From c9af6c0c358ba71be69feb65ac10de099f2c5134 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=AD=99=E4=B8=96=E5=86=9B?=
 <30999793+AllForNothing@users.noreply.github.com>
Date: Tue, 25 Jan 2022 15:43:21 +0800
Subject: [PATCH] Improve tooltips for LDAP group config (#16280)

Signed-off-by: AllForNothing <sshijun@vmware.com>
---
 .../config/auth/config-auth.component.html             |  2 +-
 .../config/auth/config-auth.component.scss             |  5 ++++-
 src/portal/src/i18n/lang/de-de-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/en-us-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/es-es-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/fr-fr-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/pt-br-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/tr-tr-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/zh-cn-lang.json               | 10 +++++-----
 src/portal/src/i18n/lang/zh-tw-lang.json               | 10 +++++-----
 10 files changed, 45 insertions(+), 42 deletions(-)

diff --git a/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.html b/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.html
index 62a18bc8c..da3b69a31 100644
--- a/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.html
+++ b/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.html
@@ -206,7 +206,7 @@
                 [disabled]="disabled(currentConfig.ldap_group_membership_attribute)" />
         </clr-input-container>
         <clr-select-container>
-            <label for="ldapGroupScope">{{'CONFIG.LDAP.SCOPE' | translate}}
+            <label for="ldapGroupScope">{{'CONFIG.LDAP.GROUP_SCOPE' | translate}}
                 <clr-tooltip>
                     <clr-icon clrTooltipTrigger shape="info-circle" size="24"></clr-icon>
                     <clr-tooltip-content clrPosition="top-right" clrSize="lg" *clrIfOpen>
diff --git a/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.scss b/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.scss
index 97f34c095..a1544292e 100644
--- a/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.scss
+++ b/src/portal/src/app/base/left-side-nav/config/auth/config-auth.component.scss
@@ -8,4 +8,7 @@
 }
 .ml-04 {
     margin-left: 0.4rem;
-}
\ No newline at end of file
+}
+.clr-control-label {
+ width: 10.6rem !important;
+}
diff --git a/src/portal/src/i18n/lang/de-de-lang.json b/src/portal/src/i18n/lang/de-de-lang.json
index b5f8516cf..3c417b619 100644
--- a/src/portal/src/i18n/lang/de-de-lang.json
+++ b/src/portal/src/i18n/lang/de-de-lang.json
@@ -922,16 +922,16 @@
             "SCOPE": "LDAP Scope",
             "VERIFY_CERT": "LDAP Zertifikat prüfen. Box deaktivieren, falls der LDAP Server mit selbstsignierten Zertifikaten betrieben wird.",
             "LDAP_GROUP_BASE_DN": "LDAP Gruppen Base DN",
-            "LDAP_GROUP_BASE_DN_INFO": "Der Base DN von dem Gruppen im LDAP/AD gesucht werden.",
+            "LDAP_GROUP_BASE_DN_INFO": "Der Base DN von dem Gruppen im LDAP/AD gesucht werden. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_FILTER": "LDAP Gruppen Filter",
-            "LDAP_GROUP_FILTER_INFO": "Der Filter sucht LDAP/AD Gruppen, verwendet standardmäßig objectclass=groupOfNames.",
+            "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
             "LDAP_GROUP_GID": "LDAP Gruppen GID",
-            "LDAP_GROUP_GID_INFO": "Das Attribut, das in der Suche für die Zuordnung einer Gruppe verwendet wird. Kann uid, cn, email, sAMAccountName oder ein anderes Attribut abhängig vom LDAP/AD sein. Die Gruppe in Harbor wird per Default nach dem Inhalt des Attributes benannt.",
