>all sites in "
1260		-"the network</strong>. These settings will override settings in the "
1261		-"individual sites."
	1965	+"Restrict OAuth2 logins to a specific domain (for example, mycollege.edu). "
	1966	+"Leave blank to allow all valid sign-ins."
1262	1967	msgstr ""
1263	1968
1264		-#: authorizer.php:5346
1265		-msgid "Override individual site settings with the settings below"
	1969	+#: src/authorizer/options/external/class-oauth2.php:281
	1970	+msgid "Example: \"common\", or a specific Azure Directory Tenant ID"
1266	1971	msgstr ""
1267	1972
1268		-#: authorizer.php:5357
1269		-msgid "Manage who has access to all sites in the network."
	1973	+#: src/authorizer/options/external/class-oauth2.php:301
	1974	+msgid "Example: https://example.edu/login/oauth/authorize"
1270	1975	msgstr ""
1271	1976
1272		-#: authorizer.php:5361
1273		-msgid "Who can log in to sites in this network?"
	1977	+#: src/authorizer/options/external/class-oauth2.php:321
	1978	+msgid "Example: https://example.edu/login/oauth/access_token"
1274	1979	msgstr ""
1275	1980
1276		-#: authorizer.php:5365
1277		-msgid "Who can view sites in this network?"
	1981	+#: src/authorizer/options/external/class-oauth2.php:341
	1982	+msgid "Example: https://example.edu/login/oauth/userinfo"
1278	1983	msgstr ""
1279	1984
1280		-#: authorizer.php:5369
1281		-msgid "Approved Users (All Sites)"
	1985	+#: src/authorizer/options/external/class-oauth2.php:362
	1986	+msgid "Example: preferred_username"
1282	1987	msgstr ""
1283	1988
1284		-#: authorizer.php:5369
	1989	+#: src/authorizer/options/external/class-oauth2.php:364
1285	1990	msgid ""
1286		-"Note: these users will <strong>not</strong> receive welcome emails when "
1287		-"approved. Only users approved from individual sites can receive these "
1288		-"messages."
	1991	+"Leave blank to use the default username returned by the external service."
1289	1992	msgstr ""
1290	1993
1291		-#: authorizer.php:5401
1292		-msgid "CAS Custom Label"
	1994	+#: src/authorizer/options/external/class-oauth2.php:386
	1995	+msgid "Example: email"
1293	1996	msgstr ""
1294	1997
1295		-#: authorizer.php:5417
1296		-msgid "CAS server version"
	1998	+#: src/authorizer/options/external/class-oauth2.php:388
	1999	+msgid "Leave blank to use the default email returned by the external service."
1297	2000	msgstr ""
1298	2001
1299		-#: authorizer.php:5421
1300		-msgid "CAS attribute containing email"
	2002	+#: src/authorizer/options/external/class-oauth2.php:409
	2003	+msgid "Example: given_name"
1301	2004	msgstr ""
1302	2005
1303		-#: authorizer.php:5465
1304		-msgid "LDAP attribute containing email"
	2006	+#: src/authorizer/options/external/class-oauth2.php:429
	2007	+msgid "Example: family_name"
1305	2008	msgstr ""
1306	2009
1307		-#: authorizer.php:6301
1308		-msgid "This setting is overridden by a"
	2010	+#: src/authorizer/options/external/class-oauth2.php:476
	2011	+msgid ""
	2012	+"Immediately redirect to OAuth2 login form if it's the only enabled external "
	2013	+"service and WordPress logins are hidden"
1309	2014	msgstr ""
1310	2015
1311		-#: authorizer.php:6301
1312		-msgid "multisite option"
	2016	+#: src/authorizer/options/external/class-oauth2.php:477
	2017	+msgid ""
	2018	+"Note: This feature will only work if you have checked \"Hide WordPress "
	2019	+"Logins\" in Advanced settings, and if OAuth2 is the only enabled service (i."
	2020	+"e., no Google, LDAP, or CAS)."
1313	2021	msgstr ""
1314	2022
1315		-#: authorizer.php:7174
1316		-msgid "&mdash; No role for this site &mdash;"
1317		-msgstr ""
1318		-
1319	2023	#. Plugin Name of the plugin/theme
1320	2024	msgid "Authorizer"
1321	2025	msgstr ""
1322	2026
		@@ -1326,10 +2030,10 @@
1326	2030
1327	2031	#. Description of the plugin/theme
1328	2032	msgid ""
1329	2033	"Authorizer limits login attempts, restricts access to specified users, and "
1330		-"authenticates against external sources (e.g., Google, LDAP, or CAS)."
	2034	+"authenticates against external sources (e.g., OAuth2, Google, LDAP, or CAS)."
1331	2035	msgstr ""
1332	2036
1333	2037	#. Author of the plugin/theme
1334		-msgid "Paul Ryan"
	2038	+msgid "Paul Ryan <[email protected]>"
1335	2039	msgstr ""