diff --git a/po/es.po b/po/es.po index 586fd3371..6301c2987 100644 --- a/po/es.po +++ b/po/es.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2023-05-19 09:57+0200\n" +"POT-Creation-Date: 2023-08-21 14:51+0200\n" "PO-Revision-Date: 2021-04-26 19:02+0000\n" "Last-Translator: Emilio Herrera \n" "Language-Team: Spanish \n" "Language-Team: French\n" @@ -5841,109 +5841,6 @@ msgstr "" " Matched rules: allow_all\n" " Not matched rules: can_login\n" -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Utilisateurs en attente\n" -"\n" -"Gestion des entrées des utilisateurs en attente (« stage users »).\n" -"\n" -"Les entrées des utilisateurs en attente sont situées directement dans le \n" -"conteneur « cn=stage users, cn=accounts, cn=provisioning, SUFFIXE x.\n" -"Les utilisateurs ne peuvent utiliser ces entrées pour s'authentifier (même\n" -"si les entrées contiennent des données d'authentification) et ne sont que\n" -"candidates à devenir des entrées actives.\n" -"\n" -"Les entrées d'utilisateurs actifs sont des utilisateurs Posix situées dans " -"le \n" -"conteneur « cn=accounts, SUFFIXE ». Les utilisateurs peuvent les utiliser " -"pour \n" -"s'authentifier à la condition qu'elles comportent des données " -"d'authentification.\n" -"\n" -"Les entrées d'utilisateurs supprimés sont des entrées d'utilisateurs Posix " -"situées\n" -"dans le conteneur « cn=deleted users, cn=accounts, cn=provisioning, " -"SUFFIXE ».\n" -"Un utilisateur ne peut s'authentifier à l'aide de ces entrées , même si " -"elles contiennent\n" -"des données d'authentification valides.\n" -"\n" -"Le conteneur d'entrées utilisateurs en attente contient des entrées :\n" -" - créées par les commandes « stageuser-add », qui sont des utilisateurs " -"Posix,\n" -" - créées par des systèmes d'approvisionnement externes.\n" -"\n" -"Un utilisateur en attente valide DOIT posséder les propriétés suivantes :\n" -" - le RDN de l'entrée est « uid »\n" -" - l'attribut « ipaUniqueID » est « autogenerate »\n" -"\n" -"IPA prend en charge une grande variété de formats de noms d'utilisateurs, " -"mais\n" -"il est important de savoir que des restrictions peuvent s'appliquer dans un " -"environnement\n" -"particulier. Ainsi, les noms d'utilisateurs débutant par un chiffre ou ceux " -"excédant une \n" -"certaine taille peuvent poser problème sur certains systèmes UNIX.\n" -"Utiliser la commande « ipa config-mod » pour modifier le format autorisé par " -"les outils IPA.\n" -"\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouvel utilisateur en attente :\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Ajouter un utilisateur en attente depuis le conteneur des utilisateurs " -"supprimés :\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - msgid "" "\n" "Standard vault uses a secure mechanism to transport and\n" @@ -15103,9 +15000,6 @@ msgstr "Rôles serveur" msgid "Server has already been deleted" msgstr "Le serveur a déjà été supprimé" -msgid "Server location" -msgstr "Emplacement de serveur" - msgid "Server name" msgstr "Nom du serveur" @@ -18046,6 +17940,114 @@ msgstr "{attr} : attribut introuvable" msgid "{role}: role not found" msgstr "{role} : rôle introuvable" +#~ msgid "" +#~ "\n" +#~ "Stageusers\n" +#~ "\n" +#~ "Manage stage user entries.\n" +#~ "\n" +#~ "Stage user entries are directly under the container: \"cn=stage users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Users can not authenticate with those entries (even if the entries\n" +#~ "contain credentials). Those entries are only candidate to become Active " +#~ "entries.\n" +#~ "\n" +#~ "Active user entries are Posix users directly under the container: " +#~ "\"cn=accounts, SUFFIX\".\n" +#~ "Users can authenticate with Active entries, at the condition they have\n" +#~ "credentials.\n" +#~ "\n" +#~ "Deleted user entries are Posix users directly under the container: " +#~ "\"cn=deleted users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Users can not authenticate with those entries, even if the entries " +#~ "contain credentials.\n" +#~ "\n" +#~ "The stage user container contains entries:\n" +#~ " - created by 'stageuser-add' commands that are Posix users,\n" +#~ " - created by external provisioning system.\n" +#~ "\n" +#~ "A valid stage user entry MUST have:\n" +#~ " - entry RDN is 'uid',\n" +#~ " - ipaUniqueID is 'autogenerate'.\n" +#~ "\n" +#~ "IPA supports a wide range of username formats, but you need to be aware " +#~ "of any\n" +#~ "restrictions that may apply to your particular environment. For example,\n" +#~ "usernames that start with a digit or usernames that exceed a certain " +#~ "length\n" +#~ "may cause problems for some UNIX systems.\n" +#~ "Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +#~ "\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Add a new stageuser:\n" +#~ " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#~ "\n" +#~ " Add a stageuser from the deleted users container:\n" +#~ " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +#~ "\n" +#~ msgstr "" +#~ "\n" +#~ "Utilisateurs en attente\n" +#~ "\n" +#~ "Gestion des entrées des utilisateurs en attente (« stage users »).\n" +#~ "\n" +#~ "Les entrées des utilisateurs en attente sont situées directement dans " +#~ "le \n" +#~ "conteneur « cn=stage users, cn=accounts, cn=provisioning, SUFFIXE x.\n" +#~ "Les utilisateurs ne peuvent utiliser ces entrées pour s'authentifier " +#~ "(même\n" +#~ "si les entrées contiennent des données d'authentification) et ne sont " +#~ "que\n" +#~ "candidates à devenir des entrées actives.\n" +#~ "\n" +#~ "Les entrées d'utilisateurs actifs sont des utilisateurs Posix situées " +#~ "dans le \n" +#~ "conteneur « cn=accounts, SUFFIXE ». Les utilisateurs peuvent les utiliser " +#~ "pour \n" +#~ "s'authentifier à la condition qu'elles comportent des données " +#~ "d'authentification.\n" +#~ "\n" +#~ "Les entrées d'utilisateurs supprimés sont des entrées d'utilisateurs " +#~ "Posix situées\n" +#~ "dans le conteneur « cn=deleted users, cn=accounts, cn=provisioning, " +#~ "SUFFIXE ».\n" +#~ "Un utilisateur ne peut s'authentifier à l'aide de ces entrées , même si " +#~ "elles contiennent\n" +#~ "des données d'authentification valides.\n" +#~ "\n" +#~ "Le conteneur d'entrées utilisateurs en attente contient des entrées :\n" +#~ " - créées par les commandes « stageuser-add », qui sont des " +#~ "utilisateurs Posix,\n" +#~ " - créées par des systèmes d'approvisionnement externes.\n" +#~ "\n" +#~ "Un utilisateur en attente valide DOIT posséder les propriétés " +#~ "suivantes :\n" +#~ " - le RDN de l'entrée est « uid »\n" +#~ " - l'attribut « ipaUniqueID » est « autogenerate »\n" +#~ "\n" +#~ "IPA prend en charge une grande variété de formats de noms d'utilisateurs, " +#~ "mais\n" +#~ "il est important de savoir que des restrictions peuvent s'appliquer dans " +#~ "un environnement\n" +#~ "particulier. Ainsi, les noms d'utilisateurs débutant par un chiffre ou " +#~ "ceux excédant une \n" +#~ "certaine taille peuvent poser problème sur certains systèmes UNIX.\n" +#~ "Utiliser la commande « ipa config-mod » pour modifier le format autorisé " +#~ "par les outils IPA.\n" +#~ "\n" +#~ "\n" +#~ "EXEMPLES :\n" +#~ "\n" +#~ " Ajouter un nouvel utilisateur en attente :\n" +#~ " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#~ "\n" +#~ " Ajouter un utilisateur en attente depuis le conteneur des utilisateurs " +#~ "supprimés :\n" +#~ " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + #~ msgid "" #~ "\n" #~ "To enable the binddn run the following command to set the password:\n" @@ -18076,3 +18078,6 @@ msgstr "{role} : rôle introuvable" #~ msgstr "" #~ "La zone inverse pour l'enregistrement PTR doit être une sous-zone de l'un " #~ "des domaines pleinement qualifiés suivants : %s" + +#~ msgid "Server location" +#~ msgstr "Emplacement de serveur" diff --git a/po/ipa.pot b/po/ipa.pot index ef2fe4bc3..ad66af749 100644 --- a/po/ipa.pot +++ b/po/ipa.pot @@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: freeipa 4.11.0.dev202305190757+git2eb4cdb64\n" +"Project-Id-Version: freeipa 4.11.0.dev202308211251+gitd98d5e475\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2023-05-19 09:57+0200\n" +"POT-Creation-Date: 2023-08-21 14:51+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -38,125 +38,6 @@ msgstr "" msgid "read error\n" msgstr "" -#: client/ipa-rmkeytab.c:51 -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#: client/ipa-rmkeytab.c:53 -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:63 -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:76 -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#: client/ipa-rmkeytab.c:80 -#, c-format -msgid "principal not found\n" -msgstr "" - -#: client/ipa-rmkeytab.c:82 -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:90 -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#: client/ipa-rmkeytab.c:92 -#, c-format -msgid "kvno %d\n" -msgstr "" - -#: client/ipa-rmkeytab.c:93 -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:124 client/ipa-rmkeytab.c:146 -#: client/ipa-rmkeytab.c:160 client/ipa-rmkeytab.c:263 -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#: client/ipa-rmkeytab.c:133 -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#: client/ipa-rmkeytab.c:135 -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:169 -#, c-format -msgid "realm not found\n" -msgstr "" - -#: client/ipa-rmkeytab.c:195 client/ipa-getkeytab.c:942 -msgid "Print debugging information" -msgstr "" - -#: client/ipa-rmkeytab.c:195 -msgid "Debugging output" -msgstr "" - -#: client/ipa-rmkeytab.c:197 -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#: client/ipa-rmkeytab.c:198 client/ipa-getkeytab.c:948 -msgid "Kerberos Service Principal Name" -msgstr "" - -#: client/ipa-rmkeytab.c:200 -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -#: client/ipa-rmkeytab.c:200 client/ipa-getkeytab.c:952 -msgid "Keytab File Name" -msgstr "" - -#: client/ipa-rmkeytab.c:202 -msgid "Remove all principals in this realm" -msgstr "" - -#: client/ipa-rmkeytab.c:202 ipaclient/remote_plugins/2_114/trust.py:111 -msgid "Realm name" -msgstr "" - -#: client/ipa-rmkeytab.c:216 client/ipa-getkeytab.c:1001 -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#: client/ipa-rmkeytab.c:256 -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:279 -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#: client/ipa-rmkeytab.c:281 -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #: client/ipa-getkeytab.c:254 #, c-format msgid "Kerberos context initialization failed: %1$s (%2$d)\n" @@ -305,6 +186,10 @@ msgstr "" msgid "Output only on errors" msgstr "" +#: client/ipa-getkeytab.c:942 client/ipa-rmkeytab.c:195 +msgid "Print debugging information" +msgstr "" + #: client/ipa-getkeytab.c:942 msgid "Output debug info" msgstr "" @@ -321,12 +206,20 @@ msgstr "" msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" +#: client/ipa-getkeytab.c:948 client/ipa-rmkeytab.c:198 +msgid "Kerberos Service Principal Name" +msgstr "" + #: client/ipa-getkeytab.c:950 msgid "" "The keytab file to append the new key to (will be created if it does not " "exist)." msgstr "" +#: client/ipa-getkeytab.c:952 client/ipa-rmkeytab.c:200 +msgid "Keytab File Name" +msgstr "" + #: client/ipa-getkeytab.c:954 msgid "Encryption types to request" msgstr "" @@ -395,6 +288,11 @@ msgstr "" msgid "Retrieve current keys without changing them" msgstr "" +#: client/ipa-getkeytab.c:1001 client/ipa-rmkeytab.c:216 +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + #: client/ipa-getkeytab.c:1014 util/ipa_krb5.c:892 #, c-format msgid "No system preferred enctypes ?!\n" @@ -544,6 +442,108 @@ msgstr "" msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "" +#: client/ipa-rmkeytab.c:51 +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#: client/ipa-rmkeytab.c:53 +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:63 +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:76 +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#: client/ipa-rmkeytab.c:80 +#, c-format +msgid "principal not found\n" +msgstr "" + +#: client/ipa-rmkeytab.c:82 +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:90 +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#: client/ipa-rmkeytab.c:92 +#, c-format +msgid "kvno %d\n" +msgstr "" + +#: client/ipa-rmkeytab.c:93 +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:124 client/ipa-rmkeytab.c:146 +#: client/ipa-rmkeytab.c:160 client/ipa-rmkeytab.c:263 +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#: client/ipa-rmkeytab.c:133 +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#: client/ipa-rmkeytab.c:135 +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:169 +#, c-format +msgid "realm not found\n" +msgstr "" + +#: client/ipa-rmkeytab.c:195 +msgid "Debugging output" +msgstr "" + +#: client/ipa-rmkeytab.c:197 +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +#: client/ipa-rmkeytab.c:200 +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +#: client/ipa-rmkeytab.c:202 +msgid "Remove all principals in this realm" +msgstr "" + +#: client/ipa-rmkeytab.c:202 ipaclient/remote_plugins/2_114/trust.py:111 +msgid "Realm name" +msgstr "" + +#: client/ipa-rmkeytab.c:256 +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:279 +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#: client/ipa-rmkeytab.c:281 +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #: client/ipa-join.c:67 client/ipa-join.c:422 client/ipa-join.c:442 #: client/ipa-join.c:540 client/ipa-join.c:1067 util/ipa_krb5.c:1024 #: util/ipa_krb5.c:1058 @@ -863,11 +863,90 @@ msgstr "" msgid "Write certificate (chain if --chain used) to file" msgstr "" +#: ipaclient/plugins/certmap.py:19 +msgid "Input file" +msgstr "" + +#: ipaclient/plugins/certmap.py:20 +msgid "File to load the certificate from" +msgstr "" + +#: ipaclient/plugins/certmap.py:41 ipaclient/plugins/cert.py:130 +msgid "cannot specify both raw certificate and file" +msgstr "" + +#: ipaclient/plugins/certprofile.py:25 +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#: ipaclient/plugins/host.py:41 ipaclient/plugins/service.py:43 +#: ipaclient/plugins/user.py:75 +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +#: ipaclient/plugins/location.py:23 +msgid "Servers details:" +msgstr "" + +#: ipaclient/plugins/migration.py:37 +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +#: ipaclient/plugins/migration.py:41 +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +#: ipaclient/plugins/server.py:20 +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#: ipaclient/plugins/topology.py:25 +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#: ipaclient/plugins/topology.py:30 +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +#: ipaclient/plugins/topology.py:33 +msgid "Topology is disconnected" +msgstr "" + +#: ipaclient/plugins/topology.py:35 +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +#: ipaclient/plugins/topology.py:40 +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#: ipaclient/plugins/topology.py:43 +msgid "Maximum number of agreements per replica" +msgstr "" + +#: ipaclient/plugins/topology.py:47 +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + #: ipaclient/plugins/cert.py:107 msgid "Unrevoked" msgstr "" -#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:298 +#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:299 msgid "Error" msgstr "" @@ -879,23 +958,6 @@ msgstr "" msgid "File to load the certificate from." msgstr "" -#: ipaclient/plugins/cert.py:130 ipaclient/plugins/certmap.py:41 -msgid "cannot specify both raw certificate and file" -msgstr "" - -#: ipaclient/plugins/certmap.py:19 -msgid "Input file" -msgstr "" - -#: ipaclient/plugins/certmap.py:20 -msgid "File to load the certificate from" -msgstr "" - -#: ipaclient/plugins/certprofile.py:25 -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - #: ipaclient/plugins/dns.py:137 ipaserver/plugins/dns.py:3557 msgid "Split DNS record to parts" msgstr "" @@ -979,124 +1041,6 @@ msgstr "" msgid "file to store DNS records in nsupdate format" msgstr "" -#: ipaclient/plugins/host.py:41 ipaclient/plugins/service.py:43 -#: ipaclient/plugins/user.py:74 -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -#: ipaclient/plugins/location.py:23 -msgid "Servers details:" -msgstr "" - -#: ipaclient/plugins/migration.py:37 -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -#: ipaclient/plugins/migration.py:41 -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#: ipaclient/plugins/server.py:20 -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#: ipaclient/plugins/topology.py:25 -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#: ipaclient/plugins/topology.py:30 -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -#: ipaclient/plugins/topology.py:33 -msgid "Topology is disconnected" -msgstr "" - -#: ipaclient/plugins/topology.py:35 -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -#: ipaclient/plugins/topology.py:40 -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#: ipaclient/plugins/topology.py:43 -msgid "Maximum number of agreements per replica" -msgstr "" - -#: ipaclient/plugins/topology.py:47 -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -#: ipaclient/plugins/user.py:40 -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#: ipaclient/plugins/user.py:45 -msgid "Delete a user" -msgstr "" - -#: ipaclient/plugins/user.py:54 -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -#: ipaclient/plugins/otptoken.py:67 -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -#: ipaclient/plugins/otptoken.py:83 -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -#: ipaclient/plugins/otptoken.py:137 -msgid "Synchronize an OTP token." -msgstr "" - -#: ipaclient/plugins/otptoken.py:142 -msgid "User ID" -msgstr "" - -#: ipaclient/plugins/otptoken.py:143 ipaclient/remote_plugins/2_114/host.py:187 -#: ipaserver/plugins/migration.py:534 ipaserver/plugins/baseldap.py:50 -#: ipaserver/plugins/internal.py:194 ipaserver/plugins/internal.py:413 -#: ipaserver/plugins/internal.py:1729 -msgid "Password" -msgstr "" - -#: ipaclient/plugins/otptoken.py:144 -msgid "First Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:145 -msgid "Second Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:149 ipaserver/plugins/internal.py:1739 -msgid "Token ID" -msgstr "" - -#: ipaclient/plugins/otptoken.py:185 -#, python-format -msgid "Unable to synchronize token: %s" -msgstr "" - #: ipaclient/plugins/sudorule.py:30 #, python-format msgid "Enabled Sudo Rule \"%s\"" @@ -1208,6 +1152,78 @@ msgstr "" msgid "Skipped %(key)s" msgstr "" +#: ipaclient/plugins/baseuser.py:22 +msgid "Register the passkey" +msgstr "" + +#: ipaclient/plugins/baseuser.py:27 +msgid "Require user verification during authentication with the passkey" +msgstr "" + +#: ipaclient/plugins/baseuser.py:33 +msgid "COSE type to use for registration" +msgstr "" + +#: ipaclient/plugins/baseuser.py:39 +msgid "Credential type" +msgstr "" + +#: ipaclient/plugins/baseuser.py:62 +#, python-format +msgid "cannot specify both %s and passkey mapping" +msgstr "" + +#: ipaclient/plugins/baseuser.py:70 +#, python-format +msgid "" +"Missing executable %s, use the command with LOGIN PASSKEY instead of LOGIN --" +"register" +msgstr "" + +#: ipaclient/plugins/otptoken.py:67 +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +#: ipaclient/plugins/otptoken.py:83 +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +#: ipaclient/plugins/otptoken.py:137 +msgid "Synchronize an OTP token." +msgstr "" + +#: ipaclient/plugins/otptoken.py:142 +msgid "User ID" +msgstr "" + +#: ipaclient/plugins/otptoken.py:143 ipaclient/remote_plugins/2_114/host.py:187 +#: ipaserver/plugins/migration.py:534 ipaserver/plugins/baseldap.py:50 +#: ipaserver/plugins/baseuser.py:331 ipaserver/plugins/internal.py:194 +#: ipaserver/plugins/internal.py:414 ipaserver/plugins/internal.py:1742 +msgid "Password" +msgstr "" + +#: ipaclient/plugins/otptoken.py:144 +msgid "First Code" +msgstr "" + +#: ipaclient/plugins/otptoken.py:145 +msgid "Second Code" +msgstr "" + +#: ipaclient/plugins/otptoken.py:149 ipaserver/plugins/internal.py:1752 +msgid "Token ID" +msgstr "" + +#: ipaclient/plugins/otptoken.py:185 +#, python-format +msgid "Unable to synchronize token: %s" +msgstr "" + #: ipaclient/plugins/otptoken_yubikey.py:35 msgid "python-yubico is not installed." msgstr "" @@ -1232,14 +1248,14 @@ msgid "" msgstr "" #: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/dnsserver.py:39 -#: ipaserver/plugins/location.py:37 ipaserver/plugins/radiusproxy.py:43 -#: ipaserver/plugins/server.py:40 ipaserver/plugins/serverrole.py:19 -#: ipaserver/plugins/automember.py:63 ipaserver/plugins/certmap.py:60 -#: ipaserver/plugins/permission.py:98 ipaserver/plugins/vault.py:88 -#: ipaserver/plugins/otptoken.py:49 ipaserver/plugins/ca.py:36 -#: ipaserver/plugins/cert.py:100 ipaserver/plugins/host.py:104 -#: ipaserver/plugins/idp.py:31 ipaserver/plugins/schema.py:28 -#: ipaserver/plugins/sudorule.py:76 +#: ipaserver/plugins/radiusproxy.py:43 ipaserver/plugins/serverrole.py:19 +#: ipaserver/plugins/automember.py:63 ipaserver/plugins/ca.py:36 +#: ipaserver/plugins/certmap.py:60 ipaserver/plugins/location.py:37 +#: ipaserver/plugins/otptoken.py:49 ipaserver/plugins/cert.py:99 +#: ipaserver/plugins/host.py:104 ipaserver/plugins/idp.py:31 +#: ipaserver/plugins/passkeyconfig.py:30 ipaserver/plugins/permission.py:98 +#: ipaserver/plugins/schema.py:28 ipaserver/plugins/server.py:40 +#: ipaserver/plugins/sudorule.py:76 ipaserver/plugins/vault.py:88 msgid "" "\n" "EXAMPLES:\n" @@ -1264,6 +1280,23 @@ msgstr "" msgid "No free YubiKey slot!" msgstr "" +#: ipaclient/plugins/stageuser.py:14 ipaclient/plugins/user.py:87 +#: ipaserver/plugins/baseuser.py:1084 ipaserver/plugins/user.py:1405 +msgid "Add one or more passkey mappings to the user entry." +msgstr "" + +#: ipaclient/plugins/user.py:41 +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#: ipaclient/plugins/user.py:46 +msgid "Delete a user" +msgstr "" + +#: ipaclient/plugins/user.py:55 +msgid "preserve and no-preserve cannot be both set" +msgstr "" + #: ipaclient/plugins/vault.py:68 ipaclient/plugins/vault.py:875 #, python-format msgid "Cannot read file '%(filename)s': %(exc)s" @@ -1327,7 +1360,7 @@ msgstr "" msgid "Modify a vault." msgstr "" -#: ipaclient/plugins/vault.py:374 ipaserver/plugins/internal.py:1746 +#: ipaclient/plugins/vault.py:374 ipaserver/plugins/internal.py:1759 msgid "Change password" msgstr "" @@ -1418,7 +1451,7 @@ msgstr "" msgid "File containing the vault private key" msgstr "" -#: ipaclient/plugins/vault.py:1034 ipaserver/plugins/internal.py:762 +#: ipaclient/plugins/vault.py:1034 ipaserver/plugins/internal.py:763 msgid "Data" msgstr "" @@ -1570,8 +1603,8 @@ msgid "User group ACI grants access to" msgstr "" #: ipaserver/plugins/delegation.py:81 ipaserver/plugins/selfservice.py:84 -#: ipaserver/plugins/aci.py:463 ipaserver/plugins/permission.py:231 -#: ipaserver/plugins/baseldap.py:74 +#: ipaserver/plugins/aci.py:463 ipaserver/plugins/baseldap.py:74 +#: ipaserver/plugins/permission.py:231 msgid "Permissions" msgstr "" @@ -1586,8 +1619,8 @@ msgstr "" msgid "Attributes" msgstr "" -#: ipaserver/plugins/permission.py:347 ipaserver/plugins/vault.py:598 -#: ipaserver/plugins/otptoken.py:165 ipaserver/plugins/schema.py:448 +#: ipaserver/plugins/otptoken.py:165 ipaserver/plugins/permission.py:347 +#: ipaserver/plugins/schema.py:448 ipaserver/plugins/vault.py:598 msgid "Type" msgstr "" @@ -1600,8 +1633,8 @@ msgstr "" msgid "Member of a group" msgstr "" -#: ipaserver/plugins/internal.py:221 ipaserver/plugins/internal.py:1229 -#: ipaserver/plugins/internal.py:1758 +#: ipaserver/plugins/internal.py:222 ipaserver/plugins/internal.py:1242 +#: ipaserver/plugins/internal.py:1771 msgid "Filter" msgstr "" @@ -1687,7 +1720,7 @@ msgstr "" msgid "A string searched in all relevant object attributes" msgstr "" -#: ipaserver/plugins/baseldap.py:1960 ipaserver/plugins/cert.py:1565 +#: ipaserver/plugins/baseldap.py:1960 ipaserver/plugins/cert.py:1564 #: ipaserver/plugins/schema.py:121 msgid "Primary key only" msgstr "" @@ -1716,291 +1749,6 @@ msgstr "" msgid "Location of the ACI" msgstr "" -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:108 ipaserver/plugins/hbacsvcgroup.py:120 -#: ipaserver/plugins/hostgroup.py:193 ipaserver/plugins/location.py:111 -#: ipaserver/plugins/netgroup.py:210 ipaserver/plugins/radiusproxy.py:117 -#: ipaserver/plugins/role.py:153 ipaserver/plugins/subid.py:143 -#: ipaserver/plugins/sudocmd.py:128 ipaserver/plugins/sudocmdgroup.py:130 -#: ipaserver/plugins/automember.py:257 ipaserver/plugins/privilege.py:159 -#: ipaserver/plugins/caacl.py:175 ipaserver/plugins/certmap.py:279 -#: ipaserver/plugins/hbacrule.py:253 ipaserver/plugins/selinuxusermap.py:265 -#: ipaserver/plugins/vault.py:592 ipaserver/plugins/otptoken.py:174 -#: ipaserver/plugins/ca.py:91 ipaserver/plugins/automount.py:364 -#: ipaserver/plugins/group.py:342 ipaserver/plugins/host.py:492 -#: ipaserver/plugins/idviews.py:142 ipaserver/plugins/idviews.py:783 -#: ipaserver/plugins/sudorule.py:247 -msgid "Description" -msgstr "" - -#: ipaserver/plugins/automember.py:258 -msgid "A description of this auto member rule" -msgstr "" - -#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 -msgid "Default (fallback) Group" -msgstr "" - -#: ipaserver/plugins/automember.py:263 -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 -msgid "Automember Rule" -msgstr "" - -#: ipaserver/plugins/baseldap.py:977 -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -#: ipaserver/plugins/baseldap.py:983 -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#: ipaserver/plugins/automember.py:184 -msgid "Grouping Type" -msgstr "" - -#: ipaserver/plugins/automember.py:185 -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 -msgid "Inclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 -msgid "Exclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:176 -msgid "Attribute Key" -msgstr "" - -#: ipaserver/plugins/automember.py:177 -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -#: ipaserver/plugins/automember.py:357 -msgid "Conditions that could not be added" -msgstr "" - -#: ipaserver/plugins/automember.py:361 -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#: ipaserver/plugins/automember.py:586 -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -#: ipalib/output.py:204 -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -#: ipaserver/plugins/baseldap.py:989 -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1402 ipaserver/plugins/baseldap.py:1477 -msgid "Rights" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1403 ipaserver/plugins/baseldap.py:1478 -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -#: ipaserver/plugins/automember.py:683 -msgid "Rebuild auto membership." -msgstr "" - -#: ipaserver/plugins/automember.py:693 -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#: ipaserver/plugins/automember.py:697 ipaserver/plugins/baseuser.py:208 -#: ipaserver/plugins/caacl.py:220 ipaserver/plugins/hbacrule.py:260 -#: ipaserver/plugins/selinuxusermap.py:272 ipaserver/plugins/user.py:162 -#: ipaserver/plugins/internal.py:1204 ipaserver/plugins/sudorule.py:291 -msgid "Users" -msgstr "" - -#: ipaserver/plugins/automember.py:698 -msgid "Rebuild membership for specified users" -msgstr "" - -#: ipaserver/plugins/automember.py:702 ipaserver/plugins/caacl.py:228 -#: ipaserver/plugins/hbacrule.py:268 ipaserver/plugins/selinuxusermap.py:280 -#: ipaserver/plugins/host.py:480 ipaserver/plugins/internal.py:1178 -#: ipaserver/plugins/sudorule.py:304 -msgid "Hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:703 -msgid "Rebuild membership for specified hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:708 -msgid "No wait" -msgstr "" - -#: ipaserver/plugins/automember.py:709 -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:441 -msgid "Conditions that could not be removed" -msgstr "" - -#: ipaserver/plugins/automember.py:445 -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - #: ipaserver/plugins/automount.py:41 msgid "" "\n" @@ -2128,7 +1876,7 @@ msgstr "" msgid "description" msgstr "" -#: ipaserver/plugins/automount.py:252 ipaserver/plugins/host.py:502 +#: ipaserver/plugins/host.py:502 ipaserver/plugins/server.py:132 msgid "Location" msgstr "" @@ -2144,10 +1892,38 @@ msgstr "" msgid "Automount map name." msgstr "" +#: ipaserver/plugins/hbacsvc.py:108 ipaserver/plugins/hbacsvcgroup.py:120 +#: ipaserver/plugins/netgroup.py:210 ipaserver/plugins/radiusproxy.py:117 +#: ipaserver/plugins/sudocmdgroup.py:130 ipaserver/plugins/automember.py:257 +#: ipaserver/plugins/ca.py:91 ipaserver/plugins/caacl.py:175 +#: ipaserver/plugins/certmap.py:279 ipaserver/plugins/hbacrule.py:253 +#: ipaserver/plugins/hostgroup.py:193 ipaserver/plugins/location.py:111 +#: ipaserver/plugins/otptoken.py:174 ipaserver/plugins/privilege.py:159 +#: ipaserver/plugins/role.py:153 ipaserver/plugins/selinuxusermap.py:265 +#: ipaserver/plugins/subid.py:143 ipaserver/plugins/sudocmd.py:128 +#: ipaserver/plugins/automount.py:364 ipaserver/plugins/group.py:349 +#: ipaserver/plugins/host.py:492 ipaserver/plugins/idviews.py:143 +#: ipaserver/plugins/idviews.py:784 ipaserver/plugins/sudorule.py:247 +#: ipaserver/plugins/vault.py:592 +msgid "Description" +msgstr "" + #: ipaserver/plugins/automount.py:623 msgid "Create a new automount key." msgstr "" +#: ipaserver/plugins/baseldap.py:977 +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +#: ipaserver/plugins/baseldap.py:983 +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + #: ipaserver/plugins/automount.py:705 msgid "Delete an automount key." msgstr "" @@ -2156,12 +1932,16 @@ msgstr "" msgid "Continuous mode: Don't stop on errors." msgstr "" +#: ipalib/output.py:204 +msgid "List of deletions that failed" +msgstr "" + #: ipaserver/plugins/automount.py:804 msgid "Search for an automount key." msgstr "" #: ipaserver/plugins/serverrole.py:123 ipaserver/plugins/baseldap.py:1979 -#: ipaserver/plugins/cert.py:1570 +#: ipaserver/plugins/cert.py:1569 msgid "Time Limit" msgstr "" @@ -2169,7 +1949,7 @@ msgid "Time limit of search in seconds" msgstr "" #: ipaserver/plugins/serverrole.py:131 ipaserver/plugins/hbactest.py:304 -#: ipaserver/plugins/baseldap.py:1986 ipaserver/plugins/cert.py:1575 +#: ipaserver/plugins/baseldap.py:1986 ipaserver/plugins/cert.py:1574 msgid "Size Limit" msgstr "" @@ -2180,6 +1960,22 @@ msgstr "" msgid "Modify an automount key." msgstr "" +#: ipaserver/plugins/baseldap.py:989 +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +#: ipaserver/plugins/baseldap.py:1402 ipaserver/plugins/baseldap.py:1477 +msgid "Rights" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1403 ipaserver/plugins/baseldap.py:1478 +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + #: ipaserver/plugins/automount.py:755 msgid "New mount information" msgstr "" @@ -2291,184 +2087,6 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - msgid "" "\n" "Server configuration\n" @@ -3041,7 +2659,7 @@ msgstr "" msgid "A IP Address" msgstr "" -#: ipaserver/plugins/dns.py:983 ipaserver/plugins/host.py:709 +#: ipaserver/plugins/dns.py:983 ipaserver/plugins/host.py:711 msgid "IP Address" msgstr "" @@ -3120,8 +2738,8 @@ msgstr "" msgid "CERT Algorithm" msgstr "" -#: ipaserver/plugins/dns.py:1063 ipaserver/plugins/dns.py:1412 -#: ipaserver/plugins/otptoken.py:229 +#: ipaserver/plugins/dns.py:1020 ipaserver/plugins/dns.py:1063 +#: ipaserver/plugins/dns.py:1412 msgid "Algorithm" msgstr "" @@ -3182,7 +2800,7 @@ msgstr "" msgid "DNAME Target" msgstr "" -#: ipaserver/plugins/dns.py:1379 ipaserver/plugins/internal.py:1232 +#: ipaserver/plugins/dns.py:1379 ipaserver/plugins/internal.py:1245 msgid "Target" msgstr "" @@ -3369,7 +2987,7 @@ msgid "NAPTR Service" msgstr "" #: ipaserver/plugins/hbactest.py:285 ipaserver/plugins/dns.py:1324 -#: ipaserver/plugins/internal.py:1347 ipaserver/plugins/internal.py:1691 +#: ipaserver/plugins/internal.py:1360 ipaserver/plugins/internal.py:1704 #: ipaserver/plugins/service.py:523 msgid "Service" msgstr "" @@ -3691,8 +3309,8 @@ msgid "Add new DNS resource record." msgstr "" #: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/dns.py:2890 -#: ipaserver/plugins/dns.py:3578 ipaserver/plugins/permission.py:1096 -#: ipaserver/plugins/host.py:701 ipaserver/plugins/service.py:695 +#: ipaserver/plugins/dns.py:3578 ipaserver/plugins/host.py:703 +#: ipaserver/plugins/permission.py:1096 ipaserver/plugins/service.py:697 msgid "Force" msgstr "" @@ -3766,322 +3384,6 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#: ipaserver/plugins/idviews.py:1134 -msgid "Group name" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:131 ipaserver/plugins/group.py:343 -msgid "Group description" -msgstr "" - -#: ipaserver/plugins/group.py:347 ipaserver/plugins/idviews.py:1044 -#: ipaserver/plugins/idviews.py:1139 -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:80 -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1227 ipaserver/plugins/cert.py:1342 -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -#: ipaserver/plugins/role.py:255 ipaserver/plugins/privilege.py:226 -#: ipaserver/plugins/privilege.py:257 ipaserver/plugins/baseldap.py:1770 -#: ipaserver/plugins/baseldap.py:2257 -msgid "Members that could not be added" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1774 ipaserver/plugins/baseldap.py:2261 -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -#: ipaserver/plugins/cert.py:1024 ipaserver/plugins/sudorule.py:442 -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#: ipaserver/plugins/group.py:194 ipaserver/plugins/group.py:417 -#: ipaserver/plugins/group.py:679 -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -#: ipaserver/plugins/serverrole.py:185 -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1868 ipaserver/plugins/baseldap.py:2356 -msgid "Members that could not be removed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1872 ipaserver/plugins/baseldap.py:2360 -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - #: ipaserver/plugins/hbacrule.py:39 msgid "" "\n" @@ -4177,25 +3479,38 @@ msgid "Service category the rule applies to" msgstr "" #: ipaserver/plugins/certmap.py:310 ipaserver/plugins/hbacrule.py:256 -#: ipaserver/plugins/selinuxusermap.py:268 ipaserver/plugins/internal.py:1950 +#: ipaserver/plugins/selinuxusermap.py:268 ipaserver/plugins/internal.py:1963 #: ipaserver/plugins/sudorule.py:250 msgid "Enabled" msgstr "" +#: ipaserver/plugins/automember.py:697 ipaserver/plugins/caacl.py:220 +#: ipaserver/plugins/hbacrule.py:260 ipaserver/plugins/selinuxusermap.py:272 +#: ipaserver/plugins/baseuser.py:250 ipaserver/plugins/internal.py:1205 +#: ipaserver/plugins/sudorule.py:291 ipaserver/plugins/user.py:179 +msgid "Users" +msgstr "" + #: ipaserver/plugins/hbacrule.py:264 ipaserver/plugins/selinuxusermap.py:276 -#: ipaserver/plugins/group.py:327 ipaserver/plugins/internal.py:883 -#: ipaserver/plugins/internal.py:1203 ipaserver/plugins/sudorule.py:295 +#: ipaserver/plugins/group.py:334 ipaserver/plugins/internal.py:884 +#: ipaserver/plugins/internal.py:1204 ipaserver/plugins/sudorule.py:295 msgid "User Groups" msgstr "" -#: ipaserver/plugins/hostgroup.py:178 ipaserver/plugins/caacl.py:232 -#: ipaserver/plugins/hbacrule.py:272 ipaserver/plugins/selinuxusermap.py:284 -#: ipaserver/plugins/internal.py:1077 ipaserver/plugins/internal.py:1177 -#: ipaserver/plugins/sudorule.py:308 +#: ipaserver/plugins/automember.py:702 ipaserver/plugins/caacl.py:228 +#: ipaserver/plugins/hbacrule.py:268 ipaserver/plugins/selinuxusermap.py:280 +#: ipaserver/plugins/host.py:480 ipaserver/plugins/internal.py:1179 +#: ipaserver/plugins/sudorule.py:304 +msgid "Hosts" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:272 ipaserver/plugins/hostgroup.py:178 +#: ipaserver/plugins/selinuxusermap.py:284 ipaserver/plugins/internal.py:1078 +#: ipaserver/plugins/internal.py:1178 ipaserver/plugins/sudorule.py:308 msgid "Host Groups" msgstr "" -#: ipaserver/plugins/internal.py:960 ipaserver/plugins/service.py:522 +#: ipaserver/plugins/internal.py:961 ipaserver/plugins/service.py:522 msgid "Services" msgstr "" @@ -4210,6 +3525,10 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" +#: ipaserver/plugins/baseldap.py:1227 ipaserver/plugins/cert.py:1341 +msgid "Suppress processing of membership attributes." +msgstr "" + #: ipaserver/plugins/hbacrule.py:534 msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -4226,6 +3545,16 @@ msgstr "" msgid "host groups to add" msgstr "" +#: ipaserver/plugins/privilege.py:226 ipaserver/plugins/privilege.py:257 +#: ipaserver/plugins/role.py:231 ipaserver/plugins/role.py:255 +#: ipaserver/plugins/baseldap.py:1770 ipaserver/plugins/baseldap.py:2257 +msgid "Members that could not be added" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1774 ipaserver/plugins/baseldap.py:2261 +msgid "Number of members added" +msgstr "" + #: ipaserver/plugins/hbacrule.py:591 msgid "Add services to an HBAC rule." msgstr "" @@ -4246,6 +3575,18 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + #: ipaserver/plugins/hbacrule.py:314 msgid "Delete an HBAC rule." msgstr "" @@ -4276,6 +3617,14 @@ msgstr "" msgid "host groups to remove" msgstr "" +#: ipaserver/plugins/baseldap.py:1868 ipaserver/plugins/baseldap.py:2356 +msgid "Members that could not be removed" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1872 ipaserver/plugins/baseldap.py:2360 +msgid "Number of members removed" +msgstr "" + #: ipaserver/plugins/hbacrule.py:613 msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -4290,6 +3639,12 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + #: ipaserver/plugins/hbacrule.py:375 msgid "Display the properties of an HBAC rule." msgstr "" @@ -4417,255 +3772,6 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:256 -msgid "Simulate use of Host-based access controls" -msgstr "" - -#: ipaserver/plugins/hbactest.py:270 ipaserver/plugins/krbtpolicy.py:134 -msgid "User name" -msgstr "" - -#: ipaserver/plugins/hbactest.py:281 -msgid "Target host" -msgstr "" - -#: ipaserver/plugins/hbactest.py:289 -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -#: ipaserver/plugins/hbactest.py:293 -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -#: ipaserver/plugins/hbactest.py:297 -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -#: ipaserver/plugins/hbactest.py:301 -msgid "Include all disabled IPA rules into test" -msgstr "" - -#: ipaserver/plugins/hbactest.py:305 -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -#: ipaserver/plugins/hbactest.py:260 -msgid "Warning" -msgstr "" - -#: ipaserver/plugins/hbactest.py:261 -msgid "Matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:262 -msgid "Not matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:263 -msgid "Non-existent or invalid rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:264 -msgid "Result of simulation" -msgstr "" - msgid "" "\n" "Hosts/Machines\n" @@ -4730,7 +3836,7 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" -#: ipaserver/plugins/service.py:765 +#: ipaserver/plugins/service.py:767 msgid "Host name" msgstr "" @@ -4771,11 +3877,11 @@ msgstr "" msgid "Random password" msgstr "" -#: ipaserver/plugins/baseuser.py:420 ipaserver/plugins/baseuser.py:886 -#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/ca.py:114 -#: ipaserver/plugins/cert.py:354 ipaserver/plugins/host.py:532 -#: ipaserver/plugins/idviews.py:1067 ipaserver/plugins/internal.py:643 -#: ipaserver/plugins/internal.py:727 ipaserver/plugins/service.py:556 +#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/baseuser.py:462 +#: ipaserver/plugins/baseuser.py:949 ipaserver/plugins/cert.py:353 +#: ipaserver/plugins/host.py:532 ipaserver/plugins/idviews.py:1068 +#: ipaserver/plugins/internal.py:644 ipaserver/plugins/internal.py:728 +#: ipaserver/plugins/service.py:556 msgid "Certificate" msgstr "" @@ -4792,7 +3898,7 @@ msgstr "" msgid "Hardware MAC address(es) on this host" msgstr "" -#: ipaserver/plugins/host.py:603 ipaserver/plugins/idviews.py:1061 +#: ipaserver/plugins/host.py:603 ipaserver/plugins/idviews.py:1062 msgid "SSH public key" msgstr "" @@ -4805,7 +3911,7 @@ msgid "" "interpretation)" msgstr "" -#: ipaserver/plugins/internal.py:1135 +#: ipaserver/plugins/internal.py:1136 msgid "Assigned ID View" msgstr "" @@ -4829,9 +3935,34 @@ msgstr "" msgid "Member of host-groups" msgstr "" +#: ipaserver/plugins/baseldap.py:80 +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + msgid "Indirect Member of host-group" msgstr "" +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + #: ipaserver/plugins/service.py:128 msgid "Keytab" msgstr "" @@ -4931,30 +4062,48 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" +msgid "netgroup" +msgstr "" + msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" +#: ipaserver/plugins/serverrole.py:185 ipaserver/plugins/role.py:81 +msgid "role" +msgstr "" + msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" +msgid "HBAC rule" +msgstr "" + msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" +msgid "sudo rule" +msgstr "" + msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" +#: ipaserver/plugins/sudorule.py:442 ipaserver/plugins/user.py:155 +#: ipaserver/plugins/user.py:181 ipaserver/plugins/user.py:893 +msgid "user" +msgstr "" + msgid "Search for hosts with these enrolled by users." msgstr "" @@ -4992,7 +4141,7 @@ msgstr "" msgid "Display information about a host." msgstr "" -#: ipaserver/plugins/host.py:1166 ipaserver/plugins/service.py:1027 +#: ipaserver/plugins/service.py:1029 ipaserver/plugins/user.py:976 msgid "file to store certificate in" msgstr "" @@ -5120,243 +4269,6 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:220 -msgid "Range name" -msgstr "" - -#: ipaserver/plugins/idrange.py:225 -msgid "First Posix ID of the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:231 -msgid "Number of IDs in the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:237 -msgid "First RID of the corresponding RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:241 -msgid "First RID of the secondary RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:246 ipaserver/plugins/idrange.py:657 -msgid "Domain SID of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:251 ipaserver/plugins/idrange.py:665 -msgid "Name of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:254 ipaserver/plugins/internal.py:1261 -#: ipaserver/plugins/trust.py:714 -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#: ipaserver/plugins/idrange.py:558 -msgid "Delete an ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:606 -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:629 -msgid "Display information about a range." -msgstr "" - msgid "" "\n" "ID Views\n" @@ -5370,92 +4282,101 @@ msgid "" "other Identity Management solutions.\n" msgstr "" -#: ipaserver/plugins/idviews.py:779 +#: ipaserver/plugins/idviews.py:780 msgid "Anchor to override" msgstr "" -#: ipaserver/plugins/idviews.py:1045 ipaserver/plugins/idviews.py:1140 +#: ipaserver/plugins/idviews.py:1135 +msgid "Group name" +msgstr "" + +#: ipaserver/plugins/group.py:354 ipaserver/plugins/idviews.py:1045 +#: ipaserver/plugins/idviews.py:1140 +msgid "GID" +msgstr "" + +#: ipaserver/plugins/idviews.py:1046 ipaserver/plugins/idviews.py:1141 msgid "Group ID Number" msgstr "" -#: ipaserver/plugins/idviews.py:1031 +#: ipaserver/plugins/idviews.py:1032 msgid "User login" msgstr "" -#: ipaserver/plugins/idviews.py:1036 +#: ipaserver/plugins/idviews.py:1037 msgid "UID" msgstr "" -#: ipaserver/plugins/idviews.py:1037 +#: ipaserver/plugins/idviews.py:1038 msgid "User ID Number" msgstr "" -#: ipaserver/plugins/baseuser.py:250 ipaserver/plugins/idviews.py:1041 +#: ipaserver/plugins/baseuser.py:292 ipaserver/plugins/idviews.py:1042 msgid "GECOS" msgstr "" -#: ipaserver/plugins/idviews.py:1050 +#: ipaserver/plugins/idviews.py:1051 msgid "Home directory" msgstr "" -#: ipaserver/plugins/idviews.py:1054 +#: ipaserver/plugins/idviews.py:1055 msgid "Login shell" msgstr "" -#: ipaserver/plugins/idviews.py:136 +#: ipaserver/plugins/idviews.py:137 msgid "ID View Name" msgstr "" -#: ipaserver/plugins/idviews.py:1295 +#: ipaserver/plugins/idviews.py:1296 msgid "Add a new Group ID override." msgstr "" -#: ipaserver/plugins/idviews.py:1301 +#: ipaserver/plugins/idviews.py:1302 msgid "Delete an Group ID override." msgstr "" -#: ipaserver/plugins/idviews.py:1313 +#: ipaserver/plugins/idviews.py:1314 msgid "Search for an Group ID override." msgstr "" msgid "Results should contain primary key attribute only (\"anchor\")" msgstr "" -#: ipaserver/plugins/idviews.py:1307 +#: ipaserver/plugins/idviews.py:1308 msgid "Modify an Group ID override." msgstr "" msgid "Rename the Group ID override object" msgstr "" -#: ipaserver/plugins/idviews.py:1329 +#: ipaserver/plugins/idviews.py:1330 msgid "Display information about an Group ID override." msgstr "" -#: ipaserver/plugins/idviews.py:1196 +#: ipaserver/plugins/idviews.py:1197 msgid "Add a new User ID override." msgstr "" -#: ipaserver/plugins/idviews.py:1221 +#: ipaserver/plugins/idviews.py:1222 msgid "Delete an User ID override." msgstr "" -#: ipaserver/plugins/idviews.py:1259 +#: ipaserver/plugins/idviews.py:1260 msgid "Search for an User ID override." msgstr "" -#: ipaserver/plugins/idviews.py:1227 +#: ipaserver/plugins/idviews.py:1228 msgid "Modify an User ID override." msgstr "" msgid "Rename the User ID override object" msgstr "" -#: ipaserver/plugins/idviews.py:1283 +#: ipaserver/plugins/idviews.py:1284 msgid "Display information about an User ID override." msgstr "" -#: ipaserver/plugins/idviews.py:196 +#: ipaserver/plugins/idviews.py:197 msgid "Add a new ID View." msgstr "" @@ -5464,87 +4385,87 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" -#: ipaserver/plugins/idviews.py:461 ipaserver/plugins/idviews.py:504 +#: ipaserver/plugins/idviews.py:462 ipaserver/plugins/idviews.py:505 #: ipaserver/plugins/sudorule.py:447 msgid "hosts" msgstr "" -#: ipaserver/plugins/idviews.py:460 +#: ipaserver/plugins/idviews.py:461 msgid "Hosts to apply the ID View to" msgstr "" -#: ipaserver/plugins/idviews.py:468 ipaserver/plugins/idviews.py:511 +#: ipaserver/plugins/idviews.py:469 ipaserver/plugins/idviews.py:512 msgid "hostgroups" msgstr "" -#: ipaserver/plugins/idviews.py:465 +#: ipaserver/plugins/idviews.py:466 msgid "" "Hostgroups to whose hosts apply the ID View to. Please note that view is not " "applied automatically to any hosts added to the hostgroup after running the " "idview-apply command." msgstr "" -#: ipaserver/plugins/idviews.py:476 +#: ipaserver/plugins/idviews.py:477 msgid "Hosts that this ID View was applied to." msgstr "" -#: ipaserver/plugins/idviews.py:480 +#: ipaserver/plugins/idviews.py:481 msgid "Hosts or hostgroups that this ID View could not be applied to." msgstr "" -#: ipaserver/plugins/idviews.py:485 +#: ipaserver/plugins/idviews.py:486 msgid "Number of hosts the ID View was applied to:" msgstr "" -#: ipaserver/plugins/idviews.py:213 +#: ipaserver/plugins/idviews.py:214 msgid "Delete an ID View." msgstr "" -#: ipaserver/plugins/idviews.py:242 +#: ipaserver/plugins/idviews.py:243 msgid "Search for an ID View." msgstr "" -#: ipaserver/plugins/idviews.py:226 +#: ipaserver/plugins/idviews.py:227 msgid "Modify an ID View." msgstr "" msgid "Rename the ID View object" msgstr "" -#: ipaserver/plugins/idviews.py:249 +#: ipaserver/plugins/idviews.py:250 msgid "Display information about an ID View." msgstr "" -#: ipaserver/plugins/idviews.py:254 +#: ipaserver/plugins/idviews.py:255 msgid "Enumerate all the hosts the view applies to." msgstr "" -#: ipaserver/plugins/idviews.py:492 +#: ipaserver/plugins/idviews.py:493 msgid "" "Clears ID View from specified hosts or current members of specified " "hostgroups." msgstr "" -#: ipaserver/plugins/idviews.py:503 +#: ipaserver/plugins/idviews.py:504 msgid "Hosts to clear (any) ID View from." msgstr "" -#: ipaserver/plugins/idviews.py:508 +#: ipaserver/plugins/idviews.py:509 msgid "" "Hostgroups whose hosts should have ID Views cleared. Note that view is not " "cleared automatically from any host added to the hostgroup after running " "idview-unapply command." msgstr "" -#: ipaserver/plugins/idviews.py:519 +#: ipaserver/plugins/idviews.py:520 msgid "Hosts that ID View was cleared from." msgstr "" -#: ipaserver/plugins/idviews.py:523 +#: ipaserver/plugins/idviews.py:524 msgid "Hosts or hostgroups that ID View could not be cleared from." msgstr "" -#: ipaserver/plugins/idviews.py:528 +#: ipaserver/plugins/idviews.py:529 msgid "Number of hosts that had a ID View was unset:" msgstr "" @@ -5554,7 +4475,7 @@ msgid "" "Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" -#: ipaserver/plugins/internal.py:2022 +#: ipaserver/plugins/internal.py:2035 msgid "Dict of I18N messages" msgstr "" @@ -5646,6 +4567,10 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" +#: ipaserver/plugins/passwd.py:94 ipaserver/plugins/krbtpolicy.py:134 +msgid "User name" +msgstr "" + #: ipaserver/plugins/krbtpolicy.py:135 msgid "Manage ticket policy for specific user" msgstr "" @@ -5666,15 +4591,15 @@ msgstr "" msgid "Maximum renewable age (seconds)" msgstr "" -#: ipaserver/plugins/krbtpolicy.py:233 +#: ipaserver/plugins/krbtpolicy.py:243 msgid "Modify Kerberos ticket policy." msgstr "" -#: ipaserver/plugins/krbtpolicy.py:312 +#: ipaserver/plugins/krbtpolicy.py:322 msgid "Reset Kerberos ticket policy to the default values." msgstr "" -#: ipaserver/plugins/krbtpolicy.py:258 +#: ipaserver/plugins/krbtpolicy.py:268 msgid "Display the current Kerberos ticket policy." msgstr "" @@ -5947,6 +4872,9 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" +msgid "Dictionary mapping variable name to value" +msgstr "" + msgid "Total number of variables env (>= count)" msgstr "" @@ -6063,6 +4991,11 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" +#: ipaserver/plugins/group.py:424 ipaserver/plugins/group.py:698 +#: ipaserver/plugins/user.py:169 +msgid "group" +msgstr "" + msgid "Search for netgroups with these member groups." msgstr "" @@ -6170,186 +5103,6 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/subid.py:136 ipaserver/plugins/otptoken.py:160 -msgid "Unique ID" -msgstr "" - -#: ipaserver/plugins/otptoken.py:166 -msgid "Type of the token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:175 -msgid "Token description (informational only)" -msgstr "" - -#: ipaserver/plugins/subid.py:149 ipaserver/plugins/subid.py:467 -#: ipaserver/plugins/otptoken.py:179 ipaserver/plugins/internal.py:1387 -msgid "Owner" -msgstr "" - -#: ipaserver/plugins/otptoken.py:180 -msgid "Assigned user of the token (default: self)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:183 -msgid "Manager" -msgstr "" - -#: ipaserver/plugins/otptoken.py:184 -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:189 ipaserver/plugins/internal.py:1948 -msgid "Disabled" -msgstr "" - -#: ipaserver/plugins/otptoken.py:190 -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:194 -msgid "Validity start" -msgstr "" - -#: ipaserver/plugins/otptoken.py:195 -msgid "First date/time the token can be used" -msgstr "" - -#: ipaserver/plugins/otptoken.py:199 -msgid "Validity end" -msgstr "" - -#: ipaserver/plugins/otptoken.py:200 -msgid "Last date/time the token can be used" -msgstr "" - -#: ipaserver/plugins/otptoken.py:204 -msgid "Vendor" -msgstr "" - -#: ipaserver/plugins/otptoken.py:205 -msgid "Token vendor name (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:209 -msgid "Model" -msgstr "" - -#: ipaserver/plugins/otptoken.py:210 -msgid "Token model (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:214 -msgid "Serial" -msgstr "" - -#: ipaserver/plugins/otptoken.py:215 -msgid "Token serial (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:220 -msgid "Token secret (Base32; default: random)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:230 -msgid "Token hash algorithm" -msgstr "" - -#: ipaserver/plugins/otptoken.py:238 -msgid "Digits" -msgstr "" - -#: ipaserver/plugins/otptoken.py:239 -msgid "Number of digits each token code will have" -msgstr "" - -#: ipaserver/plugins/otptoken.py:247 -msgid "Clock offset" -msgstr "" - -#: ipaserver/plugins/otptoken.py:248 -msgid "TOTP token / IPA server time difference" -msgstr "" - -#: ipaserver/plugins/otptoken.py:255 -msgid "Clock interval" -msgstr "" - -#: ipaserver/plugins/otptoken.py:256 -msgid "Length of TOTP token code validity" -msgstr "" - -#: ipaserver/plugins/otptoken.py:264 -msgid "Counter" -msgstr "" - -#: ipaserver/plugins/otptoken.py:265 -msgid "Initial counter for the HOTP token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:280 -msgid "Add a new OTP token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:284 -msgid "(deprecated)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:285 -msgid "Do not display QR code" -msgstr "" - -#: ipaserver/plugins/otptoken.py:463 -msgid "Add users that can manage this token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:366 -msgid "Delete an OTP token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:421 -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#: ipaserver/plugins/otptoken.py:372 -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#: ipaserver/plugins/otptoken.py:450 -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "YubiKey Tokens\n" @@ -6388,15 +5141,15 @@ msgstr "" msgid "Set a user's password." msgstr "" -#: ipaserver/plugins/internal.py:1713 +#: ipaserver/plugins/internal.py:1726 msgid "New Password" msgstr "" -#: ipaserver/plugins/internal.py:1707 +#: ipaserver/plugins/internal.py:1720 msgid "Current Password" msgstr "" -#: ipaserver/plugins/internal.py:192 ipaserver/plugins/internal.py:1715 +#: ipaserver/plugins/internal.py:192 ipaserver/plugins/internal.py:1728 msgid "OTP" msgstr "" @@ -6833,7 +5586,7 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" -#: ipaserver/plugins/pwpolicy.py:307 ipaserver/plugins/internal.py:1668 +#: ipaserver/plugins/internal.py:1681 ipaserver/plugins/pwpolicy.py:307 msgid "Group" msgstr "" @@ -6935,9 +5688,9 @@ msgstr "" msgid "Display information about password policy." msgstr "" -#: ipaserver/plugins/baseuser.py:209 ipaserver/plugins/user.py:163 -#: ipaserver/plugins/pwpolicy.py:641 ipaserver/plugins/internal.py:1202 -#: ipaserver/plugins/internal.py:1314 ipaserver/plugins/internal.py:1702 +#: ipaserver/plugins/baseuser.py:251 ipaserver/plugins/internal.py:1203 +#: ipaserver/plugins/internal.py:1327 ipaserver/plugins/internal.py:1715 +#: ipaserver/plugins/pwpolicy.py:641 ipaserver/plugins/user.py:180 msgid "User" msgstr "" @@ -6981,7 +5734,7 @@ msgstr "" msgid "A description of this RADIUS proxy server" msgstr "" -#: ipaserver/plugins/radiusproxy.py:122 ipaserver/plugins/user.py:1177 +#: ipaserver/plugins/radiusproxy.py:122 ipaserver/plugins/user.py:1221 msgid "Server" msgstr "" @@ -7066,9 +5819,8 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" -#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/certmap.py:566 -#: ipaserver/plugins/internal.py:719 ipaserver/plugins/internal.py:1549 -#: ipaserver/plugins/trust.py:1249 +#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/internal.py:720 +#: ipaserver/plugins/internal.py:1562 ipaserver/plugins/trust.py:1249 msgid "Domain" msgstr "" @@ -7129,13 +5881,19 @@ msgid "" " add users, reset passwords or add a user to the default IPA user group.