+            "LDAP_GROUP_GID_INFO": "Das Attribut, das in der Suche für die Zuordnung einer Gruppe verwendet wird. Kann uid, cn, email, sAMAccountName oder ein anderes Attribut abhängig vom LDAP/AD sein. Die Gruppe in Harbor wird per Default nach dem Inhalt des Attributes benannt. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_ADMIN_DN": "LDAP Gruppen Admin DN",
             "LDAP_GROUP_ADMIN_DN_INFO": "Legt LDAP Group DN fest. Alle Mitglieder dieser Gruppe haben in Harbor administrative Berechtigungen. Falls dies nicht gewünscht ist, kann das Feld leer gelassen werden.",
             "LDAP_GROUP_MEMBERSHIP": "LDAP Gruppenmitgliedschaft",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "Dass Attribut, das die Mitglieder einer LDAP-Gruppe identifiziert. Standardwert ist memberof, in manchen LDAP Servern kann es \"ismemberof\" sein.",
-            "GROUP_SCOPE": "LDAP Gruppen Scope",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "Dass Attribut, das die Mitglieder einer LDAP-Gruppe identifiziert. Standardwert ist memberof, in manchen LDAP Servern kann es \"ismemberof\" sein. This field cannot be empty if you need to enable the LDAP group related feature.",
+            "GROUP_SCOPE": "LDAP Group Search Scope",
             "GROUP_SCOPE_INFO": "Der Scope mit dem nach Gruppen gesucht wird. Standard ist Subtree."
 
         },
diff --git a/src/portal/src/i18n/lang/en-us-lang.json b/src/portal/src/i18n/lang/en-us-lang.json
index 004827e81..dbbb5f052 100644
--- a/src/portal/src/i18n/lang/en-us-lang.json
+++ b/src/portal/src/i18n/lang/en-us-lang.json
@@ -922,16 +922,16 @@
             "SCOPE": "LDAP Scope",
             "VERIFY_CERT": "LDAP Verify Certificate",
             "LDAP_GROUP_BASE_DN": "LDAP Group Base DN",
-            "LDAP_GROUP_BASE_DN_INFO": "The base DN from which to look up a group in LDAP/AD.",
+            "LDAP_GROUP_BASE_DN_INFO": "The base DN from which to look up a group in LDAP/AD. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_FILTER": "LDAP Group Filter",
-            "LDAP_GROUP_FILTER_INFO": "The filter to look up an LDAP/AD group, use objectclass=groupOfNames by default.",
+            "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
             "LDAP_GROUP_GID": "LDAP Group GID",
-            "LDAP_GROUP_GID_INFO": "The attribute used in a search to match a user, it could be uid, cn or other attributes depending on your LDAP/AD. the group in Harbor is named with this attribute by default.",
+            "LDAP_GROUP_GID_INFO": "The attribute used in a search to match a user, it could be uid, cn or other attributes depending on your LDAP/AD. The group in Harbor is named with this attribute by default. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_ADMIN_DN": "LDAP Group Admin DN",
             "LDAP_GROUP_ADMIN_DN_INFO": "Specify an LDAP group DN. All LDAP user in this group will have harbor admin privilege. Keep it blank if you do not want to.",
             "LDAP_GROUP_MEMBERSHIP": "LDAP Group Membership",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "The attribute indicates the membership of LDAP group, default value is memberof, in some LDAP server it could be \"ismemberof\"",
-            "GROUP_SCOPE": "LDAP Group Scope",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "The attribute indicates the membership of LDAP group, default value is memberof, in some LDAP server it could be \"ismemberof\". This field cannot be empty if you need to enable the LDAP group related feature.",
+            "GROUP_SCOPE": "LDAP Group Search Scope",
             "GROUP_SCOPE_INFO": "The scope to search for groups, select Subtree by default."
