<group name="email" description="Email configuration">
  <property name="mail.debug" value="false" description="Set to true to enable email debug output"/>
  <property name="mail.from" value="noreply@ceptor.io" description="From address"/>
  <property name="mail.replyto" value="" description="Reply-To address, if any"/>
  <property name="mail.smtp.host" value="smtp.domain.com" description="Hostname"/>
  <property name="mail.smtp.password" value="" description="Password, remember to encrypt"/>
  <property name="mail.smtp.port" value="25" description="SMTP port - usually 25 for plaintext and 465 for TLS"/>
  <property name="mail.smtp.protocol" value="smtp" description="Protocol smtp or smtps for TLS"/>
  <property name="mail.smtp.user" value="" description="Userid"/>
  <property name="mail.starttls.enable" value="true" description="Set to true to attempt starttls after connecting"/>
</group>
<group name="ldap.otp" description="LDAP OTP configuration">
  <property name="ldap.attrsToStore" value="cn|name|logoncount|mail" description="Attribute names matching this pattern are stored in the session - must be all lowercase"/>
  <property name="ldap.instances" value="test" description="List of LDAP instances to load (ldap.xxxx.*)"/>
  <property name="ldap.mobile.attribute.name" value="mobile" description="Name of attribute mobile phone number is stored within"/>
  <property name="ldap.otp.retries" value="3" description="How many OTP PIN retries are allowed."/>
  <property name="ldap.sms.text" value="One-Time PIN: %s" description="Text for OTP - %s replaced by OTP value"/>
  <property name="ldap.test.acceptedcertissuers" value="" description="List of certificate files containing accepted CA certificates"/>
  <property name="ldap.test.appliesToUsers" value="*" description="Pattern that userid must match to use this LDAP instance - keep lowercase since userid will be lowercased before checking"/>
  <property name="ldap.test.basedn" value="dc=ceptor,dc=local" description="The base DN to use"/>
  <property name="ldap.test.bindUsers" value="true" description="Bind users to verify their password"/>
  <property name="ldap.test.groupObjectClass" value="group" description="Name of LDAP objectClass containing group records"/>
  <property name="ldap.test.groupRDN" value="cn=Users" description="RDN Name in the subtree that groups are stored under"/>
  <property name="ldap.test.protocolVersion" value="3" description="LDAP Protocol version"/>
  <property name="ldap.test.servers" value="192.168.1.142:636" description="The list of LDAP servers to use"/>
  <property name="ldap.test.ssl" value="true" description="True for SSL/TLS"/>
  <property name="ldap.test.stripdnfromuser" value="false" description="If true, strips DN information from userid, using just the user attribute instead of the full DN"/>
  <property name="ldap.test.systempassword" value="xxx" description="The password for the system user"/>
  <property name="ldap.test.systemuser" value="CN=Administrator,CN=users,dc=ceptor,dc=local" description="The system user to bind to LDAP"/>
  <property name="ldap.test.userObjectClass" value="person" description="Name of LDAP objectClass containing user records"/>
  <property name="ldap.test.userattributes" value="cn,name,mobile,SAMAccountName,memberOf,lastlogon,secretary,logonCount,mail" description="Attributes to read from LDAP"/>
  <property name="ldap.test.useridName" value="sAMAccountName" description="Name of attribute to find user ID within"/>
  <property name="ldap.test.usersRDN" value="cn=Users" description="RDN Name in the subtree that users are stored under"/>
  <property name="ldap.test.verifysslcert" value="false" description="Set to false to disable SSL server certificate validation, accepting any SSL server certificates"/>
  <property name="ldap.totp.attribute.name" value="secretary" description="Name of attribute TOTP code is stored within"/>
  <property name="ldap.totpsecret.encryptionkey" value="" description="File containing AES key (generated from PasswordUtils) used to encrypt TOTP secret"/>
</group>