\n" msgstr "" -#: ipaserver/plugins/serverrole.py:64 ipaserver/plugins/serverrole.py:191 +#: ipaserver/plugins/serverrole.py:191 ipaserver/plugins/role.py:148 msgid "Role name" msgstr "" msgid "A description of this role-group" msgstr "" +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + msgid "Privileges" msgstr "" @@ -7426,6 +6184,9 @@ msgid "" "httpd.keytab\n" msgstr "" +msgid "Principal" +msgstr "" + #: ipaserver/plugins/service.py:531 msgid "Service principal" msgstr "" @@ -7446,42 +6207,42 @@ msgstr "" msgid "force principal name even if not in DNS" msgstr "" -#: ipaserver/plugins/service.py:1059 +#: ipaserver/plugins/service.py:1061 msgid "Add hosts that can manage this service." msgstr "" -#: ipaserver/plugins/service.py:1115 +#: ipaserver/plugins/service.py:1117 msgid "" "Allow users, groups, hosts or host groups to create a keytab of this service." msgstr "" -#: ipaserver/plugins/service.py:1076 +#: ipaserver/plugins/service.py:1078 msgid "" "Allow users, groups, hosts or host groups to retrieve a keytab of this " "service." msgstr "" -#: ipaserver/plugins/service.py:885 +#: ipaserver/plugins/service.py:887 msgid "Delete an IPA service." msgstr "" -#: ipaserver/plugins/service.py:1154 +#: ipaserver/plugins/service.py:1156 msgid "Disable the Kerberos key and SSL certificate of a service." msgstr "" -#: ipaserver/plugins/service.py:1135 +#: ipaserver/plugins/service.py:1137 msgid "" "Disallow users, groups, hosts or host groups to create a keytab of this " "service." msgstr "" -#: ipaserver/plugins/service.py:1096 +#: ipaserver/plugins/service.py:1098 msgid "" "Disallow users, groups, hosts or host groups to retrieve a keytab of this " "service." msgstr "" -#: ipaserver/plugins/service.py:955 +#: ipaserver/plugins/service.py:957 msgid "Search for IPA services." msgstr "" @@ -7494,15 +6255,15 @@ msgstr "" msgid "Search for services without these managed by hosts." msgstr "" -#: ipaserver/plugins/service.py:905 +#: ipaserver/plugins/service.py:907 msgid "Modify an existing IPA service." msgstr "" -#: ipaserver/plugins/service.py:1068 +#: ipaserver/plugins/service.py:1070 msgid "Remove hosts that can manage this service." msgstr "" -#: ipaserver/plugins/service.py:1022 +#: ipaserver/plugins/service.py:1024 msgid "Display information about an IPA service." msgstr "" @@ -8183,7 +6944,11 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -#: ipaserver/plugins/sudocmdgroup.py:134 ipaserver/plugins/internal.py:1415 +#: ipaserver/plugins/sudocmdgroup.py:131 ipaserver/plugins/group.py:350 +msgid "Group description" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:134 ipaserver/plugins/internal.py:1428 msgid "Commands" msgstr "" @@ -8231,253 +6996,6 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1552 ipaserver/plugins/trust.py:544 -#: ipaserver/plugins/trust.py:1589 -msgid "Domain NetBIOS name" -msgstr "" - -#: ipaserver/plugins/internal.py:1553 ipaserver/plugins/trust.py:548 -#: ipaserver/plugins/trust.py:1592 -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#: ipaserver/plugins/certmap.py:298 ipaserver/plugins/trust.py:1584 -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#: ipaserver/plugins/trust.py:1802 -msgid "Active Directory domain administrator" -msgstr "" - -#: ipaserver/plugins/trust.py:1806 -msgid "Active Directory domain administrator's password" -msgstr "" - -#: ipaserver/plugins/trust.py:1811 -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - msgid "" "\n" "Users\n" @@ -8542,7 +7060,7 @@ msgstr "" msgid "Kerberos principal" msgstr "" -#: ipaserver/plugins/baseuser.py:277 +#: ipaserver/plugins/baseuser.py:319 msgid "Kerberos principal expiration" msgstr "" @@ -8588,50 +7106,60 @@ msgstr "" msgid "Job Title" msgstr "" +#: ipaserver/plugins/baseuser.py:395 +msgid "Manager" +msgstr "" + msgid "Car License" msgstr "" msgid "Account disabled" msgstr "" -#: ipaserver/plugins/baseuser.py:371 +#: ipaserver/plugins/baseuser.py:413 msgid "User authentication types" msgstr "" -#: ipaserver/plugins/baseuser.py:372 +#: ipaserver/plugins/baseuser.py:414 msgid "Types of supported user authentication" msgstr "" -#: ipaserver/plugins/baseuser.py:379 +#: ipaserver/plugins/baseuser.py:421 msgid "" "User category (semantics placed on this attribute are for local " "interpretation)" msgstr "" -#: ipaserver/plugins/baseuser.py:384 +#: ipaserver/plugins/baseuser.py:426 msgid "RADIUS proxy configuration" msgstr "" -#: ipaserver/plugins/baseuser.py:388 +#: ipaserver/plugins/baseuser.py:430 msgid "RADIUS proxy username" msgstr "" -#: ipaserver/plugins/baseuser.py:400 +#: ipaserver/plugins/baseuser.py:442 msgid "Department Number" msgstr "" -#: ipaserver/plugins/baseuser.py:403 +#: ipaserver/plugins/baseuser.py:445 msgid "Employee Number" msgstr "" -#: ipaserver/plugins/baseuser.py:406 +#: ipaserver/plugins/baseuser.py:448 msgid "Employee Type" msgstr "" -#: ipaserver/plugins/baseuser.py:409 +#: ipaserver/plugins/baseuser.py:451 msgid "Preferred Language" msgstr "" +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + msgid "Kerberos keys available" msgstr "" @@ -8742,6 +7270,1263 @@ msgid "" " " msgstr "" +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#: ipaserver/plugins/automember.py:258 +msgid "A description of this auto member rule" +msgstr "" + +#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 +msgid "Default (fallback) Group" +msgstr "" + +#: ipaserver/plugins/automember.py:263 +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 +msgid "Automember Rule" +msgstr "" + +#: ipaserver/plugins/automember.py:184 +msgid "Grouping Type" +msgstr "" + +#: ipaserver/plugins/automember.py:185 +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 +msgid "Inclusive Regex" +msgstr "" + +#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 +msgid "Exclusive Regex" +msgstr "" + +#: ipaserver/plugins/automember.py:176 +msgid "Attribute Key" +msgstr "" + +#: ipaserver/plugins/automember.py:177 +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +#: ipaserver/plugins/automember.py:357 +msgid "Conditions that could not be added" +msgstr "" + +#: ipaserver/plugins/automember.py:361 +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#: ipaserver/plugins/automember.py:586 +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:683 +msgid "Rebuild auto membership." +msgstr "" + +#: ipaserver/plugins/automember.py:693 +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +#: ipaserver/plugins/automember.py:698 +msgid "Rebuild membership for specified users" +msgstr "" + +#: ipaserver/plugins/automember.py:703 +msgid "Rebuild membership for specified hosts" +msgstr "" + +#: ipaserver/plugins/automember.py:708 +msgid "No wait" +msgstr "" + +#: ipaserver/plugins/automember.py:709 +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:441 +msgid "Conditions that could not be removed" +msgstr "" + +#: ipaserver/plugins/automember.py:445 +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +#: ipaserver/plugins/hbactest.py:256 +msgid "Simulate use of Host-based access controls" +msgstr "" + +#: ipaserver/plugins/hbactest.py:281 +msgid "Target host" +msgstr "" + +#: ipaserver/plugins/hbactest.py:289 +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +#: ipaserver/plugins/hbactest.py:293 +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +#: ipaserver/plugins/hbactest.py:297 +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +#: ipaserver/plugins/hbactest.py:301 +msgid "Include all disabled IPA rules into test" +msgstr "" + +#: ipaserver/plugins/hbactest.py:305 +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +#: ipaserver/plugins/hbactest.py:260 +msgid "Warning" +msgstr "" + +#: ipaserver/plugins/hbactest.py:261 +msgid "Matched rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:262 +msgid "Not matched rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:263 +msgid "Non-existent or invalid rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:264 +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:220 +msgid "Range name" +msgstr "" + +#: ipaserver/plugins/idrange.py:225 +msgid "First Posix ID of the range" +msgstr "" + +#: ipaserver/plugins/idrange.py:231 +msgid "Number of IDs in the range" +msgstr "" + +#: ipaserver/plugins/idrange.py:237 +msgid "First RID of the corresponding RID range" +msgstr "" + +#: ipaserver/plugins/idrange.py:241 +msgid "First RID of the secondary RID range" +msgstr "" + +#: ipaserver/plugins/idrange.py:246 ipaserver/plugins/idrange.py:657 +msgid "Domain SID of the trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:251 ipaserver/plugins/idrange.py:665 +msgid "Name of the trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:254 ipaserver/plugins/internal.py:1274 +#: ipaserver/plugins/trust.py:714 +msgid "Range type" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#: ipaserver/plugins/idrange.py:558 +msgid "Delete an ID range." +msgstr "" + +#: ipaserver/plugins/idrange.py:606 +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +#: ipaserver/plugins/idrange.py:629 +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:160 ipaserver/plugins/subid.py:136 +msgid "Unique ID" +msgstr "" + +#: ipaserver/plugins/otptoken.py:166 +msgid "Type of the token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:175 +msgid "Token description (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:179 ipaserver/plugins/subid.py:149 +#: ipaserver/plugins/subid.py:467 ipaserver/plugins/internal.py:1400 +msgid "Owner" +msgstr "" + +#: ipaserver/plugins/otptoken.py:180 +msgid "Assigned user of the token (default: self)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:184 +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:189 ipaserver/plugins/internal.py:1961 +msgid "Disabled" +msgstr "" + +#: ipaserver/plugins/otptoken.py:190 +msgid "Mark the token as disabled (default: false)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:194 +msgid "Validity start" +msgstr "" + +#: ipaserver/plugins/otptoken.py:195 +msgid "First date/time the token can be used" +msgstr "" + +#: ipaserver/plugins/otptoken.py:199 +msgid "Validity end" +msgstr "" + +#: ipaserver/plugins/otptoken.py:200 +msgid "Last date/time the token can be used" +msgstr "" + +#: ipaserver/plugins/otptoken.py:204 +msgid "Vendor" +msgstr "" + +#: ipaserver/plugins/otptoken.py:205 +msgid "Token vendor name (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:209 +msgid "Model" +msgstr "" + +#: ipaserver/plugins/otptoken.py:210 +msgid "Token model (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:214 +msgid "Serial" +msgstr "" + +#: ipaserver/plugins/otptoken.py:215 +msgid "Token serial (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:220 +msgid "Token secret (Base32; default: random)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:230 +msgid "Token hash algorithm" +msgstr "" + +#: ipaserver/plugins/otptoken.py:238 +msgid "Digits" +msgstr "" + +#: ipaserver/plugins/otptoken.py:239 +msgid "Number of digits each token code will have" +msgstr "" + +#: ipaserver/plugins/otptoken.py:247 +msgid "Clock offset" +msgstr "" + +#: ipaserver/plugins/otptoken.py:248 +msgid "TOTP token / IPA server time difference" +msgstr "" + +#: ipaserver/plugins/otptoken.py:255 +msgid "Clock interval" +msgstr "" + +#: ipaserver/plugins/otptoken.py:256 +msgid "Length of TOTP token code validity" +msgstr "" + +#: ipaserver/plugins/otptoken.py:264 +msgid "Counter" +msgstr "" + +#: ipaserver/plugins/otptoken.py:265 +msgid "Initial counter for the HOTP token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:280 +msgid "Add a new OTP token." +msgstr "" + +#: ipaserver/plugins/otptoken.py:284 +msgid "(deprecated)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:285 +msgid "Do not display QR code" +msgstr "" + +#: ipaserver/plugins/otptoken.py:463 +msgid "Add users that can manage this token." +msgstr "" + +#: ipaserver/plugins/otptoken.py:366 +msgid "Delete an OTP token." +msgstr "" + +#: ipaserver/plugins/otptoken.py:421 +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#: ipaserver/plugins/otptoken.py:372 +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +#: ipaserver/plugins/otptoken.py:450 +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "Sudo Rules\n" @@ -9001,13 +8786,260 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1565 ipaserver/plugins/trust.py:544 +#: ipaserver/plugins/trust.py:1589 +msgid "Domain NetBIOS name" +msgstr "" + +#: ipaserver/plugins/internal.py:1566 ipaserver/plugins/trust.py:548 +#: ipaserver/plugins/trust.py:1592 +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#: ipaserver/plugins/certmap.py:298 ipaserver/plugins/trust.py:1584 +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#: ipaserver/plugins/trust.py:1802 +msgid "Active Directory domain administrator" +msgstr "" + +#: ipaserver/plugins/trust.py:1806 +msgid "Active Directory domain administrator's password" +msgstr "" + +#: ipaserver/plugins/trust.py:1811 +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + #: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/serverrole.py:124 -#: ipaserver/plugins/baseldap.py:1980 ipaserver/plugins/cert.py:1571 +#: ipaserver/plugins/baseldap.py:1980 ipaserver/plugins/cert.py:1570 msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" #: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/serverrole.py:132 -#: ipaserver/plugins/baseldap.py:1987 ipaserver/plugins/cert.py:1576 +#: ipaserver/plugins/baseldap.py:1987 ipaserver/plugins/cert.py:1575 msgid "Maximum number of entries returned (0 is unlimited)" msgstr "" @@ -9064,7 +9096,7 @@ msgstr "" msgid "Service category the ACL applies to" msgstr "" -#: ipaserver/plugins/internal.py:603 +#: ipaserver/plugins/internal.py:604 msgid "Profiles" msgstr "" @@ -9122,124 +9154,6 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -#: ipaserver/plugins/certprofile.py:122 ipaserver/plugins/cert.py:576 -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:123 -msgid "Profile ID for referring to this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:132 -msgid "Profile description" -msgstr "" - -#: ipaserver/plugins/certprofile.py:133 -msgid "Brief description of this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:138 -msgid "Store issued certificates" -msgstr "" - -#: ipaserver/plugins/certprofile.py:139 -msgid "Whether to store certs issued using this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:281 -msgid "Delete a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:188 -msgid "Search for Certificate Profiles." -msgstr "" - -#: ipaserver/plugins/certprofile.py:221 -msgid "Import a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:226 -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#: ipaserver/plugins/certprofile.py:304 -msgid "Modify Certificate Profile configuration." -msgstr "" - -#: ipaserver/plugins/certprofile.py:310 -msgid "File containing profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:200 -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:204 -msgid "Write profile configuration to file" -msgstr "" - msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -9264,8 +9178,8 @@ msgstr "" msgid "Change current Domain Level." msgstr "" -#: ipaserver/plugins/domainlevel.py:124 ipaserver/plugins/internal.py:796 -#: ipaserver/plugins/internal.py:797 +#: ipaserver/plugins/domainlevel.py:124 ipaserver/plugins/internal.py:797 +#: ipaserver/plugins/internal.py:798 msgid "Domain Level" msgstr "" @@ -9275,229 +9189,17 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -#: ipaserver/plugins/idviews.py:80 +#: ipaserver/plugins/idviews.py:81 msgid "Fallback to AD DC LDAP" msgstr "" -#: ipaserver/plugins/idviews.py:81 +#: ipaserver/plugins/idviews.py:82 msgid "" "Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" "way trusts only." msgstr "" -#: ipaserver/plugins/idviews.py:448 +#: ipaserver/plugins/idviews.py:449 msgid "" "Applies ID View to specified hosts or current members of specified " "hostgroups. If any other ID View is applied to the host, it is overridden." @@ -9521,10 +9223,6 @@ msgid "" "to onelevel" msgstr "" -#: ipaserver/plugins/otptoken.py:469 -msgid "Remove users that can manage this token." -msgstr "" - #: ipaserver/plugins/permission.py:322 msgid "Target DN subtree" msgstr "" @@ -9561,11 +9259,11 @@ msgid "" msgstr "" #: ipaserver/plugins/dnsserver.py:112 ipaserver/plugins/pkinit.py:47 -#: ipaserver/plugins/server.py:103 ipaserver/plugins/serverrole.py:58 +#: ipaserver/plugins/serverrole.py:58 ipaserver/plugins/server.py:103 msgid "Server name" msgstr "" -#: ipaserver/plugins/server.py:104 ipaserver/plugins/serverrole.py:59 +#: ipaserver/plugins/serverrole.py:59 ipaserver/plugins/server.py:104 msgid "IPA server hostname" msgstr "" @@ -9593,11 +9291,11 @@ msgstr "" msgid "Show IPA server." msgstr "" -#: ipaserver/plugins/service.py:1197 +#: ipaserver/plugins/service.py:1199 msgid "Add new certificates to a service" msgstr "" -#: ipaserver/plugins/service.py:1204 +#: ipaserver/plugins/service.py:1206 msgid "Remove certificates from a service" msgstr "" @@ -9790,23 +9488,23 @@ msgid "" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" msgstr "" -#: ipaserver/plugins/stageuser.py:506 +#: ipaserver/plugins/stageuser.py:518 msgid "Activate a stage user." msgstr "" -#: ipaserver/plugins/stageuser.py:276 +#: ipaserver/plugins/stageuser.py:284 msgid "Add a new stage user." msgstr "" -#: ipaserver/plugins/stageuser.py:286 +#: ipaserver/plugins/stageuser.py:294 msgid "Create Stage user in from a delete user" msgstr "" -#: ipaserver/plugins/stageuser.py:429 +#: ipaserver/plugins/stageuser.py:441 msgid "Delete a stage user." msgstr "" -#: ipaserver/plugins/stageuser.py:457 +#: ipaserver/plugins/stageuser.py:469 msgid "Search for stage users." msgstr "" @@ -9840,14 +9538,14 @@ msgstr "" msgid "Search for stage users without these member of sudo rules." msgstr "" -#: ipaserver/plugins/stageuser.py:435 +#: ipaserver/plugins/stageuser.py:447 msgid "Modify a stage user." msgstr "" msgid "Rename the stage user object" msgstr "" -#: ipaserver/plugins/stageuser.py:489 +#: ipaserver/plugins/stageuser.py:501 msgid "Display information about a stage user." msgstr "" @@ -10017,15 +9715,7 @@ msgid "" " " msgstr "" -#: ipaserver/plugins/trust.py:721 -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -#: ipaserver/plugins/user.py:1173 +#: ipaserver/plugins/user.py:1217 msgid "Preserved user" msgstr "" @@ -10331,6 +10021,348 @@ msgstr "" msgid "Display information about a vault container." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +#: ipaserver/plugins/certprofile.py:122 ipaserver/plugins/cert.py:575 +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +#: ipaserver/plugins/certprofile.py:123 +msgid "Profile ID for referring to this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:132 +msgid "Profile description" +msgstr "" + +#: ipaserver/plugins/certprofile.py:133 +msgid "Brief description of this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:138 +msgid "Store issued certificates" +msgstr "" + +#: ipaserver/plugins/certprofile.py:139 +msgid "Whether to store certs issued using this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:281 +msgid "Delete a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:188 +msgid "Search for Certificate Profiles." +msgstr "" + +#: ipaserver/plugins/certprofile.py:221 +msgid "Import a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:226 +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#: ipaserver/plugins/certprofile.py:304 +msgid "Modify Certificate Profile configuration." +msgstr "" + +#: ipaserver/plugins/certprofile.py:310 +msgid "File containing profile configuration" +msgstr "" + +#: ipaserver/plugins/certprofile.py:200 +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:204 +msgid "Write profile configuration to file" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +#: ipaserver/plugins/otptoken.py:469 +msgid "Remove users that can manage this token." +msgstr "" + +#: ipaserver/dcerpc_common.py:22 +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10658,11 +10690,11 @@ msgstr "" msgid "Search for servers without these managed suffixes." msgstr "" -#: ipaserver/plugins/stageuser.py:774 +#: ipaserver/plugins/stageuser.py:786 msgid "Add a manager to the stage user entry" msgstr "" -#: ipaserver/plugins/stageuser.py:779 +#: ipaserver/plugins/stageuser.py:791 msgid "Remove a manager to the stage user entry" msgstr "" @@ -11566,7 +11598,7 @@ msgstr "" msgid "Register to the entitlement system." msgstr "" -#: ipaserver/plugins/internal.py:418 +#: ipaserver/plugins/internal.py:419 msgid "Username" msgstr "" @@ -12023,192 +12055,6 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -12521,6 +12367,192 @@ msgstr "" msgid "GECOS field" msgstr "" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "\n" "Sudo Rules\n" @@ -12604,7 +12636,7 @@ msgid "Failed CAs" msgstr "" #: ipaclient/frontend.py:71 ipaserver/plugins/hostgroup.py:95 -#: ipaserver/plugins/group.py:183 +#: ipaserver/plugins/group.py:190 msgid "Failed member manager" msgstr "" @@ -12626,6 +12658,72 @@ msgstr "" msgid "Failed targets" msgstr "" +#: ipalib/output.py:110 +msgid "A dictionary representing an LDAP entry" +msgstr "" + +#: ipalib/output.py:118 +msgid "A list of LDAP entries" +msgstr "" + +#: ipalib/output.py:170 +msgid "All commands should at least have a result" +msgstr "" + +#: ipalib/cli.py:630 +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +#: ipalib/cli.py:639 +msgid "Passwords do not match!" +msgstr "" + +#: ipalib/cli.py:662 +msgid "No matching entries found" +msgstr "" + +#: ipalib/cli.py:737 +msgid "Topic or Command" +msgstr "" + +#: ipalib/cli.py:738 +msgid "The topic or command name." +msgstr "" + +#: ipalib/cli.py:910 +msgid "Topic commands:" +msgstr "" + +#: ipalib/cli.py:916 +msgid "To get command help, use:" +msgstr "" + +#: ipalib/cli.py:917 +msgid " ipa --help" +msgstr "" + +#: ipalib/cli.py:928 +msgid "Command name" +msgstr "" + +#: ipalib/cli.py:1151 +msgid "Positional arguments" +msgstr "" + +#: ipalib/cli.py:1297 +#, python-format +msgid "Same as --%s" +msgstr "" + +#: ipalib/cli.py:1300 +msgid "Deprecated options" +msgstr "" + +#: ipalib/cli.py:1429 +msgid "No file to read" +msgstr "" + #: ipalib/errors.py:296 #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" @@ -13091,78 +13189,17 @@ msgid_plural "%(count)d plugins loaded" msgstr[0] "" msgstr[1] "" -#: ipalib/output.py:110 -msgid "A dictionary representing an LDAP entry" +#: ipalib/frontend.py:425 +msgid "Results are truncated, try a more specific search" msgstr "" -#: ipalib/output.py:118 -msgid "A list of LDAP entries" -msgstr "" - -#: ipalib/output.py:170 -msgid "All commands should at least have a result" -msgstr "" - -#: ipalib/cli.py:630 +#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 #, python-format -msgid "Enter %(label)s again to verify: " +msgid "Unknown option: %(option)s" msgstr "" -#: ipalib/cli.py:639 -msgid "Passwords do not match!" -msgstr "" - -#: ipalib/cli.py:662 -msgid "No matching entries found" -msgstr "" - -#: ipalib/cli.py:737 -msgid "Topic or Command" -msgstr "" - -#: ipalib/cli.py:738 -msgid "The topic or command name." -msgstr "" - -#: ipalib/cli.py:910 -msgid "Topic commands:" -msgstr "" - -#: ipalib/cli.py:916 -msgid "To get command help, use:" -msgstr "" - -#: ipalib/cli.py:917 -msgid " ipa --help" -msgstr "" - -#: ipalib/cli.py:928 -msgid "Command name" -msgstr "" - -#: ipalib/cli.py:1151 -msgid "Positional arguments" -msgstr "" - -#: ipalib/cli.py:1297 -#, python-format -msgid "Same as --%s" -msgstr "" - -#: ipalib/cli.py:1300 -msgid "Deprecated options" -msgstr "" - -#: ipalib/cli.py:1429 -msgid "No file to read" -msgstr "" - -#: ipalib/rpc.py:1109 -msgid "any of the configured servers" -msgstr "" - -#: ipalib/rpc.py:1192 -msgid "Exceeded number of tries to forward a request." +#: ipalib/frontend.py:981 ipaserver/plugins/batch.py:83 +msgid "Client version. Used to determine if server will accept request." msgstr "" #: ipalib/messages.py:84 @@ -13535,19 +13572,6 @@ msgstr "" msgid "invalid serial number 0" msgstr "" -#: ipalib/frontend.py:425 -msgid "Results are truncated, try a more specific search" -msgstr "" - -#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -#: ipalib/frontend.py:981 ipaserver/plugins/batch.py:83 -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #: ipalib/plugable.py:534 #, python-format msgid "%(filename)s: file not found" @@ -13558,6 +13582,14 @@ msgstr "" msgid "Unable to parse option {item}" msgstr "" +#: ipalib/rpc.py:1109 +msgid "any of the configured servers" +msgstr "" + +#: ipalib/rpc.py:1192 +msgid "Exceeded number of tries to forward a request." +msgstr "" + #: ipalib/util.py:214 msgid "Filename is empty" msgstr "" @@ -13716,52 +13748,6 @@ msgstr "" msgid "objectclass %s not found" msgstr "" -#: ipaserver/dcerpc_common.py:20 -msgid "Trusting forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:21 -msgid "Trusted forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:26 -msgid "Established and verified" -msgstr "" - -#: ipaserver/dcerpc_common.py:27 -msgid "Waiting for confirmation by remote side" -msgstr "" - -#: ipaserver/dcerpc_common.py:30 -msgid "Unknown" -msgstr "" - -#: ipaserver/dcerpc_common.py:36 -msgid "Non-Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:37 ipaserver/plugins/internal.py:1262 -msgid "Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:38 -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/dcerpc_common.py:39 -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:41 -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/install/replication.py:1787 ipaserver/install/replication.py:1806 -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - #: ipaserver/install/certs.py:494 #, python-format msgid "Unable to communicate with CMS (status %d)" @@ -13771,128 +13757,9 @@ msgstr "" msgid "Failed to authenticate to CA REST API" msgstr "" -#: ipaserver/plugins/certprofile.py:21 -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:86 ipaserver/plugins/cert.py:284 -msgid "CA is not configured" -msgstr "" - -#: ipaserver/plugins/certprofile.py:95 -msgid "invalid Profile ID" -msgstr "" - -#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 -msgid "Certificate Profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 -msgid "Certificate Profiles" -msgstr "" - -#: ipaserver/plugins/certprofile.py:126 -msgid "Profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:190 +#: ipaserver/install/replication.py:1787 ipaserver/install/replication.py:1806 #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certprofile.py:222 -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:247 -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#: ipaserver/plugins/certprofile.py:255 -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#: ipaserver/plugins/certprofile.py:282 -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:289 -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/certprofile.py:305 -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:322 -msgid "Certificate profiles cannot be renamed" -msgstr "" - -#: ipaserver/plugins/certprofile.py:327 -msgid "Insufficient privilege to modify a certificate profile." +msgid "Replication agreement for %(hostname)s not found" msgstr "" #: ipaserver/plugins/delegation.py:67 @@ -14061,26 +13928,6 @@ msgstr "" msgid "Deleted DNS server \"%(value)s\"" msgstr "" -#: ipaserver/plugins/domainlevel.py:69 -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:112 -msgid "Server does not support domain level functionality" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:147 -msgid "Domain Level cannot be lowered." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:155 -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - #: ipaserver/plugins/hbac.py:7 msgid "Host-based access control commands" msgstr "" @@ -14182,245 +14029,11 @@ msgid_plural "%(count)d HBAC service groups matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/hostgroup.py:35 -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:107 -msgid "host groups" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:179 -msgid "Host Group" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:223 -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:239 -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:262 -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:266 ipaserver/plugins/hostgroup.py:284 -#: ipaserver/plugins/hostgroup.py:349 -msgid "hostgroup" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:268 ipaserver/plugins/hostgroup.py:286 -msgid "privileged hostgroup" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:278 -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:303 -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hostgroup.py:362 -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:372 -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#: ipaserver/plugins/join.py:125 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/location.py:33 -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -#: ipaserver/plugins/location.py:35 -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -#: ipaserver/plugins/location.py:39 -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -#: ipaserver/plugins/location.py:42 -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -#: ipaserver/plugins/location.py:45 -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -#: ipaserver/plugins/location.py:48 -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#: ipaserver/plugins/location.py:62 -msgid "location" -msgstr "" - -#: ipaserver/plugins/location.py:63 -msgid "locations" -msgstr "" - -#: ipaserver/plugins/location.py:69 -msgid "IPA Locations" -msgstr "" - -#: ipaserver/plugins/location.py:70 -msgid "IPA Location" -msgstr "" - -#: ipaserver/plugins/location.py:103 -msgid "Location name" -msgstr "" - -#: ipaserver/plugins/location.py:104 -msgid "IPA location name" -msgstr "" - -#: ipaserver/plugins/location.py:112 -msgid "IPA Location description" -msgstr "" - -#: ipaserver/plugins/location.py:116 -msgid "Servers" -msgstr "" - -#: ipaserver/plugins/location.py:117 -msgid "Servers that belongs to the IPA location" -msgstr "" - -#: ipaserver/plugins/location.py:122 -msgid "Advertised by servers" -msgstr "" - -#: ipaserver/plugins/location.py:123 -msgid "List of servers which advertise the given location" -msgstr "" - -#: ipaserver/plugins/location.py:138 -msgid "Add a new IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:140 -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:145 -msgid "Delete an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:147 -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:157 ipaserver/plugins/server.py:71 -#: ipaserver/plugins/internal.py:1963 -msgid "IPA Server" -msgstr "" - -#: ipaserver/plugins/location.py:170 -msgid "Modify information about an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:172 -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:177 -msgid "Search for IPA locations." -msgstr "" - -#: ipaserver/plugins/location.py:180 -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/location.py:187 -msgid "Display information about an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:193 -msgid "Servers in location" -msgstr "" - #: ipaserver/plugins/netgroup.py:103 msgid "netgroups" msgstr "" -#: ipaserver/plugins/netgroup.py:196 ipaserver/plugins/internal.py:1180 +#: ipaserver/plugins/netgroup.py:196 ipaserver/plugins/internal.py:1181 msgid "Netgroups" msgstr "" @@ -14479,43 +14092,6 @@ msgstr "" msgid "OTP Configuration" msgstr "" -#: ipaserver/plugins/passwd.py:40 -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#: ipaserver/plugins/passwd.py:114 -msgid "The OTP if the user has a token configured" -msgstr "" - -#: ipaserver/plugins/passwd.py:120 -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - #: ipaserver/plugins/pkinit.py:13 msgid "" "\n" @@ -14666,134 +14242,6 @@ msgid_plural "%(count)d RADIUS proxy servers matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/realmdomains.py:34 -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:85 -msgid "Realm domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:107 ipaserver/plugins/realmdomains.py:108 -#: ipaserver/plugins/internal.py:1275 -msgid "Realm Domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:134 -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#: ipaserver/plugins/realmdomains.py:177 -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:203 -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:218 -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:241 -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:252 -msgid "IPA server domain cannot be omitted" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:274 -msgid "IPA server domain cannot be deleted" -msgstr "" - -#: ipaserver/plugins/role.py:82 ipaserver/plugins/serverrole.py:186 -msgid "roles" -msgstr "" - -#: ipaserver/plugins/role.py:143 -msgid "Role" -msgstr "" - -#: ipaserver/plugins/role.py:164 -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:172 -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:180 -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:189 -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/selfservice.py:68 msgid "self service permission" msgstr "" @@ -14832,244 +14280,6 @@ msgid_plural "%(count)d selfservices matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/server.py:36 -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -#: ipaserver/plugins/server.py:38 -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#: ipaserver/plugins/server.py:42 -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/server.py:45 -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/server.py:61 -msgid "server" -msgstr "" - -#: ipaserver/plugins/server.py:62 -msgid "servers" -msgstr "" - -#: ipaserver/plugins/server.py:70 -msgid "IPA Servers" -msgstr "" - -#: ipaserver/plugins/server.py:133 -msgid "Server location" -msgstr "" - -#: ipaserver/plugins/server.py:140 -msgid "Service weight" -msgstr "" - -#: ipaserver/plugins/server.py:141 -msgid "Weight for server services" -msgstr "" - -#: ipaserver/plugins/server.py:148 -msgid "Service relative weight" -msgstr "" - -#: ipaserver/plugins/server.py:149 -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#: ipaserver/plugins/server.py:154 -msgid "Enabled server roles" -msgstr "" - -#: ipaserver/plugins/server.py:155 -msgid "List of enabled roles" -msgstr "" - -#: ipaserver/plugins/server.py:222 -msgid "Modify information about an IPA server." -msgstr "" - -#: ipaserver/plugins/server.py:224 -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:306 -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/server.py:444 -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:449 -msgid "Ignore topology errors" -msgstr "" - -#: ipaserver/plugins/server.py:450 -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -#: ipaserver/plugins/server.py:455 -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -#: ipaserver/plugins/server.py:456 -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -#: ipaserver/plugins/server.py:462 -msgid "Force server removal" -msgstr "" - -#: ipaserver/plugins/server.py:463 -msgid "Force server removal even if it does not exist" -msgstr "" - -#: ipaserver/plugins/server.py:500 -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -#: ipaserver/plugins/server.py:506 -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -#: ipaserver/plugins/server.py:520 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -#: ipaserver/plugins/server.py:530 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -#: ipaserver/plugins/server.py:545 -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#: ipaserver/plugins/server.py:595 -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:616 -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:637 -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:663 -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:701 -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:717 -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:722 -msgid "You may need to manually remove them from the tree" -msgstr "" - -#: ipaserver/plugins/server.py:737 -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -#: ipaserver/plugins/server.py:747 -msgid "Ignoring topology connectivity errors." -msgstr "" - -#: ipaserver/plugins/server.py:766 -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -#: ipaserver/plugins/server.py:793 -msgid "Server has already been deleted" -msgstr "" - -#: ipaserver/plugins/server.py:843 -msgid "Agreements deleted" -msgstr "" - -#: ipaserver/plugins/server.py:854 -msgid "Following segments were not deleted:" -msgstr "" - -#: ipaserver/plugins/server.py:927 ipaserver/plugins/trust.py:1869 -#, python-format -msgid "must be \"%s\"" -msgstr "" - -#: ipaserver/plugins/server.py:939 -msgid "not allowed to perform server connection check" -msgstr "" - -#: ipaserver/plugins/server.py:965 -msgid "Set enabled/hidden state of a server." -msgstr "" - -#: ipaserver/plugins/server.py:971 -msgid "State" -msgstr "" - -#: ipaserver/plugins/server.py:972 -msgid "Server state" -msgstr "" - -#: ipaserver/plugins/server.py:977 -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -#: ipaserver/plugins/server.py:986 -msgid "Cannot hide CA renewal master." -msgstr "" - -#: ipaserver/plugins/server.py:988 -msgid "Cannot hide DNSSec key master." -msgstr "" - -#: ipaserver/plugins/server.py:1000 -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - #: ipaserver/plugins/serverrole.py:13 msgid "" "\n" @@ -15164,405 +14374,18 @@ msgstr[1] "" msgid "Include IPA master entries" msgstr "" +#: ipaserver/plugins/serverrole.py:186 ipaserver/plugins/role.py:82 +msgid "roles" +msgstr "" + #: ipaserver/plugins/serverrole.py:192 msgid "IPA role name" msgstr "" -#: ipaserver/plugins/servicedelegation.py:26 -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:172 -msgid "Allowed to Impersonate" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:177 -msgid "Member principals" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:189 -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:199 -msgid "Add target to a named service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:213 -#: ipaserver/plugins/servicedelegation.py:303 -#: ipaserver/plugins/baseldap.py:1720 -#, python-format -msgid "member %s" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:287 -msgid "Remove member from a named service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:378 -#: ipaserver/plugins/servicedelegation.py:411 -msgid "service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:379 -msgid "service delegation rules" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:390 -msgid "Service delegation rules" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:391 -msgid "Service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:398 -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:405 -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:413 -msgid "privileged service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:423 -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/servicedelegation.py:471 -#: ipaserver/plugins/servicedelegation.py:500 -msgid "service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:472 -msgid "service delegation targets" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:479 -msgid "Service delegation targets" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:480 -msgid "Service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:487 -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:494 -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:502 -msgid "privileged service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:512 -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/session.py:12 -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -#: ipaserver/plugins/subid.py:29 -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -#: ipaserver/plugins/subid.py:59 ipaserver/plugins/subid.py:62 -msgid "Subordinate id" -msgstr "" - -#: ipaserver/plugins/subid.py:60 ipaserver/plugins/subid.py:61 -msgid "Subordinate ids" -msgstr "" - -#: ipaserver/plugins/subid.py:144 -msgid "Subordinate id description" -msgstr "" - -#: ipaserver/plugins/subid.py:150 ipaserver/plugins/subid.py:468 -msgid "Owning user of subordinate id entry" -msgstr "" - -#: ipaserver/plugins/subid.py:155 ipaserver/plugins/internal.py:1391 -msgid "SubUID range start" -msgstr "" - -#: ipaserver/plugins/subid.py:157 -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#: ipaserver/plugins/subid.py:164 ipaserver/plugins/internal.py:1390 -msgid "SubUID range size" -msgstr "" - -#: ipaserver/plugins/subid.py:166 -msgid "Subordinate user ID count" -msgstr "" - -#: ipaserver/plugins/subid.py:173 ipaserver/plugins/internal.py:1389 -msgid "SubGID range start" -msgstr "" - -#: ipaserver/plugins/subid.py:175 -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#: ipaserver/plugins/subid.py:182 ipaserver/plugins/internal.py:1388 -msgid "SubGID range size" -msgstr "" - -#: ipaserver/plugins/subid.py:184 -msgid "Subordinate group ID count" -msgstr "" - -#: ipaserver/plugins/subid.py:213 -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#: ipaserver/plugins/subid.py:246 -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -#: ipaserver/plugins/subid.py:278 -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#: ipaserver/plugins/subid.py:351 -msgid "Add a new subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:352 -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:384 -msgid "Delete a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:385 -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:393 -msgid "Modify a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:394 -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:405 -msgid "Search for subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:407 -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/subid.py:440 -msgid "Display information about a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:458 -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -#: ipaserver/plugins/subid.py:493 -msgid "Match users by any subordinate uid in their range" -msgstr "" - -#: ipaserver/plugins/subid.py:500 -msgid "SubUID match" -msgstr "" - -#: ipaserver/plugins/subid.py:501 -msgid "Match value for subordinate user ID" -msgstr "" - -#: ipaserver/plugins/subid.py:542 -msgid "Subordinate id statistics" -msgstr "" - -#: ipaserver/plugins/subid.py:586 -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - #: ipaserver/plugins/sudo.py:7 msgid "commands for controlling sudo configuration" msgstr "" -#: ipaserver/plugins/sudocmd.py:33 -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:55 -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:64 -msgid "sudo command" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:65 -msgid "sudo commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:117 -msgid "Sudo Commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:154 -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:160 -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:193 -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:201 -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/sudocmdgroup.py:34 msgid "" "\n" @@ -15619,277 +14442,6 @@ msgid_plural "%(count)d Sudo Command Groups matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/topology.py:24 -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:28 -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -#: ipaserver/plugins/topology.py:33 -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:39 -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:43 -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -#: ipaserver/plugins/topology.py:47 -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:52 -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:55 -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:58 -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:61 -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:64 -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:67 -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:70 -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:73 -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:76 -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:92 -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -#: ipaserver/plugins/topology.py:104 -msgid "segment" -msgstr "" - -#: ipaserver/plugins/topology.py:105 -msgid "segments" -msgstr "" - -#: ipaserver/plugins/topology.py:119 -msgid "Topology Segments" -msgstr "" - -#: ipaserver/plugins/topology.py:120 -msgid "Topology Segment" -msgstr "" - -#: ipaserver/plugins/topology.py:226 -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:233 -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:250 -msgid "left node and right node must not be the same" -msgstr "" - -#: ipaserver/plugins/topology.py:261 -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:269 -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:280 -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:289 -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:302 -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:314 -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:329 -#, python-format -msgid "%(value)s" -msgstr "" - -#: ipaserver/plugins/topology.py:365 -msgid "left or right node has to be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:370 -msgid "only one node can be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:374 -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:377 -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:408 -msgid "suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:412 -msgid "Topology suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:413 -msgid "Topology suffix" -msgstr "" - -#: ipaserver/plugins/topology.py:435 -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:446 -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:460 -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:474 -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:489 -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#: ipaserver/plugins/virtual.py:57 -msgid "operation not defined" -msgstr "" - -#: ipaserver/plugins/virtual.py:82 -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -#: ipaserver/plugins/virtual.py:84 -msgid "No such virtual command" -msgstr "" - #: ipaserver/plugins/whoami.py:15 msgid "" "\n" @@ -16461,7 +15013,7 @@ msgstr "" msgid "Task DN = '%s'" msgstr "" -#: ipaserver/plugins/automember.py:818 ipaserver/plugins/internal.py:1957 +#: ipaserver/plugins/automember.py:818 ipaserver/plugins/internal.py:1970 msgid "Automember" msgstr "" @@ -16518,399 +15070,247 @@ msgstr "" msgid "must contain a tuple (list, dict)" msgstr "" -#: ipaserver/plugins/hbactest.py:39 ipaserver/plugins/cert.py:65 -msgid "pyhbac is not installed." -msgstr "" - -#: ipaserver/plugins/hbactest.py:45 +#: ipaserver/plugins/ca.py:21 msgid "" "\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" +"Manage Certificate Authorities\n" msgstr "" -#: ipaserver/plugins/hbactest.py:384 -msgid "Unresolved rules in --rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:402 ipaserver/plugins/group.py:630 -#: ipaserver/plugins/group.py:687 +#: ipaserver/plugins/ca.py:23 msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" msgstr "" -#: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 +#: ipaserver/plugins/ca.py:26 msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" msgstr "" -#: ipaserver/plugins/hbactest.py:497 -#, python-format -msgid "Access granted: %s" -msgstr "" - -#: ipaserver/plugins/privilege.py:76 -#, python-format +#: ipaserver/plugins/ca.py:29 msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" msgstr "" -#: ipaserver/plugins/privilege.py:149 -msgid "Privilege" +#: ipaserver/plugins/ca.py:33 +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" msgstr "" -#: ipaserver/plugins/privilege.py:169 +#: ipaserver/plugins/ca.py:38 +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +#: ipaserver/plugins/ca.py:44 +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:48 +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:52 +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:80 +msgid "Certificate Authority" +msgstr "" + +#: ipaserver/plugins/ca.py:70 ipaserver/plugins/ca.py:79 +msgid "Certificate Authorities" +msgstr "" + +#: ipaserver/plugins/ca.py:86 ipaserver/plugins/schema.py:48 +#: ipaserver/plugins/trust.py:1422 +msgid "Name" +msgstr "" + +#: ipaserver/plugins/ca.py:87 +msgid "Name for referencing the CA" +msgstr "" + +#: ipaserver/plugins/ca.py:92 +msgid "Description of the purpose of the CA" +msgstr "" + +#: ipaserver/plugins/ca.py:96 +msgid "Authority ID" +msgstr "" + +#: ipaserver/plugins/ca.py:97 +msgid "Dogtag Authority ID" +msgstr "" + +#: ipaserver/plugins/ca.py:102 ipaserver/plugins/ca.py:296 +msgid "Subject DN" +msgstr "" + +#: ipaserver/plugins/ca.py:103 +msgid "Subject Distinguished Name" +msgstr "" + +#: ipaserver/plugins/ca.py:108 ipaserver/plugins/cert.py:426 +msgid "Issuer DN" +msgstr "" + +#: ipaserver/plugins/ca.py:109 +msgid "Issuer Distinguished Name" +msgstr "" + +#: ipaserver/plugins/ca.py:115 ipaserver/plugins/cert.py:354 +msgid "Base-64 encoded certificate." +msgstr "" + +#: ipaserver/plugins/ca.py:120 ipaserver/plugins/cert.py:359 +msgid "Certificate chain" +msgstr "" + +#: ipaserver/plugins/ca.py:121 ipaserver/plugins/cert.py:360 +msgid "X.509 certificate chain" +msgstr "" + +#: ipaserver/plugins/ca.py:127 +msgid "RSN Version" +msgstr "" + +#: ipaserver/plugins/ca.py:128 +msgid "Random Serial Number Version" +msgstr "" + +#: ipaserver/plugins/ca.py:228 +msgid "Search for CAs." +msgstr "" + +#: ipaserver/plugins/ca.py:230 #, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:176 -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:183 -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:191 -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/baseuser.py:57 -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" +#: ipaserver/plugins/ca.py:247 ipaserver/plugins/cert.py:596 +msgid "Include certificate chain in output" msgstr "" -#: ipaserver/plugins/baseuser.py:88 -msgid "must be TRUE or FALSE" +#: ipaserver/plugins/ca.py:253 +msgid "Display the properties of a CA." msgstr "" -#: ipaserver/plugins/baseuser.py:154 -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." +#: ipaserver/plugins/ca.py:270 +msgid "Create a CA." msgstr "" -#: ipaserver/plugins/baseuser.py:269 ipaserver/plugins/host.py:581 -#: ipaserver/plugins/service.py:540 -msgid "Principal alias" -msgstr "" - -#: ipaserver/plugins/baseuser.py:281 -msgid "User password expiration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:365 ipaserver/plugins/host.py:608 -msgid "SSH public key fingerprint" -msgstr "" - -#: ipaserver/plugins/baseuser.py:392 -msgid "External IdP configuration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:396 -msgid "External IdP user identifier" -msgstr "" - -#: ipaserver/plugins/baseuser.py:397 -msgid "A string that identifies the user at external IdP" -msgstr "" - -#: ipaserver/plugins/baseuser.py:421 ipaserver/plugins/baseuser.py:887 -#: ipaserver/plugins/certmap.py:606 ipaserver/plugins/idviews.py:1068 -msgid "Base-64 encoded user certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:426 ipaserver/plugins/baseuser.py:427 -#: ipaserver/plugins/internal.py:726 -msgid "Certificate mapping data" -msgstr "" - -#: ipaserver/plugins/baseuser.py:432 -msgid "SMB logon script path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:437 -msgid "SMB profile path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:442 -msgid "SMB Home Directory" -msgstr "" - -#: ipaserver/plugins/baseuser.py:447 -msgid "SMB Home Directory Drive" -msgstr "" - -#: ipaserver/plugins/baseuser.py:471 ipaserver/plugins/baseuser.py:475 +#: ipaserver/plugins/ca.py:271 #, python-format -msgid "invalid e-mail format: %(email)s" +msgid "Created CA \"%(value)s\"" msgstr "" -#: ipaserver/plugins/baseuser.py:502 +#: ipaserver/plugins/ca.py:281 #, python-format -msgid "manager %(manager)s not found" +msgid "Insufficient 'add' privilege for entry '%s'." msgstr "" -#: ipaserver/plugins/baseuser.py:598 ipaserver/plugins/user.py:563 -#: ipaserver/plugins/host.py:721 ipaserver/plugins/stageuser.py:329 -#: ipaserver/plugins/stageuser.py:546 +#: ipaserver/plugins/ca.py:297 #, python-format -msgid "can be at most %(len)d characters" +msgid "Unrecognized attributes: %(attrs)s" msgstr "" -#: ipaserver/plugins/baseuser.py:872 ipaserver/plugins/cert.py:426 -#: ipaserver/plugins/host.py:548 ipaserver/plugins/internal.py:731 -#: ipaserver/plugins/service.py:573 -msgid "Issuer" -msgstr "" - -#: ipaserver/plugins/baseuser.py:873 -msgid "Issuer of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:879 ipaserver/plugins/cert.py:366 -#: ipaserver/plugins/cert.py:1502 ipaserver/plugins/host.py:536 -#: ipaserver/plugins/internal.py:658 ipaserver/plugins/internal.py:734 -#: ipaserver/plugins/service.py:561 -msgid "Subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:880 -msgid "Subject of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:925 -msgid "cannot have an empty subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:965 -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:969 -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#: ipaserver/plugins/baseuser.py:993 ipaserver/plugins/user.py:1329 -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#: ipaserver/plugins/baseuser.py:994 +#: ipaserver/plugins/ca.py:312 #, python-format -msgid "Added certificate mappings to user \"%(value)s\"" +msgid "Subject DN is already used by CA '%s'" msgstr "" -#: ipaserver/plugins/baseuser.py:1012 ipaserver/plugins/user.py:1334 -msgid "Remove one or more certificate mappings from the user entry." +#: ipaserver/plugins/ca.py:336 +msgid "Delete a CA (must be disabled first)." msgstr "" -#: ipaserver/plugins/baseuser.py:1013 +#: ipaserver/plugins/ca.py:338 #, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:347 +msgid "Insufficient privilege to delete a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:351 ipaserver/plugins/ca.py:360 +#: ipaserver/plugins/ca.py:379 ipaserver/plugins/ca.py:419 +#: ipaserver/plugins/internal.py:642 +msgid "CA" +msgstr "" + +#: ipaserver/plugins/ca.py:353 +msgid "IPA CA cannot be deleted" +msgstr "" + +#: ipaserver/plugins/ca.py:362 +msgid "Must be disabled first" +msgstr "" + +#: ipaserver/plugins/ca.py:370 +msgid "Modify CA configuration." +msgstr "" + +#: ipaserver/plugins/ca.py:371 +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:397 +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:413 +msgid "Disable a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:414 +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:421 +msgid "IPA CA cannot be disabled" +msgstr "" + +#: ipaserver/plugins/ca.py:431 +msgid "Enable a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:432 +#, python-format +msgid "Enabled CA \"%(value)s\"" msgstr "" #: ipaserver/plugins/caacl.py:21 @@ -17438,272 +15838,153 @@ msgid_plural "%(count)s users matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/config.py:50 +#: ipaserver/plugins/certmap.py:606 ipaserver/plugins/baseuser.py:463 +#: ipaserver/plugins/baseuser.py:950 ipaserver/plugins/idviews.py:1069 +msgid "Base-64 encoded user certificate" +msgstr "" + +#: ipaserver/plugins/certprofile.py:21 msgid "" "\n" -"Server configuration\n" +"Manage Certificate Profiles\n" "\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"NOTES:\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" +"PROFILE ID SYNTAX:\n" "\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Show basic server configuration:\n" -" ipa config-show\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -" Show all configuration options:\n" -" ipa config-show --all\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" "\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" "\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" "\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" "\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" +"PROFILE CONFIGURATION FORMAT:\n" "\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" -#: ipaserver/plugins/config.py:116 -msgid "must be at least 10" +#: ipaserver/plugins/certprofile.py:86 ipaserver/plugins/cert.py:283 +msgid "CA is not configured" msgstr "" -#: ipaserver/plugins/config.py:124 -msgid "configuration options" +#: ipaserver/plugins/certprofile.py:95 +msgid "invalid Profile ID" msgstr "" -#: ipaserver/plugins/config.py:160 ipaserver/plugins/config.py:161 -msgid "Configuration" +#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 +msgid "Certificate Profile" msgstr "" -#: ipaserver/plugins/config.py:172 -msgid "Maximum hostname length" +#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 +msgid "Certificate Profiles" msgstr "" -#: ipaserver/plugins/config.py:276 ipaserver/plugins/config.py:277 -msgid "Enable adding subids to new users" +#: ipaserver/plugins/certprofile.py:126 +msgid "Profile configuration" msgstr "" -#: ipaserver/plugins/config.py:281 -msgid "IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:282 -msgid "List of all IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:287 -msgid "Hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:288 -msgid "List of all hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:293 -msgid "IPA master capable of PKINIT" -msgstr "" - -#: ipaserver/plugins/config.py:294 -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#: ipaserver/plugins/config.py:299 -msgid "IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:300 -msgid "IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:305 -msgid "Hidden IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:306 -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:311 -msgid "IPA CA renewal master" -msgstr "" - -#: ipaserver/plugins/config.py:312 -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:317 ipaserver/plugins/vault.py:990 -msgid "IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/config.py:318 -msgid "IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:323 -msgid "Hidden IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/config.py:324 -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:330 ipaserver/plugins/idviews.py:159 -msgid "Domain resolution order" -msgstr "" - -#: ipaserver/plugins/config.py:331 ipaserver/plugins/idviews.py:160 -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#: ipaserver/plugins/config.py:336 ipaserver/plugins/dns.py:4128 -msgid "IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:337 -msgid "IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:342 -msgid "Hidden IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:343 -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:348 ipaserver/plugins/dns.py:4134 -msgid "IPA DNSSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:349 -msgid "DNSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:354 -msgid "Setup SID configuration" -msgstr "" - -#: ipaserver/plugins/config.py:355 -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#: ipaserver/plugins/config.py:360 -msgid "Add SIDs" -msgstr "" - -#: ipaserver/plugins/config.py:361 -msgid "Add SIDs for existing users and groups" -msgstr "" - -#: ipaserver/plugins/config.py:366 ipaserver/plugins/config.py:367 -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#: ipaserver/plugins/config.py:444 -msgid "Empty domain is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:452 +#: ipaserver/plugins/certprofile.py:190 #, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" -#: ipaserver/plugins/config.py:457 +#: ipaserver/plugins/certprofile.py:222 #, python-format -msgid "Server has no information about domain '%(domain)s'" +msgid "Imported profile \"%(value)s\"" msgstr "" -#: ipaserver/plugins/config.py:464 +#: ipaserver/plugins/certprofile.py:247 #, python-format -msgid "Disabled domain '%(domain)s' is not allowed" +msgid "Profile data specifies profileId multiple times: %(values)s" msgstr "" -#: ipaserver/plugins/config.py:514 -msgid "not allowed to enable SID generation" +#: ipaserver/plugins/certprofile.py:255 +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" msgstr "" -#: ipaserver/plugins/config.py:522 +#: ipaserver/plugins/certprofile.py:282 +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:289 +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#: ipaserver/plugins/certprofile.py:305 +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:322 +msgid "Certificate profiles cannot be renamed" +msgstr "" + +#: ipaserver/plugins/certprofile.py:327 +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +#: ipaserver/plugins/domainlevel.py:69 +#, python-brace-format msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." msgstr "" -#: ipaserver/plugins/config.py:550 -msgid "Failed to call DBus" +#: ipaserver/plugins/domainlevel.py:112 +msgid "Server does not support domain level functionality" msgstr "" -#: ipaserver/plugins/config.py:560 -msgid "Configuration of SID failed. See details in the error log" +#: ipaserver/plugins/domainlevel.py:147 +msgid "Domain Level cannot be lowered." msgstr "" -#: ipaserver/plugins/config.py:570 -msgid "The group doesn't exist" -msgstr "" - -#: ipaserver/plugins/config.py:588 -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:608 -msgid "May not be empty" -msgstr "" - -#: ipaserver/plugins/config.py:627 -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -#: ipaserver/plugins/config.py:659 -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#: ipaserver/plugins/config.py:663 -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -#: ipaserver/plugins/config.py:675 -msgid "SELinux user map default user not in order list" -msgstr "" - -#: ipaserver/plugins/config.py:694 -#, python-format -msgid "You cannot specify %s without the --enable-sid option" +#: ipaserver/plugins/domainlevel.py:155 +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" #: ipaserver/plugins/hbacrule.py:108 @@ -17758,102 +16039,467 @@ msgstr "" msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" -#: ipaserver/plugins/krbtpolicy.py:86 -msgid "kerberos ticket policy settings" +#: ipaserver/plugins/hbactest.py:39 ipaserver/plugins/cert.py:64 +msgid "pyhbac is not installed." msgstr "" -#: ipaserver/plugins/krbtpolicy.py:128 ipaserver/plugins/krbtpolicy.py:129 -#: ipaserver/plugins/internal.py:1151 -msgid "Kerberos Ticket Policy" +#: ipaserver/plugins/hbactest.py:45 +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -#: ipaserver/plugins/krbtpolicy.py:152 -msgid "OTP max life" +#: ipaserver/plugins/hbactest.py:384 +msgid "Unresolved rules in --rules" msgstr "" -#: ipaserver/plugins/krbtpolicy.py:153 -msgid "OTP token maximum ticket life (seconds)" +#: ipaserver/plugins/hbactest.py:402 ipaserver/plugins/group.py:649 +#: ipaserver/plugins/group.py:706 +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" msgstr "" -#: ipaserver/plugins/krbtpolicy.py:157 -msgid "OTP max renew" +#: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" msgstr "" -#: ipaserver/plugins/krbtpolicy.py:158 -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:162 -msgid "RADIUS max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:163 -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:167 -msgid "RADIUS max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:168 -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:172 -msgid "PKINIT max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:173 -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:177 -msgid "PKINIT max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:178 -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:182 -msgid "Hardened max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:183 -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:187 -msgid "Hardened max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:188 -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:192 -msgid "IdP max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:193 -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:198 -msgid "IdP max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:199 -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:284 +#: ipaserver/plugins/hbactest.py:497 #, python-format -msgid "Ticket policy for %s could not be read" +msgid "Access granted: %s" msgstr "" -#: ipaserver/plugins/krbtpolicy.py:304 -msgid "Default ticket policy could not be read" +#: ipaserver/plugins/hostgroup.py:35 +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:107 +msgid "host groups" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:179 +msgid "Host Group" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:223 +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:239 +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:262 +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:266 ipaserver/plugins/hostgroup.py:284 +#: ipaserver/plugins/hostgroup.py:349 +msgid "hostgroup" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:268 ipaserver/plugins/hostgroup.py:286 +msgid "privileged hostgroup" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:278 +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:303 +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/hostgroup.py:362 +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +#: ipaserver/plugins/hostgroup.py:372 +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +#: ipaserver/plugins/join.py:125 +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +#: ipaserver/plugins/ldap2.py:278 +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#: ipaserver/plugins/location.py:33 +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +#: ipaserver/plugins/location.py:35 +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +#: ipaserver/plugins/location.py:39 +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +#: ipaserver/plugins/location.py:42 +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +#: ipaserver/plugins/location.py:45 +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +#: ipaserver/plugins/location.py:48 +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#: ipaserver/plugins/location.py:62 +msgid "location" +msgstr "" + +#: ipaserver/plugins/location.py:63 +msgid "locations" +msgstr "" + +#: ipaserver/plugins/location.py:69 +msgid "IPA Locations" +msgstr "" + +#: ipaserver/plugins/location.py:70 +msgid "IPA Location" +msgstr "" + +#: ipaserver/plugins/location.py:103 +msgid "Location name" +msgstr "" + +#: ipaserver/plugins/location.py:104 +msgid "IPA location name" +msgstr "" + +#: ipaserver/plugins/location.py:112 +msgid "IPA Location description" +msgstr "" + +#: ipaserver/plugins/location.py:116 +msgid "Servers" +msgstr "" + +#: ipaserver/plugins/location.py:117 +msgid "Servers that belongs to the IPA location" +msgstr "" + +#: ipaserver/plugins/location.py:122 +msgid "Advertised by servers" +msgstr "" + +#: ipaserver/plugins/location.py:123 +msgid "List of servers which advertise the given location" +msgstr "" + +#: ipaserver/plugins/location.py:138 +msgid "Add a new IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:140 +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/location.py:145 +msgid "Delete an IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:147 +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/location.py:157 ipaserver/plugins/internal.py:1976 +#: ipaserver/plugins/server.py:71 +msgid "IPA Server" +msgstr "" + +#: ipaserver/plugins/location.py:170 +msgid "Modify information about an IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:172 +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/location.py:177 +msgid "Search for IPA locations." +msgstr "" + +#: ipaserver/plugins/location.py:180 +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/location.py:187 +msgid "Display information about an IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:193 +msgid "Servers in location" msgstr "" #: ipaserver/plugins/migration.py:46 @@ -18015,10 +16661,298 @@ msgid "" "%(search_base)s, objectclass: %(objectclass)s)" msgstr "" -#: ipaserver/plugins/migration.py:804 ipaserver/plugins/user.py:593 +#: ipaserver/plugins/migration.py:804 ipaserver/plugins/user.py:619 msgid "Default group for new users not found" msgstr "" +#: ipaserver/plugins/otptoken.py:42 +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:44 +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:46 +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:51 +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:54 +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:57 +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:60 +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:137 +msgid "OTP token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:138 +msgid "OTP tokens" +msgstr "" + +#: ipaserver/plugins/otptoken.py:154 +msgid "OTP Tokens" +msgstr "" + +#: ipaserver/plugins/otptoken.py:155 +msgid "OTP Token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:272 +msgid "URI" +msgstr "" + +#: ipaserver/plugins/otptoken.py:281 +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:335 +msgid "cannot be empty" +msgstr "" + +#: ipaserver/plugins/otptoken.py:367 +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:373 +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:422 +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/passwd.py:40 +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#: ipaserver/plugins/passwd.py:114 +msgid "The OTP if the user has a token configured" +msgstr "" + +#: ipaserver/plugins/passwd.py:120 +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:76 +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:149 +msgid "Privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:169 +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:176 +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:183 +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:191 +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/realmdomains.py:34 +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:85 +msgid "Realm domains" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:107 ipaserver/plugins/realmdomains.py:108 +#: ipaserver/plugins/internal.py:1288 +msgid "Realm Domains" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:134 +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#: ipaserver/plugins/realmdomains.py:177 +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:203 +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:218 +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +#: ipaserver/plugins/realmdomains.py:241 +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +#: ipaserver/plugins/realmdomains.py:252 +msgid "IPA server domain cannot be omitted" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:274 +msgid "IPA server domain cannot be deleted" +msgstr "" + +#: ipaserver/plugins/role.py:143 +msgid "Role" +msgstr "" + +#: ipaserver/plugins/role.py:164 +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:172 +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:180 +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:189 +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + #: ipaserver/plugins/selinuxusermap.py:89 msgid "HBAC rule and local members cannot both be set" msgstr "" @@ -18099,184 +17033,6 @@ msgstr "" msgid "Disabled SELinux User Map \"%(value)s\"" msgstr "" -#: ipaserver/plugins/ldap2.py:278 -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#: ipaserver/plugins/user.py:165 ipaserver/plugins/sudorule.py:442 -msgid "users" -msgstr "" - -#: ipaserver/plugins/user.py:497 -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:596 -msgid "Default group for new users is not POSIX" -msgstr "" - -#: ipaserver/plugins/user.py:704 -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:705 -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:723 -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#: ipaserver/plugins/user.py:847 -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:883 ipaserver/plugins/stageuser.py:484 -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/user.py:961 -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:975 -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#: ipaserver/plugins/user.py:1006 -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1101 -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1123 -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1140 -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#: ipaserver/plugins/user.py:1149 -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1181 -msgid "Failed logins" -msgstr "" - -#: ipaserver/plugins/user.py:1185 -msgid "Last successful authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1189 -msgid "Last failed authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1193 -msgid "Time now" -msgstr "" - -#: ipaserver/plugins/user.py:1197 -msgid "Password grace count" -msgstr "" - -#: ipaserver/plugins/user.py:1204 -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#: ipaserver/plugins/user.py:1260 -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#: ipaserver/plugins/user.py:1300 -#, python-format -msgid "%(host)s failed" -msgstr "" - -#: ipaserver/plugins/user.py:1310 -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#: ipaserver/plugins/user.py:1318 -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1324 -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1349 -msgid "Add new principal alias to the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1350 -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1355 -msgid "Remove principal alias from the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1356 -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #: ipaserver/plugins/serverroles.py:84 #, python-brace-format msgid "{role}: role not found" @@ -18287,6 +17043,1867 @@ msgstr "" msgid "{attr}: no such attribute" msgstr "" +#: ipaserver/plugins/servicedelegation.py:26 +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:172 +msgid "Allowed to Impersonate" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:177 +msgid "Member principals" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:189 +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:199 +msgid "Add target to a named service delegation." +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:213 +#: ipaserver/plugins/servicedelegation.py:303 +#: ipaserver/plugins/baseldap.py:1720 +#, python-format +msgid "member %s" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:287 +msgid "Remove member from a named service delegation." +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:378 +#: ipaserver/plugins/servicedelegation.py:411 +msgid "service delegation rule" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:379 +msgid "service delegation rules" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:390 +msgid "Service delegation rules" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:391 +msgid "Service delegation rule" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:398 +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:405 +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:413 +msgid "privileged service delegation rule" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:423 +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/servicedelegation.py:471 +#: ipaserver/plugins/servicedelegation.py:500 +msgid "service delegation target" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:472 +msgid "service delegation targets" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:479 +msgid "Service delegation targets" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:480 +msgid "Service delegation target" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:487 +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:494 +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:502 +msgid "privileged service delegation target" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:512 +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/session.py:12 +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +#: ipaserver/plugins/subid.py:29 +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +#: ipaserver/plugins/subid.py:59 ipaserver/plugins/subid.py:62 +msgid "Subordinate id" +msgstr "" + +#: ipaserver/plugins/subid.py:60 ipaserver/plugins/subid.py:61 +msgid "Subordinate ids" +msgstr "" + +#: ipaserver/plugins/subid.py:144 +msgid "Subordinate id description" +msgstr "" + +#: ipaserver/plugins/subid.py:150 ipaserver/plugins/subid.py:468 +msgid "Owning user of subordinate id entry" +msgstr "" + +#: ipaserver/plugins/subid.py:155 ipaserver/plugins/internal.py:1404 +msgid "SubUID range start" +msgstr "" + +#: ipaserver/plugins/subid.py:157 +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +#: ipaserver/plugins/subid.py:164 ipaserver/plugins/internal.py:1403 +msgid "SubUID range size" +msgstr "" + +#: ipaserver/plugins/subid.py:166 +msgid "Subordinate user ID