 
         },
diff --git a/src/portal/src/i18n/lang/es-es-lang.json b/src/portal/src/i18n/lang/es-es-lang.json
index 82179648d..7be7d00c7 100644
--- a/src/portal/src/i18n/lang/es-es-lang.json
+++ b/src/portal/src/i18n/lang/es-es-lang.json
@@ -924,16 +924,16 @@
             "SCOPE": "LDAP Ámbito",
             "VERIFY_CERT": "LDAP Verify Cert",
             "LDAP_GROUP_BASE_DN": "LDAP Group Base DN",
-            "LDAP_GROUP_BASE_DN_INFO": "The base DN from which to look up a group in LDAP/AD.",
+            "LDAP_GROUP_BASE_DN_INFO": "The base DN from which to look up a group in LDAP/AD. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_FILTER": "LDAP Group Filter",
-            "LDAP_GROUP_FILTER_INFO": "The filter to look up an LDAP/AD group, use objectclass=groupOfNames by default.",
+            "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
             "LDAP_GROUP_GID": "LDAP Group GID",
-            "LDAP_GROUP_GID_INFO": "The attribute used in a search to match a user, it could be uid, cn or other attributes depending on your LDAP/AD. the group in Harbor is named with this attribute by default.",
+            "LDAP_GROUP_GID_INFO": "The attribute used in a search to match a user, it could be uid, cn or other attributes depending on your LDAP/AD. the group in Harbor is named with this attribute by default. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_ADMIN_DN": "LDAP Group Admin DN",
             "LDAP_GROUP_ADMIN_DN_INFO": "Specify an LDAP group DN. all LDAP user in this group will have harbor admin privilege. Keep it blank if you do not want to.",
             "LDAP_GROUP_MEMBERSHIP": "LDAP Group Membership",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "The attribute indicates the membership of LDAP group, default value is memberof, in some LDAP server it could be \"ismemberof\"",
-            "GROUP_SCOPE": "LDAP Group Scope",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "The attribute indicates the membership of LDAP group, default value is memberof, in some LDAP server it could be \"ismemberof\". This field cannot be empty if you need to enable the LDAP group related feature.",
+            "GROUP_SCOPE": "LDAP Group Search Scope",
             "GROUP_SCOPE_INFO": "The scope to search for groups, select Subtree by default."
         },
         "UAA": {
diff --git a/src/portal/src/i18n/lang/fr-fr-lang.json b/src/portal/src/i18n/lang/fr-fr-lang.json
index 2aa6d6d50..876e47bf7 100644
--- a/src/portal/src/i18n/lang/fr-fr-lang.json
+++ b/src/portal/src/i18n/lang/fr-fr-lang.json
@@ -902,16 +902,16 @@
             "SCOPE": "Scope LDAP",
             "VERIFY_CERT": "LDAP Verify Cert",
             "LDAP_GROUP_BASE_DN": "LDAP Group Base DN",
-            "LDAP_GROUP_BASE_DN_INFO": "The base DN from which to look up a group in LDAP/AD.",
+            "LDAP_GROUP_BASE_DN_INFO": "The base DN from which to look up a group in LDAP/AD. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_FILTER": "LDAP Group Filter",
-            "LDAP_GROUP_FILTER_INFO": "The filter to look up an LDAP/AD group, use objectclass=groupOfNames by default.",
+            "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
             "LDAP_GROUP_GID": "LDAP Group GID",
-            "LDAP_GROUP_GID_INFO": "The attribute used in a search to match a user, it could be uid, cn or other attributes depending on your LDAP/AD. the group in Harbor is named with this attribute by default.",
+            "LDAP_GROUP_GID_INFO": "The attribute used in a search to match a user, it could be uid, cn or other attributes depending on your LDAP/AD. the group in Harbor is named with this attribute by default. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_ADMIN_DN": "LDAP Group Admin DN",
             "LDAP_GROUP_ADMIN_DN_INFO": "Specify an LDAP group DN. all LDAP user in this group will have harbor admin privilege. Keep it blank if you do not want to.",
             "LDAP_GROUP_MEMBERSHIP": "LDAP Group Membership",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "The attribute indicates the membership of LDAP group, default value is memberof, in some LDAP server it could be \"ismemberof\"",
-            "GROUP_SCOPE": "LDAP Group Scope",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "The attribute indicates the membership of LDAP group, default value is memberof, in some LDAP server it could be \"ismemberof\". This field cannot be empty if you need to enable the LDAP group related feature.",
+            "GROUP_SCOPE": "LDAP Group Search Scope",
             "GROUP_SCOPE_INFO": "The scope to search for groups, select Subtree by default."
         },
         "HTTP_AUTH": {
diff --git a/src/portal/src/i18n/lang/pt-br-lang.json b/src/portal/src/i18n/lang/pt-br-lang.json
index 52c63b1da..a5c37b039 100644
--- a/src/portal/src/i18n/lang/pt-br-lang.json
+++ b/src/portal/src/i18n/lang/pt-br-lang.json
@@ -918,16 +918,16 @@
             "SCOPE": "Escopo LDAP",
             "VERIFY_CERT": "Verificar certificado LDAP",
             "LDAP_GROUP_BASE_DN": "DN Base de busca de Grupos LDAP",
-            "LDAP_GROUP_BASE_DN_INFO": "O DN base de onde buscar grupos no LDAP/AD.",
+            "LDAP_GROUP_BASE_DN_INFO": "O DN base de onde buscar grupos no LDAP/AD. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_FILTER": "Filtro de Grupo LDAP",
-            "LDAP_GROUP_FILTER_INFO": "O filtro que deve ser utilizado ao buscar um grupo no LDAP/AD, usa objectclass=groupOfNames por padrão.",
+            "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
             "LDAP_GROUP_GID": "GID de Grupo LDAP",
-            "LDAP_GROUP_GID_INFO": "Atributo utilizado em uma busca para associar a um usuário, pode ser uid, cn ou outros atributos dependendo do seu LDAP/AD. O grupo no Harbor é nomeado com esse atributo por padrão.",
+            "LDAP_GROUP_GID_INFO": "Atributo utilizado em uma busca para associar a um usuário, pode ser uid, cn ou outros atributos dependendo do seu LDAP/AD. O grupo no Harbor é nomeado com esse atributo por padrão. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_ADMIN_DN": "DN de Grupo ADMIN no LDAP",
             "LDAP_GROUP_ADMIN_DN_INFO": "Especifica um DN de grupo LDAP. Todo usuário do LDAP nesse grupo terã privilégio de administrador. Mantenha em branco caso não deseje esse comportamento.",
             "LDAP_GROUP_MEMBERSHIP": "Filiação de Grupo LDAP",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "Atributo que informa a lista de grupos do usuário. Se não informado, o nome \"memberof\" será usado. Alguns servidores LDAP utilizam o atributo \"ismemberof\".",
-            "GROUP_SCOPE": "Escopo de grupo LDAP",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "Atributo que informa a lista de grupos do usuário. Se não informado, o nome \"memberof\" será usado. Alguns servidores LDAP utilizam o atributo \"ismemberof\". This field cannot be empty if you need to enable the LDAP group related feature.",
+            "GROUP_SCOPE": "LDAP Group Search Scope",
             "GROUP_SCOPE_INFO": "O escopo que deve ser utilizado na busca por grupos, utiliza Subtree por padrão."