count" +msgstr "" + +#: ipaserver/plugins/subid.py:173 ipaserver/plugins/internal.py:1402 +msgid "SubGID range start" +msgstr "" + +#: ipaserver/plugins/subid.py:175 +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +#: ipaserver/plugins/subid.py:182 ipaserver/plugins/internal.py:1401 +msgid "SubGID range size" +msgstr "" + +#: ipaserver/plugins/subid.py:184 +msgid "Subordinate group ID count" +msgstr "" + +#: ipaserver/plugins/subid.py:213 +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#: ipaserver/plugins/subid.py:246 +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +#: ipaserver/plugins/subid.py:278 +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#: ipaserver/plugins/subid.py:351 +msgid "Add a new subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:352 +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/subid.py:384 +msgid "Delete a subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:385 +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/subid.py:393 +msgid "Modify a subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:394 +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/subid.py:405 +msgid "Search for subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:407 +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/subid.py:440 +msgid "Display information about a subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:458 +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +#: ipaserver/plugins/subid.py:493 +msgid "Match users by any subordinate uid in their range" +msgstr "" + +#: ipaserver/plugins/subid.py:500 +msgid "SubUID match" +msgstr "" + +#: ipaserver/plugins/subid.py:501 +msgid "Match value for subordinate user ID" +msgstr "" + +#: ipaserver/plugins/subid.py:542 +msgid "Subordinate id statistics" +msgstr "" + +#: ipaserver/plugins/subid.py:586 +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:33 +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:55 +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:64 +msgid "sudo command" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:65 +msgid "sudo commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:117 +msgid "Sudo Commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:154 +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:160 +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:193 +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:201 +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:24 +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:28 +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +#: ipaserver/plugins/topology.py:33 +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:39 +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:43 +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +#: ipaserver/plugins/topology.py:47 +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +#: ipaserver/plugins/topology.py:52 +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +#: ipaserver/plugins/topology.py:55 +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +#: ipaserver/plugins/topology.py:58 +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +#: ipaserver/plugins/topology.py:61 +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +#: ipaserver/plugins/topology.py:64 +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +#: ipaserver/plugins/topology.py:67 +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +#: ipaserver/plugins/topology.py:70 +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +#: ipaserver/plugins/topology.py:73 +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +#: ipaserver/plugins/topology.py:76 +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#: ipaserver/plugins/topology.py:92 +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +#: ipaserver/plugins/topology.py:104 +msgid "segment" +msgstr "" + +#: ipaserver/plugins/topology.py:105 +msgid "segments" +msgstr "" + +#: ipaserver/plugins/topology.py:119 +msgid "Topology Segments" +msgstr "" + +#: ipaserver/plugins/topology.py:120 +msgid "Topology Segment" +msgstr "" + +#: ipaserver/plugins/topology.py:226 +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#: ipaserver/plugins/topology.py:233 +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +#: ipaserver/plugins/topology.py:250 +msgid "left node and right node must not be the same" +msgstr "" + +#: ipaserver/plugins/topology.py:261 +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#: ipaserver/plugins/topology.py:269 +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#: ipaserver/plugins/topology.py:280 +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:289 +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:302 +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:314 +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:329 +#, python-format +msgid "%(value)s" +msgstr "" + +#: ipaserver/plugins/topology.py:365 +msgid "left or right node has to be specified" +msgstr "" + +#: ipaserver/plugins/topology.py:370 +msgid "only one node can be specified" +msgstr "" + +#: ipaserver/plugins/topology.py:374 +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#: ipaserver/plugins/topology.py:377 +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#: ipaserver/plugins/topology.py:408 +msgid "suffixes" +msgstr "" + +#: ipaserver/plugins/topology.py:412 +msgid "Topology suffixes" +msgstr "" + +#: ipaserver/plugins/topology.py:413 +msgid "Topology suffix" +msgstr "" + +#: ipaserver/plugins/topology.py:435 +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:446 +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:460 +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:474 +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:489 +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#: ipaserver/plugins/virtual.py:57 +msgid "operation not defined" +msgstr "" + +#: ipaserver/plugins/virtual.py:82 +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +#: ipaserver/plugins/virtual.py:84 +msgid "No such virtual command" +msgstr "" + +#: ipaserver/plugins/automount.py:218 +msgid "automount location" +msgstr "" + +#: ipaserver/plugins/automount.py:219 +msgid "automount locations" +msgstr "" + +#: ipaserver/plugins/automount.py:222 +msgid "Automount Locations" +msgstr "" + +#: ipaserver/plugins/automount.py:223 +msgid "Automount Location" +msgstr "" + +#: ipaserver/plugins/automount.py:263 +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:283 +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:296 +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:349 +msgid "automount map" +msgstr "" + +#: ipaserver/plugins/automount.py:350 +msgid "automount maps" +msgstr "" + +#: ipaserver/plugins/automount.py:393 +msgid "Automount Maps" +msgstr "" + +#: ipaserver/plugins/automount.py:394 +msgid "Automount Map" +msgstr "" + +#: ipaserver/plugins/automount.py:401 +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:408 +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:428 +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:436 +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:448 +msgid "Automount key object." +msgstr "" + +#: ipaserver/plugins/automount.py:452 +msgid "automount key" +msgstr "" + +#: ipaserver/plugins/automount.py:453 +msgid "automount keys" +msgstr "" + +#: ipaserver/plugins/automount.py:512 +msgid "Automount Keys" +msgstr "" + +#: ipaserver/plugins/automount.py:513 +msgid "Automount Key" +msgstr "" + +#: ipaserver/plugins/automount.py:514 +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#: ipaserver/plugins/automount.py:515 +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#: ipaserver/plugins/automount.py:516 +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#: ipaserver/plugins/automount.py:566 +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#: ipaserver/plugins/automount.py:625 +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:654 +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:678 +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#: ipaserver/plugins/automount.py:707 +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:748 +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:807 +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/baseldap.py:101 +msgid "Member service groups" +msgstr "" + +#: ipaserver/plugins/baseldap.py:110 +msgid "Member HBAC service groups" +msgstr "" + +#: ipaserver/plugins/baseldap.py:127 +msgid "Member ID user overrides" +msgstr "" + +#: ipaserver/plugins/baseldap.py:129 +msgid "Indirect Member ID user overrides" +msgstr "" + +#: ipaserver/plugins/baseldap.py:146 +msgid "Indirect Member permissions" +msgstr "" + +#: ipaserver/plugins/baseldap.py:149 +msgid "Indirect Member HBAC service" +msgstr "" + +#: ipaserver/plugins/baseldap.py:152 +msgid "Indirect Member HBAC service group" +msgstr "" + +#: ipaserver/plugins/baseldap.py:213 +msgid "Invalid format. Should be name=value" +msgstr "" + +#: ipaserver/plugins/baseldap.py:584 +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +#: ipaserver/plugins/baseldap.py:615 +msgid "entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:616 +msgid "entries" +msgstr "" + +#: ipaserver/plugins/baseldap.py:654 ipaserver/plugins/baseldap.py:655 +msgid "Entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:658 +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:659 +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:660 ipaserver/plugins/schema.py:257 +#: ipaserver/plugins/schema.py:333 ipaserver/plugins/schema.py:424 +#: ipaserver/plugins/schema.py:663 ipaserver/plugins/schema.py:756 +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:661 +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#: ipaserver/plugins/baseldap.py:954 ipaserver/plugins/baseldap.py:962 +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#: ipaserver/plugins/baseldap.py:967 +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1025 +msgid "attribute is not configurable" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1128 +msgid "No such attribute on this entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1488 +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1586 ipaserver/plugins/baseldap.py:2494 +msgid "the entry was deleted while being modified" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1719 ipaserver/plugins/baseldap.py:2221 +#, python-format +msgid "%s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1762 ipaserver/plugins/baseldap.py:2245 +#, python-format +msgid "%s to add" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1861 ipaserver/plugins/baseldap.py:2344 +#, python-format +msgid "%s to remove" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1961 ipaserver/plugins/schema.py:122 +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1969 +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#: ipaserver/plugins/baseldap.py:1970 +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#: ipaserver/plugins/baseldap.py:2525 +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:2539 +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:2548 +msgid "one or more values to remove" +msgstr "" + +#: ipaserver/plugins/baseuser.py:61 +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#: ipaserver/plugins/baseuser.py:92 +msgid "must be TRUE or FALSE" +msgstr "" + +#: ipaserver/plugins/baseuser.py:158 +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#: ipaserver/plugins/baseuser.py:311 ipaserver/plugins/host.py:581 +#: ipaserver/plugins/service.py:540 +msgid "Principal alias" +msgstr "" + +#: ipaserver/plugins/baseuser.py:323 +msgid "User password expiration" +msgstr "" + +#: ipaserver/plugins/baseuser.py:407 ipaserver/plugins/host.py:608 +msgid "SSH public key fingerprint" +msgstr "" + +#: ipaserver/plugins/baseuser.py:434 +msgid "External IdP configuration" +msgstr "" + +#: ipaserver/plugins/baseuser.py:438 +msgid "External IdP user identifier" +msgstr "" + +#: ipaserver/plugins/baseuser.py:439 +msgid "A string that identifies the user at external IdP" +msgstr "" + +#: ipaserver/plugins/baseuser.py:468 ipaserver/plugins/baseuser.py:469 +#: ipaserver/plugins/internal.py:727 +msgid "Certificate mapping data" +msgstr "" + +#: ipaserver/plugins/baseuser.py:474 +msgid "SMB logon script path" +msgstr "" + +#: ipaserver/plugins/baseuser.py:479 +msgid "SMB profile path" +msgstr "" + +#: ipaserver/plugins/baseuser.py:484 +msgid "SMB Home Directory" +msgstr "" + +#: ipaserver/plugins/baseuser.py:489 +msgid "SMB Home Directory Drive" +msgstr "" + +#: ipaserver/plugins/baseuser.py:498 ipaserver/plugins/baseuser.py:499 +msgid "Passkey mapping" +msgstr "" + +#: ipaserver/plugins/baseuser.py:519 ipaserver/plugins/baseuser.py:523 +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#: ipaserver/plugins/baseuser.py:550 +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#: ipaserver/plugins/baseuser.py:648 ipaserver/plugins/host.py:723 +#: ipaserver/plugins/stageuser.py:337 ipaserver/plugins/stageuser.py:558 +#: ipaserver/plugins/user.py:589 +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#: ipaserver/plugins/baseuser.py:935 ipaserver/plugins/cert.py:425 +#: ipaserver/plugins/host.py:548 ipaserver/plugins/internal.py:732 +#: ipaserver/plugins/service.py:573 +msgid "Issuer" +msgstr "" + +#: ipaserver/plugins/baseuser.py:936 +msgid "Issuer of the certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:942 ipaserver/plugins/cert.py:365 +#: ipaserver/plugins/cert.py:1501 ipaserver/plugins/host.py:536 +#: ipaserver/plugins/internal.py:659 ipaserver/plugins/internal.py:735 +#: ipaserver/plugins/service.py:561 +msgid "Subject" +msgstr "" + +#: ipaserver/plugins/baseuser.py:943 +msgid "Subject of the certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:988 +msgid "cannot have an empty subject" +msgstr "" + +#: ipaserver/plugins/baseuser.py:1028 +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:1032 +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#: ipaserver/plugins/baseuser.py:1056 ipaserver/plugins/user.py:1373 +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#: ipaserver/plugins/baseuser.py:1057 +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/baseuser.py:1075 ipaserver/plugins/user.py:1378 +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#: ipaserver/plugins/baseuser.py:1076 +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/baseuser.py:1085 +#, python-format +msgid "Added passkey mappings to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/baseuser.py:1102 ipaserver/plugins/user.py:1410 +msgid "Remove one or more passkey mappings from the user entry." +msgstr "" + +#: ipaserver/plugins/baseuser.py:1103 +#, python-format +msgid "Removed passkey mappings from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/cert.py:69 +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +#: ipaserver/plugins/cert.py:71 +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:73 +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:76 +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:79 +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:82 +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:84 +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +#: ipaserver/plugins/cert.py:87 +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:89 +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:92 +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:95 +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:97 +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:101 +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#: ipaserver/plugins/cert.py:104 +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:107 +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:110 +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:113 +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +#: ipaserver/plugins/cert.py:116 +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#: ipaserver/plugins/cert.py:119 +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +#: ipaserver/plugins/cert.py:122 +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +#: ipaserver/plugins/cert.py:125 +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +#: ipaserver/plugins/cert.py:128 +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +#: ipaserver/plugins/cert.py:131 +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +#: ipaserver/plugins/cert.py:134 +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:138 +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#: ipaserver/plugins/cert.py:141 +msgid " * 0 - unspecified\n" +msgstr "" + +#: ipaserver/plugins/cert.py:142 +msgid " * 1 - keyCompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:143 +msgid " * 2 - cACompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:144 +msgid " * 3 - affiliationChanged\n" +msgstr "" + +#: ipaserver/plugins/cert.py:145 +msgid " * 4 - superseded\n" +msgstr "" + +#: ipaserver/plugins/cert.py:146 +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#: ipaserver/plugins/cert.py:147 +msgid " * 6 - certificateHold\n" +msgstr "" + +#: ipaserver/plugins/cert.py:148 +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#: ipaserver/plugins/cert.py:149 +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +#: ipaserver/plugins/cert.py:150 +msgid " * 10 - aACompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:151 +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:153 +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#: ipaserver/plugins/cert.py:289 +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +#: ipaserver/plugins/cert.py:309 +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#: ipaserver/plugins/cert.py:313 +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +#: ipaserver/plugins/cert.py:347 +msgid "Issuing CA" +msgstr "" + +#: ipaserver/plugins/cert.py:348 +msgid "Name of issuing CA" +msgstr "" + +#: ipaserver/plugins/cert.py:370 +msgid "Subject email address" +msgstr "" + +#: ipaserver/plugins/cert.py:375 +msgid "Subject DNS name" +msgstr "" + +#: ipaserver/plugins/cert.py:380 +msgid "Subject X.400 address" +msgstr "" + +#: ipaserver/plugins/cert.py:385 +msgid "Subject directory name" +msgstr "" + +#: ipaserver/plugins/cert.py:390 +msgid "Subject EDI Party name" +msgstr "" + +#: ipaserver/plugins/cert.py:395 +msgid "Subject URI" +msgstr "" + +#: ipaserver/plugins/cert.py:400 +msgid "Subject IP Address" +msgstr "" + +#: ipaserver/plugins/cert.py:405 +msgid "Subject OID" +msgstr "" + +#: ipaserver/plugins/cert.py:410 +msgid "Subject UPN" +msgstr "" + +#: ipaserver/plugins/cert.py:415 +msgid "Subject Kerberos principal name" +msgstr "" + +#: ipaserver/plugins/cert.py:420 +msgid "Subject Other Name" +msgstr "" + +#: ipaserver/plugins/cert.py:431 ipaserver/plugins/host.py:552 +#: ipaserver/plugins/service.py:577 +msgid "Not Before" +msgstr "" + +#: ipaserver/plugins/cert.py:436 ipaserver/plugins/host.py:556 +#: ipaserver/plugins/service.py:581 +msgid "Not After" +msgstr "" + +#: ipaserver/plugins/cert.py:441 ipaserver/plugins/host.py:560 +#: ipaserver/plugins/service.py:585 +msgid "Fingerprint (SHA1)" +msgstr "" + +#: ipaserver/plugins/cert.py:446 ipaserver/plugins/host.py:564 +#: ipaserver/plugins/service.py:589 +msgid "Fingerprint (SHA256)" +msgstr "" + +#: ipaserver/plugins/cert.py:458 +msgid "Serial number (hex)" +msgstr "" + +#: ipaserver/plugins/cert.py:581 +msgid "Request status" +msgstr "" + +#: ipaserver/plugins/cert.py:627 +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#: ipaserver/plugins/cert.py:676 +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +#: ipaserver/plugins/cert.py:728 +msgid "No Common Name was found in subject of request." +msgstr "" + +#: ipaserver/plugins/cert.py:736 +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#: ipaserver/plugins/cert.py:742 +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +#: ipaserver/plugins/cert.py:751 +msgid "DN commonName does not match user's login" +msgstr "" + +#: ipaserver/plugins/cert.py:765 +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#: ipaserver/plugins/cert.py:774 +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#: ipaserver/plugins/cert.py:795 ipaserver/plugins/cert.py:913 +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#: ipaserver/plugins/cert.py:840 +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#: ipaserver/plugins/cert.py:871 +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#: ipaserver/plugins/cert.py:889 +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +#: ipaserver/plugins/cert.py:898 +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#: ipaserver/plugins/cert.py:905 +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#: ipaserver/plugins/cert.py:922 +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#: ipaserver/plugins/cert.py:940 +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#: ipaserver/plugins/cert.py:1027 +msgid "'add' option" +msgstr "" + +#: ipaserver/plugins/cert.py:1031 +msgid "The principal for this request doesn't exist." +msgstr "" + +#: ipaserver/plugins/cert.py:1147 +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#: ipaserver/plugins/cert.py:1164 +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#: ipaserver/plugins/cert.py:1176 +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +#: ipaserver/plugins/cert.py:1270 ipaserver/plugins/internal.py:706 +#: ipaserver/plugins/internal.py:1036 ipaserver/plugins/internal.py:1361 +#: ipaserver/plugins/internal.py:1964 +msgid "Status" +msgstr "" + +#: ipaserver/plugins/cert.py:1275 +msgid "Revoked" +msgstr "" + +#: ipaserver/plugins/cert.py:1280 ipaserver/plugins/host.py:568 +#: ipaserver/plugins/internal.py:656 ipaserver/plugins/internal.py:697 +#: ipaserver/plugins/service.py:593 +msgid "Revocation reason" +msgstr "" + +#: ipaserver/plugins/cert.py:1281 +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#: ipaserver/plugins/cert.py:1303 +#, python-format +msgid "Owner %s" +msgstr "" + +#: ipaserver/plugins/cert.py:1390 +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#: ipaserver/plugins/cert.py:1459 +msgid "7 is not a valid revocation reason" +msgstr "" + +#: ipaserver/plugins/cert.py:1559 +msgid "Status of the certificate" +msgstr "" + +#: ipaserver/plugins/cert.py:1565 +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#: ipaserver/plugins/cert.py:1581 +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/cert.py:1603 +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#: ipaserver/plugins/cert.py:1614 +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +#: ipaserver/plugins/config.py:50 +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#: ipaserver/plugins/config.py:116 +msgid "must be at least 10" +msgstr "" + +#: ipaserver/plugins/config.py:124 +msgid "configuration options" +msgstr "" + +#: ipaserver/plugins/config.py:160 ipaserver/plugins/config.py:161 +msgid "Configuration" +msgstr "" + +#: ipaserver/plugins/config.py:172 +msgid "Maximum hostname length" +msgstr "" + +#: ipaserver/plugins/config.py:276 ipaserver/plugins/config.py:277 +msgid "Enable adding subids to new users" +msgstr "" + +#: ipaserver/plugins/config.py:281 +msgid "IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:282 +msgid "List of all IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:287 +msgid "Hidden IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:288 +msgid "List of all hidden IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:293 +msgid "IPA master capable of PKINIT" +msgstr "" + +#: ipaserver/plugins/config.py:294 +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#: ipaserver/plugins/config.py:299 +msgid "IPA CA servers" +msgstr "" + +#: ipaserver/plugins/config.py:300 +msgid "IPA servers configured as certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:305 +msgid "Hidden IPA CA servers" +msgstr "" + +#: ipaserver/plugins/config.py:306 +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:311 +msgid "IPA CA renewal master" +msgstr "" + +#: ipaserver/plugins/config.py:312 +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:317 ipaserver/plugins/vault.py:990 +msgid "IPA KRA servers" +msgstr "" + +#: ipaserver/plugins/config.py:318 +msgid "IPA servers configured as key recovery agent" +msgstr "" + +#: ipaserver/plugins/config.py:323 +msgid "Hidden IPA KRA servers" +msgstr "" + +#: ipaserver/plugins/config.py:324 +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +#: ipaserver/plugins/config.py:330 ipaserver/plugins/idviews.py:160 +msgid "Domain resolution order" +msgstr "" + +#: ipaserver/plugins/config.py:331 ipaserver/plugins/idviews.py:161 +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#: ipaserver/plugins/config.py:336 ipaserver/plugins/dns.py:4128 +msgid "IPA DNS servers" +msgstr "" + +#: ipaserver/plugins/config.py:337 +msgid "IPA servers configured as domain name server" +msgstr "" + +#: ipaserver/plugins/config.py:342 +msgid "Hidden IPA DNS servers" +msgstr "" + +#: ipaserver/plugins/config.py:343 +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +#: ipaserver/plugins/config.py:348 ipaserver/plugins/dns.py:4134 +msgid "IPA DNSSec key master" +msgstr "" + +#: ipaserver/plugins/config.py:349 +msgid "DNSec key master" +msgstr "" + +#: ipaserver/plugins/config.py:354 +msgid "Setup SID configuration" +msgstr "" + +#: ipaserver/plugins/config.py:355 +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#: ipaserver/plugins/config.py:360 +msgid "Add SIDs" +msgstr "" + +#: ipaserver/plugins/config.py:361 +msgid "Add SIDs for existing users and groups" +msgstr "" + +#: ipaserver/plugins/config.py:366 ipaserver/plugins/config.py:367 +msgid "NetBIOS name of the IPA domain" +msgstr "" + +#: ipaserver/plugins/config.py:444 +msgid "Empty domain is not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:452 +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#: ipaserver/plugins/config.py:457 +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#: ipaserver/plugins/config.py:464 +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:514 +msgid "not allowed to enable SID generation" +msgstr "" + +#: ipaserver/plugins/config.py:522 +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#: ipaserver/plugins/config.py:550 +msgid "Failed to call DBus" +msgstr "" + +#: ipaserver/plugins/config.py:560 +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#: ipaserver/plugins/config.py:570 +msgid "The group doesn't exist" +msgstr "" + +#: ipaserver/plugins/config.py:588 +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:608 +msgid "May not be empty" +msgstr "" + +#: ipaserver/plugins/config.py:627 +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +#: ipaserver/plugins/config.py:659 +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#: ipaserver/plugins/config.py:663 +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +#: ipaserver/plugins/config.py:675 +msgid "SELinux user map default user not in order list" +msgstr "" + +#: ipaserver/plugins/config.py:694 +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + #: ipaserver/plugins/dns.py:100 msgid "" "\n" @@ -19197,6 +19814,5499 @@ msgstr "" msgid "Do not update records only return expected records" msgstr "" +#: ipaserver/plugins/dogtag.py:1251 +msgid "REST API is not logged in." +msgstr "" + +#: ipaserver/plugins/dogtag.py:1273 +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1299 +msgid "Unable to communicate with CMS" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1490 ipaserver/plugins/dogtag.py:1576 +#: ipaserver/plugins/dogtag.py:2098 ipaserver/plugins/dogtag.py:2108 +msgid "Response from CA was not valid JSON" +msgstr "" + +#: ipaserver/plugins/group.py:63 +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"The group name must follow these rules:\n" +"- cannot contain only numbers\n" +"- must start with a letter, a number, _ or .