 
         },
diff --git a/src/portal/src/i18n/lang/tr-tr-lang.json b/src/portal/src/i18n/lang/tr-tr-lang.json
index 8faa958a9..20c1b9523 100644
--- a/src/portal/src/i18n/lang/tr-tr-lang.json
+++ b/src/portal/src/i18n/lang/tr-tr-lang.json
@@ -922,16 +922,16 @@
             "SCOPE": "LDAP Kapsam",
             "VERIFY_CERT": "LDAP Doğrulama Sertifikası",
             "LDAP_GROUP_BASE_DN": "LDAP Grup Tabanı DN",
-            "LDAP_GROUP_BASE_DN_INFO": "LDAP / AD'de bir grubun aranacağı temel DN.",
+            "LDAP_GROUP_BASE_DN_INFO": "LDAP / AD'de bir grubun aranacağı temel DN. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_FILTER": "LDAP Grup Filtresi",
-            "LDAP_GROUP_FILTER_INFO": "Bir LDAP / AD grubunu aramak için filtre, varsayılan olarak objectclass = groupOfNames öğesini kullanın.",
+            "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
             "LDAP_GROUP_GID": "LDAP Grup GID",
-            "LDAP_GROUP_GID_INFO": "Aramada bir kullanıcıyı eşleştirmek için kullanılan özellik, LDAP / AD'nize bağlı olarak kullanıcı kimliği, cn veya diğer özellikler olabilir. Harbor'daki grup, varsayılan olarak bu özellik ile adlandırılır.",
+            "LDAP_GROUP_GID_INFO": "Aramada bir kullanıcıyı eşleştirmek için kullanılan özellik, LDAP / AD'nize bağlı olarak kullanıcı kimliği, cn veya diğer özellikler olabilir. Harbor'daki grup, varsayılan olarak bu özellik ile adlandırılır. This field cannot be empty if you need to enable the LDAP group related feature.",
             "LDAP_GROUP_ADMIN_DN": "LDAP Grup Yöneticisi DN",
             "LDAP_GROUP_ADMIN_DN_INFO": "Bir LDAP grubu DN belirtin. Bu gruptaki tüm LDAP kullanıcıları liman yönetici haklarına sahip olacak. İstemiyorsanız boş bırakın.",
             "LDAP_GROUP_MEMBERSHIP": "LDAP Grup Üyeliği",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "Öznitelik, LDAP grubunun üyeliğini gösterir, varsayılan değer memberof, bazı LDAP sunucularında \"ismemberof\" olabilir",
-            "GROUP_SCOPE": "LDAP Grup Kapsamı",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "Öznitelik, LDAP grubunun üyeliğini gösterir, varsayılan değer memberof, bazı LDAP sunucularında \"ismemberof\" olabilir. This field cannot be empty if you need to enable the LDAP group related feature.",
+            "GROUP_SCOPE": "LDAP Group Search Scope",
             "GROUP_SCOPE_INFO": "Grupları aramak için kapsamı, Varsayılan olarak Alt Ağaç'ı seçin."
 
         },
diff --git a/src/portal/src/i18n/lang/zh-cn-lang.json b/src/portal/src/i18n/lang/zh-cn-lang.json
index e991c8c3f..d6485b4a4 100644
--- a/src/portal/src/i18n/lang/zh-cn-lang.json
+++ b/src/portal/src/i18n/lang/zh-cn-lang.json
@@ -924,17 +924,17 @@
             "SCOPE": "LDAP搜索范围",
             "VERIFY_CERT": "LDAP检查证书",
             "LDAP_GROUP_BASE_DN": "LDAP组基础DN",
-            "LDAP_GROUP_BASE_DN_INFO": "LDAP/AD中，用于查找组的基础DN",
+            "LDAP_GROUP_BASE_DN_INFO": "LDAP/AD中，用于查找组的基础DN。如果要开启LDAP组功能，则此项必填",
             "LDAP_GROUP_FILTER": "LDAP组过滤器",
-            "LDAP_GROUP_FILTER_INFO": "LDAP组的过滤器，默认设置为objectclass=groupOfnames",
+            "LDAP_GROUP_FILTER_INFO": "搜索LDAP组的过滤器. 对于 OpenLDAP，请将值设为: objectclass=groupOfNames. 对于 Active Directory，请将值设为: objectclass=group。如果要开启LDAP组功能，则此项必填",
             "LDAP_GROUP_GID": "LDAP组ID属性",
-            "LDAP_GROUP_GID_INFO": "LDAP组的GID,用于匹配用户的一个属性，可以是uid,cn或者其他属性",
+            "LDAP_GROUP_GID_INFO": "LDAP组的GID,用于匹配用户的一个属性，可以是uid,cn或者其他属性。如果要开启LDAP组功能，则此项必填",
             "LDAP_GROUP_ADMIN_DN": "LDAP组管理员DN",
             "LDAP_GROUP_ADMIN_DN_INFO": "LDAP组管理员DN，所有组内用户都会有管理员权限，此属性可以为空",
             "LDAP_GROUP_MEMBERSHIP": "LDAP 组成员",
-            "LDAP_GROUP_MEMBERSHIP_INFO": "LDAP组成员的membership属性，默认为memberof, 在某些LDAP服务器会变为ismemberof",
+            "LDAP_GROUP_MEMBERSHIP_INFO": "LDAP组成员的membership属性，默认为 memberof, 在某些LDAP服务器会变为 ismemberof。如果要开启LDAP组功能，则此项必填",
             "GROUP_SCOPE": "LDAP组搜索范围",
-            "GROUP_SCOPE_INFO": "搜索范围"
+            "GROUP_SCOPE_INFO": "搜索组的范围，默认值为\"子树\""
         },
         "UAA": {
             "ENDPOINT": "UAA Endpoint",
diff --git a/src/portal/src/i18n/lang/zh-tw-lang.json b/src/portal/src/i18n/lang/zh-tw-lang.json
index 8b9b576b7..81c930416 100644
--- a/src/portal/src/i18n/lang/zh-tw-lang.json
+++ b/src/portal/src/i18n/lang/zh-tw-lang.json
@@ -919,17 +919,17 @@
       "SCOPE": "LDAP搜索範圍",
       "VERIFY_CERT": "LDAP檢查證書",
       "LDAP_GROUP_BASE_DN": "LDAP組基礎DN",
-      "LDAP_GROUP_BASE_DN_INFO": "LDAP/AD中,用於查找組的基礎DN",
+      "LDAP_GROUP_BASE_DN_INFO": "LDAP/AD中,用於查找組的基礎DN. This field cannot be empty if you need the LDAP group-related feature.",
       "LDAP_GROUP_FILTER": "LDAP組過濾器",
-      "LDAP_GROUP_FILTER_INFO": "LDAP組的過濾器,默認設置為objectclass=groupOfnames",
+      "LDAP_GROUP_FILTER_INFO": "The filter to search for LDAP/AD groups. For OpenLDAP: objectclass=groupOfNames. For Active Directory: objectclass=group. This field cannot be empty if you need the LDAP group-related feature.",
       "LDAP_GROUP_GID": "LDAP組ID屬性",
-      "LDAP_GROUP_GID_INFO": "LDAP組的GID,用於匹配用戶的一個屬性,可以是uid,cn或者其他屬性",
+      "LDAP_GROUP_GID_INFO": "LDAP組的GID,用於匹配用戶的一個屬性,可以是uid,cn或者其他屬性. This field cannot be empty if you need the LDAP group-related feature.",
       "LDAP_GROUP_ADMIN_DN": "LDAP組管理員DN",
       "LDAP_GROUP_ADMIN_DN_INFO": "LDAP組管理員DN,所有組內用戶都會有管理員權限,此屬性可以為空",
       "LDAP_GROUP_MEMBERSHIP": "LDAP 組成員",
-      "LDAP_GROUP_MEMBERSHIP_INFO": "LDAP組成員的membership屬性,默認為memberof, 在某些LDAP服務器會變為ismemberof",
+      "LDAP_GROUP_MEMBERSHIP_INFO": "LDAP組成員的membership屬性,默認為memberof, 在某些LDAP服務器會變為ismemberof. This field cannot be empty if you need the LDAP group-related feature.",
       "GROUP_SCOPE": "LDAP組搜索範圍",
-      "GROUP_SCOPE_INFO": "搜索範圍"
+      "GROUP_SCOPE_INFO": "The scope to search for groups, select Subtree by default."
     },
     "UAA":{
       "ENDPOINT":"UAA Endpoint",