\n" +"- may contain letters, numbers, _, ., or -\n" +"- may end with a letter, a number, _, ., - or $\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from " +"\"localadmins\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#: ipaserver/plugins/group.py:202 +msgid "groups" +msgstr "" + +#: ipaserver/plugins/group.py:335 +msgid "User Group" +msgstr "" + +#: ipaserver/plugins/group.py:367 +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:390 +msgid "gid cannot be set for external group" +msgstr "" + +#: ipaserver/plugins/group.py:402 +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#: ipaserver/plugins/group.py:411 +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:425 +msgid "privileged group" +msgstr "" + +#: ipaserver/plugins/group.py:458 +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:520 +msgid "An external group cannot be POSIX" +msgstr "" + +#: ipaserver/plugins/group.py:545 +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/group.py:654 ipaserver/plugins/group.py:711 +#: ipaserver/plugins/trust.py:877 +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/group.py:745 +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:770 +msgid "not allowed to modify user entries" +msgstr "" + +#: ipaserver/plugins/group.py:781 +msgid "not allowed to modify group entries" +msgstr "" + +#: ipaserver/plugins/group.py:801 +msgid "Not a managed group" +msgstr "" + +#: ipaserver/plugins/group.py:823 +msgid "Add users that can manage members of this group." +msgstr "" + +#: ipaserver/plugins/group.py:831 +msgid "Remove users that can manage members of this group." +msgstr "" + +#: ipaserver/plugins/host.py:74 +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +#: ipaserver/plugins/host.py:82 +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +#: ipaserver/plugins/host.py:94 +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +#: ipaserver/plugins/host.py:106 +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +#: ipaserver/plugins/host.py:109 +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:112 +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:115 +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:118 +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:121 +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:124 +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:127 +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +#: ipaserver/plugins/host.py:130 +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#: ipaserver/plugins/host.py:242 ipaserver/plugins/service.py:164 +msgid "Users allowed to add resource delegation" +msgstr "" + +#: ipaserver/plugins/host.py:244 ipaserver/plugins/service.py:166 +msgid "Groups allowed to add resource delegation" +msgstr "" + +#: ipaserver/plugins/host.py:246 ipaserver/plugins/service.py:168 +msgid "Hosts allowed to add resource delegation" +msgstr "" + +#: ipaserver/plugins/host.py:248 ipaserver/plugins/service.py:170 +msgid "Host Groups allowed to add resource delegation" +msgstr "" + +#: ipaserver/plugins/host.py:481 ipaserver/plugins/internal.py:1177 +#: ipaserver/plugins/internal.py:1311 +msgid "Host" +msgstr "" + +#: ipaserver/plugins/host.py:503 +msgid "Host physical location hint (e.g. \"Lab 2\")" +msgstr "" + +#: ipaserver/plugins/host.py:533 +msgid "Base-64 encoded host certificate" +msgstr "" + +#: ipaserver/plugins/host.py:540 ipaserver/plugins/internal.py:702 +#: ipaserver/plugins/service.py:565 +msgid "Serial Number" +msgstr "" + +#: ipaserver/plugins/host.py:544 ipaserver/plugins/internal.py:703 +#: ipaserver/plugins/service.py:569 +msgid "Serial Number (hex)" +msgstr "" + +#: ipaserver/plugins/host.py:588 ipaserver/plugins/host.py:589 +#: ipaserver/plugins/service.py:549 ipaserver/plugins/service.py:550 +msgid "Delegation principal" +msgstr "" + +#: ipaserver/plugins/host.py:624 ipaserver/plugins/service.py:607 +msgid "Authentication Indicators" +msgstr "" + +#: ipaserver/plugins/host.py:625 +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. Use 'idp' to allow External Identity Provider authentications. Use " +"'passkey' to allow passkey-based 2FA authentications. With no indicator " +"specified, all authentication mechanisms are allowed." +msgstr "" + +#: ipaserver/plugins/host.py:699 +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:823 +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:828 +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +#: ipaserver/plugins/host.py:900 +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#: ipaserver/plugins/host.py:916 +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:937 +msgid "Password cannot be set on enrolled host." +msgstr "" + +#: ipaserver/plugins/host.py:941 +msgid "cn is immutable" +msgstr "" + +#: ipaserver/plugins/host.py:1066 +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/host.py:1221 +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1390 +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1397 +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1413 +msgid "Add new principal alias to host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1414 +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1425 +msgid "Remove principal alias from a host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1426 +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1436 +msgid "Add new resource delegation to a host" +msgstr "" + +#: ipaserver/plugins/host.py:1437 +#, python-format +msgid "Added new resource delegation to the host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1450 +msgid "Remove resource delegation from a host" +msgstr "" + +#: ipaserver/plugins/host.py:1451 +#, python-format +msgid "Removed resource delegation from the host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1457 +msgid "" +"Allow users, groups, hosts or host groups to handle a resource delegation of " +"this host." +msgstr "" + +#: ipaserver/plugins/host.py:1477 +msgid "" +"Disallow users, groups, hosts or host groups to handle a resource delegation " +"of this host." +msgstr "" + +#: ipaserver/plugins/idp.py:24 +msgid "" +"\n" +"External Identity Provider References\n" +msgstr "" + +#: ipaserver/plugins/idp.py:26 +msgid "" +"\n" +"Manage External Identity Provider References.\n" +msgstr "" + +#: ipaserver/plugins/idp.py:28 +msgid "" +"\n" +"IPA supports the use of an external Identity Provider for OAuth2.0 Device " +"Flow\n" +"authentication.\n" +msgstr "" + +#: ipaserver/plugins/idp.py:33 +msgid "" +"\n" +" Add a new external Identity Provider reference:\n" +" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." +"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" +msgstr "" + +#: ipaserver/plugins/idp.py:38 +msgid "" +"\n" +" Add a new external Identity Provider reference using github predefined\n" +" endpoints:\n" +" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" +msgstr "" + +#: ipaserver/plugins/idp.py:42 +msgid "" +"\n" +" Find all external Identity Provider references whose entries include the " +"string\n" +" \"test.com\":\n" +" ipa idp-find test.com\n" +msgstr "" + +#: ipaserver/plugins/idp.py:46 +msgid "" +"\n" +" Examine the configuration of an external Identity Provider reference:\n" +" ipa idp-show MyIdP\n" +msgstr "" + +#: ipaserver/plugins/idp.py:49 +msgid "" +"\n" +" Change the secret:\n" +" ipa idp-mod MyIdP --secret\n" +msgstr "" + +#: ipaserver/plugins/idp.py:52 +msgid "" +"\n" +" Delete an external Identity Provider reference:\n" +" ipa idp-del MyIdP\n" +msgstr "" + +#: ipaserver/plugins/idp.py:70 +msgid "Invalid URI: not an https scheme" +msgstr "" + +#: ipaserver/plugins/idp.py:73 +msgid "Invalid URI: missing netloc" +msgstr "" + +#: ipaserver/plugins/idp.py:84 ipaserver/plugins/idp.py:100 +msgid "Identity Provider reference" +msgstr "" + +#: ipaserver/plugins/idp.py:85 ipaserver/plugins/idp.py:99 +msgid "Identity Provider references" +msgstr "" + +#: ipaserver/plugins/idp.py:105 +msgid "Identity Provider reference name" +msgstr "" + +#: ipaserver/plugins/idp.py:111 +msgid "Authorization URI" +msgstr "" + +#: ipaserver/plugins/idp.py:112 +msgid "OAuth 2.0 authorization endpoint" +msgstr "" + +#: ipaserver/plugins/idp.py:117 +msgid "Device authorization URI" +msgstr "" + +#: ipaserver/plugins/idp.py:118 +msgid "Device authorization endpoint" +msgstr "" + +#: ipaserver/plugins/idp.py:123 +msgid "Token URI" +msgstr "" + +#: ipaserver/plugins/idp.py:124 +msgid "Token endpoint" +msgstr "" + +#: ipaserver/plugins/idp.py:129 +msgid "User info URI" +msgstr "" + +#: ipaserver/plugins/idp.py:130 +msgid "User information endpoint" +msgstr "" + +#: ipaserver/plugins/idp.py:135 +msgid "JWKS URI" +msgstr "" + +#: ipaserver/plugins/idp.py:136 +msgid "JWKS endpoint" +msgstr "" + +#: ipaserver/plugins/idp.py:140 +msgid "OIDC URL" +msgstr "" + +#: ipaserver/plugins/idp.py:142 +msgid "The Identity Provider OIDC URL" +msgstr "" + +#: ipaserver/plugins/idp.py:146 +msgid "Client identifier" +msgstr "" + +#: ipaserver/plugins/idp.py:148 +msgid "OAuth 2.0 client identifier" +msgstr "" + +#: ipaserver/plugins/idp.py:153 +msgid "OAuth 2.0 client secret" +msgstr "" + +#: ipaserver/plugins/idp.py:159 +msgid "Scope" +msgstr "" + +#: ipaserver/plugins/idp.py:160 +msgid "OAuth 2.0 scope. Multiple scopes separated by space" +msgstr "" + +#: ipaserver/plugins/idp.py:164 +msgid "External IdP user identifier attribute" +msgstr "" + +#: ipaserver/plugins/idp.py:165 +msgid "Attribute for user identity in OAuth 2.0 userinfo" +msgstr "" + +#: ipaserver/plugins/idp.py:229 +msgid "Add a new Identity Provider reference." +msgstr "" + +#: ipaserver/plugins/idp.py:230 +#, python-format +msgid "Added Identity Provider reference \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idp.py:309 +msgid "IdP provider template" +msgstr "" + +#: ipaserver/plugins/idp.py:310 +msgid "Choose a pre-defined template to use" +msgstr "" + +#: ipaserver/plugins/idp.py:316 ipaserver/plugins/internal.py:685 +msgid "Organization" +msgstr "" + +#: ipaserver/plugins/idp.py:317 +msgid "Organization ID or Realm name for IdP provider templates" +msgstr "" + +#: ipaserver/plugins/idp.py:321 +msgid "Base URL" +msgstr "" + +#: ipaserver/plugins/idp.py:322 +msgid "Base URL for IdP provider templates" +msgstr "" + +#: ipaserver/plugins/idp.py:336 +msgid "unknown provider" +msgstr "" + +#: ipaserver/plugins/idp.py:351 +msgid "value is missing" +msgstr "" + +#: ipaserver/plugins/idp.py:385 +msgid "cannot specify both individual endpoints and IdP provider" +msgstr "" + +#: ipaserver/plugins/idp.py:416 +msgid "Delete an Identity Provider reference." +msgstr "" + +#: ipaserver/plugins/idp.py:417 +#, python-format +msgid "Deleted Identity Provider reference \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idp.py:422 +msgid "Modify an Identity Provider reference." +msgstr "" + +#: ipaserver/plugins/idp.py:423 +#, python-format +msgid "Modified Identity Provider reference \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idp.py:428 +msgid "Search for Identity Provider references." +msgstr "" + +#: ipaserver/plugins/idp.py:430 +#, python-format +msgid "%(count)d Identity Provider reference matched" +msgid_plural "%(count)d Identity Provider references matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idp.py:445 +msgid "Display information about an Identity Provider reference." +msgstr "" + +#: ipaserver/plugins/idrange.py:43 +msgid "" +"-------\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"\n" +"-------\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:58 +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:203 +msgid "ID Ranges" +msgstr "" + +#: ipaserver/plugins/idrange.py:204 +msgid "ID Range" +msgstr "" + +#: ipaserver/plugins/idrange.py:208 +msgid "local domain range" +msgstr "" + +#: ipaserver/plugins/idrange.py:211 ipaserver/plugins/trust.py:678 +msgid "Active Directory domain range" +msgstr "" + +#: ipaserver/plugins/idrange.py:212 ipaserver/plugins/trust.py:679 +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +#: ipaserver/plugins/idrange.py:256 +msgid "ID range type, one of allowed values" +msgstr "" + +#: ipaserver/plugins/idrange.py:261 ipaserver/plugins/internal.py:1267 +msgid "Auto private groups" +msgstr "" + +#: ipaserver/plugins/idrange.py:263 +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +#: ipaserver/plugins/idrange.py:337 +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +#: ipaserver/plugins/idrange.py:342 +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +#: ipaserver/plugins/idrange.py:349 +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/idrange.py:361 +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:398 +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:424 +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:437 ipaserver/plugins/idrange.py:702 +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:448 +msgid "Specified trusted domain name could not be found." +msgstr "" + +#: ipaserver/plugins/idrange.py:463 +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:470 ipaserver/plugins/idrange.py:737 +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +#: ipaserver/plugins/idrange.py:477 +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +#: ipaserver/plugins/idrange.py:483 +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:502 +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +#: ipaserver/plugins/idrange.py:512 +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +#: ipaserver/plugins/idrange.py:519 ipaserver/plugins/idrange.py:756 +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:529 ipaserver/plugins/idrange.py:779 +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +#: ipaserver/plugins/idrange.py:541 +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#: ipaserver/plugins/idrange.py:560 +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:609 +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idrange.py:645 +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:649 +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:684 +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +#: ipaserver/plugins/idrange.py:714 +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +#: ipaserver/plugins/idrange.py:721 +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:728 +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idviews.py:73 ipaserver/plugins/idviews.py:124 +#: ipaserver/plugins/idviews.py:132 ipaserver/plugins/idviews.py:360 +#: ipaserver/plugins/idviews.py:851 +msgid "ID View" +msgstr "" + +#: ipaserver/plugins/idviews.py:75 +msgid "system ID View" +msgstr "" + +#: ipaserver/plugins/idviews.py:125 ipaserver/plugins/idviews.py:131 +msgid "ID Views" +msgstr "" + +#: ipaserver/plugins/idviews.py:146 +msgid "User object overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:150 +msgid "Group object overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:154 +msgid "Hosts the view applies to" +msgstr "" + +#: ipaserver/plugins/idviews.py:198 +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:215 +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:228 +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:244 +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:361 +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#: ipaserver/plugins/idviews.py:389 ipaserver/plugins/idviews.py:422 +msgid "not found" +msgstr "" + +#: ipaserver/plugins/idviews.py:403 +msgid "ID View cannot be applied to IPA master" +msgstr "" + +#: ipaserver/plugins/idviews.py:420 +msgid "ID View already applied" +msgstr "" + +#: ipaserver/plugins/idviews.py:440 +msgid "value" +msgstr "" + +#: ipaserver/plugins/idviews.py:453 +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#: ipaserver/plugins/idviews.py:454 +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#: ipaserver/plugins/idviews.py:496 +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#: ipaserver/plugins/idviews.py:497 +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +#: ipaserver/plugins/idviews.py:565 +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +#: ipaserver/plugins/idviews.py:603 +msgid "IPA object" +msgstr "" + +#: ipaserver/plugins/idviews.py:604 +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#: ipaserver/plugins/idviews.py:698 +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +#: ipaserver/plugins/idviews.py:852 +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#: ipaserver/plugins/idviews.py:896 +msgid "Add a new ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:897 +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:912 +msgid "Delete an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:913 +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:936 +msgid "Modify an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:937 +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:944 +msgid "ID override" +msgstr "" + +#: ipaserver/plugins/idviews.py:945 +msgid "ID overrides cannot be renamed" +msgstr "" + +#: ipaserver/plugins/idviews.py:957 +msgid "Search for an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:958 +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:970 +msgid "Display information about an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:982 ipaserver/plugins/idviews.py:986 +msgid "User ID override" +msgstr "" + +#: ipaserver/plugins/idviews.py:983 ipaserver/plugins/idviews.py:985 +msgid "User ID overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:1105 ipaserver/plugins/idviews.py:1109 +msgid "Group ID override" +msgstr "" + +#: ipaserver/plugins/idviews.py:1106 ipaserver/plugins/idviews.py:1108 +msgid "Group ID overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:1150 +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#: ipaserver/plugins/idviews.py:1151 +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1173 +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#: ipaserver/plugins/idviews.py:1174 +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1198 +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1223 +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1229 +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1261 +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:1297 +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1303 +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1309 +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1315 +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/internal.py:151 +msgid "Internationalization messages" +msgstr "" + +#: ipaserver/plugins/internal.py:157 +msgid "Your session has expired. Please log in again." +msgstr "" + +#: ipaserver/plugins/internal.py:161 ipaserver/plugins/internal.py:211 +msgid "Apply" +msgstr "" + +#: ipaserver/plugins/internal.py:162 +msgid "Rebuild auto membership" +msgstr "" + +#: ipaserver/plugins/internal.py:164 +msgid "" +"Are you sure you want to rebuild auto membership? In case of a high number " +"of users, hosts or groups, the operation may require high CPU usage." +msgstr "" + +#: ipaserver/plugins/internal.py:169 +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#: ipaserver/plugins/internal.py:170 +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:171 +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:172 +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:173 +msgid "Actions" +msgstr "" + +#: ipaserver/plugins/internal.py:176 ipaserver/plugins/internal.py:206 +#: ipaserver/plugins/internal.py:268 +msgid "Add" +msgstr "" + +#: ipaserver/plugins/internal.py:177 +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +#: ipaserver/plugins/internal.py:178 +msgid "Direct Membership" +msgstr "" + +#: ipaserver/plugins/internal.py:179 +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +#: ipaserver/plugins/internal.py:180 +msgid "Indirect Membership" +msgstr "" + +#: ipaserver/plugins/internal.py:181 +msgid "No entries." +msgstr "" + +#: ipaserver/plugins/internal.py:182 +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +#: ipaserver/plugins/internal.py:183 ipaserver/plugins/internal.py:283 +msgid "Remove" +msgstr "" + +#: ipaserver/plugins/internal.py:184 +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +#: ipaserver/plugins/internal.py:185 +msgid "Show Results" +msgstr "" + +#: ipaserver/plugins/internal.py:188 +msgid "Authentication indicators" +msgstr "" + +#: ipaserver/plugins/internal.py:189 +msgid "Authentication indicator" +msgstr "" + +#: ipaserver/plugins/internal.py:190 +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +#: ipaserver/plugins/internal.py:191 +msgid "Add Custom Authentication Indicator" +msgstr "" + +#: ipaserver/plugins/internal.py:193 +msgid "Two factor authentication (password + OTP)" +msgstr "" + +#: ipaserver/plugins/internal.py:195 +msgid "RADIUS" +msgstr "" + +#: ipaserver/plugins/internal.py:197 +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +#: ipaserver/plugins/internal.py:198 +msgid "External Identity Provider" +msgstr "" + +#: ipaserver/plugins/internal.py:199 ipaserver/plugins/internal.py:1229 +msgid "Passkey" +msgstr "" + +#: ipaserver/plugins/internal.py:200 +msgid "Disable per-user override" +msgstr "" + +#: ipaserver/plugins/internal.py:201 +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +#: ipaserver/plugins/internal.py:204 ipaserver/plugins/internal.py:278 +#: ipaserver/plugins/internal.py:1756 +msgid "About" +msgstr "" + +#: ipaserver/plugins/internal.py:205 +msgid "Activate" +msgstr "" + +#: ipaserver/plugins/internal.py:207 +msgid "Add and Add Another" +msgstr "" + +#: ipaserver/plugins/internal.py:208 +msgid "Add and Close" +msgstr "" + +#: ipaserver/plugins/internal.py:209 +msgid "Add and Edit" +msgstr "" + +#: ipaserver/plugins/internal.py:210 +msgid "Add Many" +msgstr "" + +#: ipaserver/plugins/internal.py:212 +msgid "Back" +msgstr "" + +#: ipaserver/plugins/internal.py:213 +msgid "Cancel" +msgstr "" + +#: ipaserver/plugins/internal.py:214 +msgid "Clear" +msgstr "" + +#: ipaserver/plugins/internal.py:215 +msgid "Clear all fields on the page." +msgstr "" + +#: ipaserver/plugins/internal.py:216 +msgid "Close" +msgstr "" + +#: ipaserver/plugins/internal.py:217 ipaserver/plugins/internal.py:1960 +msgid "Disable" +msgstr "" + +#: ipaserver/plugins/internal.py:218 ipaserver/plugins/internal.py:649 +msgid "Download" +msgstr "" + +#: ipaserver/plugins/internal.py:219 +msgid "Download certificate as PEM formatted file." +msgstr "" + +#: ipaserver/plugins/internal.py:220 +msgid "Edit" +msgstr "" + +#: ipaserver/plugins/internal.py:221 ipaserver/plugins/internal.py:1962 +msgid "Enable" +msgstr "" + +#: ipaserver/plugins/internal.py:223 +msgid "Find" +msgstr "" + +#: ipaserver/plugins/internal.py:224 +msgid "Get" +msgstr "" + +#: ipaserver/plugins/internal.py:225 +msgid "Hide" +msgstr "" + +#: ipaserver/plugins/internal.py:226 +msgid "Issue" +msgstr "" + +#: ipaserver/plugins/internal.py:227 +msgid "Match" +msgstr "" + +#: ipaserver/plugins/internal.py:228 +msgid "Match users according to certificate." +msgstr "" + +#: ipaserver/plugins/internal.py:229 +msgid "Migrate" +msgstr "" + +#: ipaserver/plugins/internal.py:230 +msgid "OK" +msgstr "" + +#: ipaserver/plugins/internal.py:231 +msgid "Refresh" +msgstr "" + +#: ipaserver/plugins/internal.py:232 +msgid "Reload current settings from the server." +msgstr "" + +#: ipaserver/plugins/internal.py:233 +msgid "Delete" +msgstr "" + +#: ipaserver/plugins/internal.py:234 ipaserver/plugins/internal.py:690 +msgid "Remove hold" +msgstr "" + +#: ipaserver/plugins/internal.py:235 +msgid "Reset" +msgstr "" + +#: ipaserver/plugins/internal.py:236 ipaserver/plugins/internal.py:1749 +msgid "Reset Password" +msgstr "" + +#: ipaserver/plugins/internal.py:237 +msgid "Reset Password and Log in" +msgstr "" + +#: ipaserver/plugins/internal.py:238 +msgid "Restore" +msgstr "" + +#: ipaserver/plugins/internal.py:239 +msgid "Retry" +msgstr "" + +#: ipaserver/plugins/internal.py:240 +msgid "Revert" +msgstr "" + +#: ipaserver/plugins/internal.py:242 +msgid "Revoke" +msgstr "" + +#: ipaserver/plugins/internal.py:243 +msgid "Save" +msgstr "" + +#: ipaserver/plugins/internal.py:244 +msgid "Set" +msgstr "" + +#: ipaserver/plugins/internal.py:245 +msgid "Show" +msgstr "" + +#: ipaserver/plugins/internal.py:246 +msgid "Stage" +msgstr "" + +#: ipaserver/plugins/internal.py:248 +msgid "Update" +msgstr "" + +#: ipaserver/plugins/internal.py:249 +msgid "View" +msgstr "" + +#: ipaserver/plugins/internal.py:252 ipaserver/plugins/internal.py:1757 +msgid "Customization" +msgstr "" + +#: ipaserver/plugins/internal.py:253 +msgid "Pagination Size" +msgstr "" + +#: ipaserver/plugins/internal.py:256 +msgid "Collapse All" +msgstr "" + +#: ipaserver/plugins/internal.py:257 +msgid "Expand All" +msgstr "" + +#: ipaserver/plugins/internal.py:258 +msgid "General" +msgstr "" + +#: ipaserver/plugins/internal.py:259 +msgid "Identity Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:260 +msgid "Record Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:261 +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:262 +msgid "Back to Top" +msgstr "" + +#: ipaserver/plugins/internal.py:263 +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#: ipaserver/plugins/internal.py:266 +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#: ipaserver/plugins/internal.py:267 +msgid "Add custom value" +msgstr "" + +#: ipaserver/plugins/internal.py:269 +msgid "Available" +msgstr "" + +#: ipaserver/plugins/internal.py:270 +msgid "Some operations failed." +msgstr "" + +#: ipaserver/plugins/internal.py:271 +msgid "Operations Error" +msgstr "" + +#: ipaserver/plugins/internal.py:272 +msgid "Confirmation" +msgstr "" + +#: ipaserver/plugins/internal.py:273 +msgid "Custom value" +msgstr "" + +#: ipaserver/plugins/internal.py:274 +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +#: ipaserver/plugins/internal.py:275 +msgid "Unsaved Changes" +msgstr "" + +#: ipaserver/plugins/internal.py:276 +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +#: ipaserver/plugins/internal.py:277 +msgid "Hide details" +msgstr "" + +#: ipaserver/plugins/internal.py:279 +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +#: ipaserver/plugins/internal.py:280 +msgid "Prospective" +msgstr "" + +#: ipaserver/plugins/internal.py:281 +msgid "Redirection" +msgstr "" + +#: ipaserver/plugins/internal.py:282 +msgid "Select entries to be removed." +msgstr "" + +#: ipaserver/plugins/internal.py:284 +msgid "Result" +msgstr "" + +#: ipaserver/plugins/internal.py:285 +msgid "Show details" +msgstr "" + +#: ipaserver/plugins/internal.py:286 +msgid "Success" +msgstr "" + +#: ipaserver/plugins/internal.py:287 +msgid "Validation error" +msgstr "" + +#: ipaserver/plugins/internal.py:288 +msgid "Input form contains invalid or missing values." +msgstr "" + +#: ipaserver/plugins/internal.py:291 +msgid "Please try the following options:" +msgstr "" + +#: ipaserver/plugins/internal.py:292 +msgid "If the problem persists please contact the system administrator." +msgstr "" + +#: ipaserver/plugins/internal.py:293 +msgid "Refresh the page." +msgstr "" + +#: ipaserver/plugins/internal.py:294 +msgid "Reload the browser." +msgstr "" + +#: ipaserver/plugins/internal.py:295 +msgid "Return to the main page and retry the operation" +msgstr "" + +#: ipaserver/plugins/internal.py:296 +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#: ipaserver/plugins/internal.py:300 +msgid "HTTP Error" +msgstr "" + +#: ipaserver/plugins/internal.py:301 +msgid "Internal Error" +msgstr "" + +#: ipaserver/plugins/internal.py:302 +msgid "IPA Error" +msgstr "" + +#: ipaserver/plugins/internal.py:303 +msgid "No response" +msgstr "" + +#: ipaserver/plugins/internal.py:304 +msgid "Unknown Error" +msgstr "" + +#: ipaserver/plugins/internal.py:305 +msgid "URL" +msgstr "" + +#: ipaserver/plugins/internal.py:308 +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#: ipaserver/plugins/internal.py:309 +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#: ipaserver/plugins/internal.py:310 +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#: ipaserver/plugins/internal.py:311 +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +#: ipaserver/plugins/internal.py:314 +msgid "Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:315 ipaserver/plugins/internal.py:1770 +msgid "Search" +msgstr "" + +#: ipaserver/plugins/internal.py:317 +msgid "False" +msgstr "" + +#: ipaserver/plugins/internal.py:320 +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:323 +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:326 +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:329 +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:332 +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:335 +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:338 +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:341 +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:343 +msgid "Allowed to create keytab" +msgstr "" + +#: ipaserver/plugins/internal.py:344 +msgid "Allowed to retrieve keytab" +msgstr "" + +#: ipaserver/plugins/internal.py:346 +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:349 +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:352 +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:355 +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:358 +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:361 +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:364 +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:367 +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:371 +msgid "Add Kerberos Principal Alias" +msgstr "" + +#: ipaserver/plugins/internal.py:372 +msgid "New kerberos principal alias" +msgstr "" + +#: ipaserver/plugins/internal.py:373 +msgid "Remove Kerberos Alias" +msgstr "" + +#: ipaserver/plugins/internal.py:374 +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +#: ipaserver/plugins/internal.py:377 +msgid "Inherited from server configuration" +msgstr "" + +#: ipaserver/plugins/internal.py:378 +msgid "MS-PAC" +msgstr "" + +#: ipaserver/plugins/internal.py:379 +msgid "Override inherited settings" +msgstr "" + +#: ipaserver/plugins/internal.py:380 +msgid "PAD" +msgstr "" + +#: ipaserver/plugins/internal.py:383 +msgid "Authenticating" +msgstr "" + +#: ipaserver/plugins/internal.py:385 +msgid "Authentication with personal certificate failed" +msgstr "" + +#: ipaserver/plugins/internal.py:387 +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +#: ipaserver/plugins/internal.py:391 +msgid "Continue to next page" +msgstr "" + +#: ipaserver/plugins/internal.py:393 +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +#: ipaserver/plugins/internal.py:396 +msgid "Login failed due to an unknown reason" +msgstr "" + +#: ipaserver/plugins/internal.py:397 +msgid "Logged In As" +msgstr "" + +#: ipaserver/plugins/internal.py:398 +msgid "Authentication with Kerberos failed" +msgstr "" + +#: ipaserver/plugins/internal.py:400 +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +#: ipaserver/plugins/internal.py:405 +msgid "Loading" +msgstr "" + +#: ipaserver/plugins/internal.py:407 +msgid "Kerberos Principal you entered is expired" +msgstr "" + +#: ipaserver/plugins/internal.py:408 +msgid "Loading data" +msgstr "" + +#: ipaserver/plugins/internal.py:409 +msgid "Log in" +msgstr "" + +#: ipaserver/plugins/internal.py:410 +msgid "Log In Using Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:411 +msgid "Log in using personal certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:412 ipaserver/plugins/internal.py:1758 +msgid "Log out" +msgstr "" + +#: ipaserver/plugins/internal.py:413 +msgid "Log out error" +msgstr "" + +#: ipaserver/plugins/internal.py:415 ipaserver/plugins/internal.py:1743 +msgid "Password or Password+One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:416 +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +#: ipaserver/plugins/internal.py:417 +msgid "Sync OTP Token" +msgstr "" + +#: ipaserver/plugins/internal.py:418 +msgid "Synchronizing" +msgstr "" + +#: ipaserver/plugins/internal.py:420 +msgid "The user account you entered is locked" +msgstr "" + +#: ipaserver/plugins/internal.py:423 +msgid "number of passwords" +msgstr "" + +#: ipaserver/plugins/internal.py:424 +msgid "seconds" +msgstr "" + +#: ipaserver/plugins/internal.py:427 +msgid "Migrating" +msgstr "" + +#: ipaserver/plugins/internal.py:429 +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#: ipaserver/plugins/internal.py:432 +msgid "Password migration was not successful" +msgstr "" + +#: ipaserver/plugins/internal.py:434 +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#: ipaserver/plugins/internal.py:441 ipaserver/plugins/internal.py:1725 +msgid "The password or username you entered is incorrect" +msgstr "" + +#: ipaserver/plugins/internal.py:442 +msgid "Password migration was successful" +msgstr "" + +#: ipaserver/plugins/internal.py:446 ipaserver/plugins/internal.py:531 +#: ipaserver/plugins/internal.py:1241 +msgid "Attribute" +msgstr "" + +#: ipaserver/plugins/internal.py:449 +msgid "Add delegation" +msgstr "" + +#: ipaserver/plugins/internal.py:450 +msgid "Remove delegations" +msgstr "" + +#: ipaserver/plugins/internal.py:453 ipaserver/plugins/internal.py:785 +msgid "Add permission" +msgstr "" + +#: ipaserver/plugins/internal.py:455 +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:457 +msgid "Remove permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:459 +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:463 +msgid "Add privilege" +msgstr "" + +#: ipaserver/plugins/internal.py:465 +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:468 +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:470 +msgid "Remove privileges" +msgstr "" + +#: ipaserver/plugins/internal.py:472 +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:475 +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:479 +msgid "Role Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:480 +msgid "Add role" +msgstr "" + +#: ipaserver/plugins/internal.py:482 +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:485 +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:488 +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:491 +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#: ipaserver/plugins/internal.py:494 +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:497 +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:499 +msgid "Remove roles" +msgstr "" + +#: ipaserver/plugins/internal.py:501 +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#: ipaserver/plugins/internal.py:504 +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:507 +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:510 +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:513 +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:516 +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:520 +msgid "Add self service permission" +msgstr "" + +#: ipaserver/plugins/internal.py:521 +msgid "Remove self service permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:524 +msgid "Add rule" +msgstr "" + +#: ipaserver/plugins/internal.py:526 +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:529 +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:533 +msgid "Are you sure you want to change default group?" +msgstr "" + +#: ipaserver/plugins/internal.py:535 +msgid "Default host group" +msgstr "" + +#: ipaserver/plugins/internal.py:536 +msgid "Default user group" +msgstr "" + +#: ipaserver/plugins/internal.py:537 +msgid "Exclusive" +msgstr "" + +#: ipaserver/plugins/internal.py:538 +msgid "Expression" +msgstr "" + +#: ipaserver/plugins/internal.py:539 +msgid "Host group rule" +msgstr "" + +#: ipaserver/plugins/internal.py:540 +msgid "Host group rules" +msgstr "" + +#: ipaserver/plugins/internal.py:541 +msgid "Inclusive" +msgstr "" + +#: ipaserver/plugins/internal.py:542 +msgid "Remove auto membership rules" +msgstr "" + +#: ipaserver/plugins/internal.py:544 +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:547 +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:549 +msgid "User group rule" +msgstr "" + +#: ipaserver/plugins/internal.py:550 +msgid "User group rules" +msgstr "" + +#: ipaserver/plugins/internal.py:553 +msgid "Add automount key" +msgstr "" + +#: ipaserver/plugins/internal.py:554 +msgid "Remove automount keys" +msgstr "" + +#: ipaserver/plugins/internal.py:557 +msgid "Add automount location" +msgstr "" + +#: ipaserver/plugins/internal.py:558 +msgid "Automount Location Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:559 +msgid "Remove automount locations" +msgstr "" + +#: ipaserver/plugins/internal.py:562 +msgid "Add automount map" +msgstr "" + +#: ipaserver/plugins/internal.py:563 +msgid "Map Type" +msgstr "" + +#: ipaserver/plugins/internal.py:564 +msgid "Direct" +msgstr "" + +#: ipaserver/plugins/internal.py:565 +msgid "Indirect" +msgstr "" + +#: ipaserver/plugins/internal.py:566 +msgid "Remove automount maps" +msgstr "" + +#: ipaserver/plugins/internal.py:569 +msgid "Add certificate authority" +msgstr "" + +#: ipaserver/plugins/internal.py:570 +msgid "Remove certificate authorities" +msgstr "" + +#: ipaserver/plugins/internal.py:573 +msgid "Add CA ACL" +msgstr "" + +#: ipaserver/plugins/internal.py:575 +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:579 +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:582 +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:585 +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:588 +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:591 +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:594 +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:596 +msgid "All" +msgstr "" + +#: ipaserver/plugins/internal.py:597 +msgid "Any CA" +msgstr "" + +#: ipaserver/plugins/internal.py:598 ipaserver/plugins/internal.py:907 +#: ipaserver/plugins/internal.py:1174 ipaserver/plugins/internal.py:1309 +#: ipaserver/plugins/internal.py:1478 +msgid "Any Host" +msgstr "" + +#: ipaserver/plugins/internal.py:599 ipaserver/plugins/internal.py:908 +msgid "Any Service" +msgstr "" + +#: ipaserver/plugins/internal.py:600 +msgid "Any Profile" +msgstr "" + +#: ipaserver/plugins/internal.py:601 ipaserver/plugins/internal.py:909 +#: ipaserver/plugins/internal.py:1175 ipaserver/plugins/internal.py:1310 +#: ipaserver/plugins/internal.py:1479 +msgid "Anyone" +msgstr "" + +#: ipaserver/plugins/internal.py:602 ipaserver/plugins/internal.py:911 +#: ipaserver/plugins/internal.py:1484 +msgid "Rule status" +msgstr "" + +#: ipaserver/plugins/internal.py:603 +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#: ipaserver/plugins/internal.py:605 +msgid "Remove CA ACLs" +msgstr "" + +#: ipaserver/plugins/internal.py:607 +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:611 +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:614 +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:617 +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:620 +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:623 +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:626 +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:628 +msgid "Specified CAs" +msgstr "" + +#: ipaserver/plugins/internal.py:629 ipaserver/plugins/internal.py:933 +#: ipaserver/plugins/internal.py:1201 ipaserver/plugins/internal.py:1325 +#: ipaserver/plugins/internal.py:1529 +msgid "Specified Hosts and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:630 +msgid "Specified Profiles" +msgstr "" + +#: ipaserver/plugins/internal.py:631 ipaserver/plugins/internal.py:934 +msgid "Specified Services and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:632 ipaserver/plugins/internal.py:935 +#: ipaserver/plugins/internal.py:1202 ipaserver/plugins/internal.py:1326 +#: ipaserver/plugins/internal.py:1530 +msgid "Specified Users and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:633 +msgid "Permitted to have certificates issued" +msgstr "" + +#: ipaserver/plugins/internal.py:636 +msgid "Remove certificate profiles" +msgstr "" + +#: ipaserver/plugins/internal.py:639 +msgid "AA Compromise" +msgstr "" + +#: ipaserver/plugins/internal.py:640 +msgid "Add principal" +msgstr "" + +#: ipaserver/plugins/internal.py:641 +msgid "Affiliation Changed" +msgstr "" + +#: ipaserver/plugins/internal.py:643 +msgid "CA Compromise" +msgstr "" + +#: ipaserver/plugins/internal.py:645 ipaserver/plugins/internal.py:1972 +msgid "Certificates" +msgstr "" + +#: ipaserver/plugins/internal.py:646 +msgid "Certificate Hold" +msgstr "" + +#: ipaserver/plugins/internal.py:647 +msgid "Cessation of Operation" +msgstr "" + +#: ipaserver/plugins/internal.py:648 +msgid "Common Name" +msgstr "" + +#: ipaserver/plugins/internal.py:650 +msgid "the certificate with serial number " +msgstr "" + +#: ipaserver/plugins/internal.py:651 +msgid "Expires On" +msgstr "" + +#: ipaserver/plugins/internal.py:652 +msgid "Issued on from" +msgstr "" + +#: ipaserver/plugins/internal.py:653 +msgid "Issued on to" +msgstr "" + +#: ipaserver/plugins/internal.py:654 +msgid "Maximum serial number" +msgstr "" + +#: ipaserver/plugins/internal.py:655 +msgid "Minimum serial number" +msgstr "" + +#: ipaserver/plugins/internal.py:657 +msgid "Revoked on from" +msgstr "" + +#: ipaserver/plugins/internal.py:658 +msgid "Revoked on to" +msgstr "" + +#: ipaserver/plugins/internal.py:660 +msgid "Valid not after from" +msgstr "" + +#: ipaserver/plugins/internal.py:661 +msgid "Valid not after to" +msgstr "" + +#: ipaserver/plugins/internal.py:662 +msgid "Valid not before from" +msgstr "" + +#: ipaserver/plugins/internal.py:663 +msgid "Valid not before to" +msgstr "" + +#: ipaserver/plugins/internal.py:664 +msgid "Fingerprints" +msgstr "" + +#: ipaserver/plugins/internal.py:665 +msgid "Get Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:666 +msgid "Certificate Hold Removed" +msgstr "" + +#: ipaserver/plugins/internal.py:668 +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:671 +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:674 +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:676 +msgid "Issue new certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:677 +msgid "Issued By" +msgstr "" + +#: ipaserver/plugins/internal.py:678 +msgid "Issued On" +msgstr "" + +#: ipaserver/plugins/internal.py:679 +msgid "Issued To" +msgstr "" + +#: ipaserver/plugins/internal.py:680 +msgid "Key Compromise" +msgstr "" + +#: ipaserver/plugins/internal.py:681 +msgid "No Valid Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:682 +msgid "New Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:683 +msgid "Certificate in base64 or PEM format" +msgstr "" + +#: ipaserver/plugins/internal.py:684 +msgid "Note" +msgstr "" + +#: ipaserver/plugins/internal.py:686 +msgid "Organizational Unit" +msgstr "" + +#: ipaserver/plugins/internal.py:687 +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +#: ipaserver/plugins/internal.py:688 +msgid "Privilege Withdrawn" +msgstr "" + +#: ipaserver/plugins/internal.py:689 +msgid "Reason for Revocation" +msgstr "" + +#: ipaserver/plugins/internal.py:691 +msgid "Remove certificate hold" +msgstr "" + +#: ipaserver/plugins/internal.py:692 +msgid "Do you want to remove the certificate hold?" +msgstr "" + +#: ipaserver/plugins/internal.py:693 +msgid "Remove from CRL" +msgstr "" + +#: ipaserver/plugins/internal.py:694 +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#: ipaserver/plugins/internal.py:695 +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#: ipaserver/plugins/internal.py:696 +msgid "Certificate requested" +msgstr "" + +#: ipaserver/plugins/internal.py:698 +msgid "Revoke certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:699 +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#: ipaserver/plugins/internal.py:700 +msgid "Certificate Revoked" +msgstr "" + +#: ipaserver/plugins/internal.py:701 +msgid "REVOKED" +msgstr "" + +#: ipaserver/plugins/internal.py:704 +msgid "SHA1 Fingerprint" +msgstr "" + +#: ipaserver/plugins/internal.py:705 +msgid "SHA256 Fingerprint" +msgstr "" + +#: ipaserver/plugins/internal.py:707 +msgid "Superseded" +msgstr "" + +#: ipaserver/plugins/internal.py:708 +msgid "Unspecified" +msgstr "" + +#: ipaserver/plugins/internal.py:709 +msgid "Valid Certificate Present" +msgstr "" + +#: ipaserver/plugins/internal.py:710 +msgid "Valid from" +msgstr "" + +#: ipaserver/plugins/internal.py:711 +msgid "Valid to" +msgstr "" + +#: ipaserver/plugins/internal.py:712 +msgid "Validity" +msgstr "" + +#: ipaserver/plugins/internal.py:713 +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#: ipaserver/plugins/internal.py:714 +msgid "View Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:717 +msgid "Certificate Data" +msgstr "" + +#: ipaserver/plugins/internal.py:718 +msgid "Certificate For Match" +msgstr "" + +#: ipaserver/plugins/internal.py:719 +msgid "Certificate Mapping Match" +msgstr "" + +#: ipaserver/plugins/internal.py:721 +msgid "Matched Users" +msgstr "" + +#: ipaserver/plugins/internal.py:722 +msgid "User Login" +msgstr "" + +#: ipaserver/plugins/internal.py:725 +msgid "Add certificate identity mapping rule" +msgstr "" + +#: ipaserver/plugins/internal.py:726 +msgid "Add certificate mapping data" +msgstr "" + +#: ipaserver/plugins/internal.py:729 +msgid "Configuration string" +msgstr "" + +#: ipaserver/plugins/internal.py:730 +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#: ipaserver/plugins/internal.py:731 +msgid "Remove certificate mapping data" +msgstr "" + +#: ipaserver/plugins/internal.py:733 +msgid "Issuer and subject" +msgstr "" + +#: ipaserver/plugins/internal.py:734 +msgid "Remove certificate identity mapping rules" +msgstr "" + +#: ipaserver/plugins/internal.py:736 ipaserver/plugins/schema.py:147 +msgid "Version" +msgstr "" + +#: ipaserver/plugins/internal.py:739 +msgid "Group Options" +msgstr "" + +#: ipaserver/plugins/internal.py:740 +msgid "Search Options" +msgstr "" + +#: ipaserver/plugins/internal.py:741 +msgid "SELinux Options" +msgstr "" + +#: ipaserver/plugins/internal.py:742 +msgid "Server Options" +msgstr "" + +#: ipaserver/plugins/internal.py:743 +msgid "Service Options" +msgstr "" + +#: ipaserver/plugins/internal.py:744 +msgid "User Options" +msgstr "" + +#: ipaserver/plugins/internal.py:749 +msgid "Forward first" +msgstr "" + +#: ipaserver/plugins/internal.py:750 +msgid "Forwarding disabled" +msgstr "" + +#: ipaserver/plugins/internal.py:751 +msgid "Forward only" +msgstr "" + +#: ipaserver/plugins/internal.py:752 ipaserver/plugins/internal.py:1237 +#: ipaserver/plugins/internal.py:1487 ipaserver/plugins/internal.py:1593 +msgid "Options" +msgstr "" + +#: ipaserver/plugins/internal.py:753 +msgid "Update System DNS Records" +msgstr "" + +#: ipaserver/plugins/internal.py:754 +msgid "Do you want to update system DNS records?" +msgstr "" + +#: ipaserver/plugins/internal.py:755 +msgid "System DNS records updated" +msgstr "" + +#: ipaserver/plugins/internal.py:758 +msgid "Add DNS forward zone" +msgstr "" + +#: ipaserver/plugins/internal.py:759 +msgid "Remove DNS forward zones" +msgstr "" + +#: ipaserver/plugins/internal.py:762 +msgid "Add DNS resource record" +msgstr "" + +#: ipaserver/plugins/internal.py:764 +msgid "DNS record was deleted because it contained no data." +msgstr "" + +#: ipaserver/plugins/internal.py:765 +msgid "Other Record Types" +msgstr "" + +#: ipaserver/plugins/internal.py:766 +msgid "Address not valid, can't redirect" +msgstr "" + +#: ipaserver/plugins/internal.py:767 +msgid "Create dns record" +msgstr "" + +#: ipaserver/plugins/internal.py:768 +msgid "Creating record." +msgstr "" + +#: ipaserver/plugins/internal.py:769 +msgid "Record creation failed." +msgstr "" + +#: ipaserver/plugins/internal.py:770 +msgid "Checking if record exists." +msgstr "" + +#: ipaserver/plugins/internal.py:771 +msgid "Record not found." +msgstr "" + +#: ipaserver/plugins/internal.py:772 +msgid "Redirection to PTR record" +msgstr "" + +#: ipaserver/plugins/internal.py:773 +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#: ipaserver/plugins/internal.py:774 +msgid "Target reverse zone not found." +msgstr "" + +#: ipaserver/plugins/internal.py:775 +msgid "Fetching DNS zones." +msgstr "" + +#: ipaserver/plugins/internal.py:776 +msgid "An error occurred while fetching dns zones." +msgstr "" + +#: ipaserver/plugins/internal.py:777 +msgid "You will be redirected to DNS Zone." +msgstr "" + +#: ipaserver/plugins/internal.py:778 +msgid "Remove DNS resource records" +msgstr "" + +#: ipaserver/plugins/internal.py:779 +msgid "Standard Record Types" +msgstr "" + +#: ipaserver/plugins/internal.py:780 +msgid "Records for DNS Zone" +msgstr "" + +#: ipaserver/plugins/internal.py:781 +msgid "Record Type" +msgstr "" + +#: ipaserver/plugins/internal.py:784 +msgid "Add DNS zone" +msgstr "" + +#: ipaserver/plugins/internal.py:786 +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:787 +msgid "DNS Zone Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:788 +msgid "Remove DNS zones" +msgstr "" + +#: ipaserver/plugins/internal.py:789 +msgid "Remove Permission" +msgstr "" + +#: ipaserver/plugins/internal.py:790 +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:791 +msgid "Skip DNS check" +msgstr "" + +#: ipaserver/plugins/internal.py:792 +msgid "Skip overlap check" +msgstr "" + +#: ipaserver/plugins/internal.py:793 +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +#: ipaserver/plugins/internal.py:794 +msgid "Authoritative nameserver change" +msgstr "" + +#: ipaserver/plugins/internal.py:799 +msgid "Level" +msgstr "" + +#: ipaserver/plugins/internal.py:800 +msgid "Set Domain Level" +msgstr "" + +#: ipaserver/plugins/internal.py:803 +msgid "Add user group" +msgstr "" + +#: ipaserver/plugins/internal.py:805 +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:808 +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:811 +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:814 +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:817 +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:820 +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:823 +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:826 +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:829 +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:833 +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:837 +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:841 +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:845 +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:847 +msgid "Group Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:848 ipaserver/plugins/internal.py:1176 +#: ipaserver/plugins/internal.py:1482 +msgid "External" +msgstr "" + +#: ipaserver/plugins/internal.py:849 ipaserver/plugins/internal.py:1415 +msgid "Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:850 +msgid "Group categories" +msgstr "" + +#: ipaserver/plugins/internal.py:851 +msgid "Change to external group" +msgstr "" + +#: ipaserver/plugins/internal.py:852 +msgid "Change to POSIX group" +msgstr "" + +#: ipaserver/plugins/internal.py:853 +msgid "Non-POSIX" +msgstr "" + +#: ipaserver/plugins/internal.py:854 +msgid "POSIX" +msgstr "" + +#: ipaserver/plugins/internal.py:855 +msgid "Remove user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:857 +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:860 +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:863 +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:866 +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:869 +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:872 +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:875 +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:878 +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:881 +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:883 +msgid "Group Type" +msgstr "" + +#: ipaserver/plugins/internal.py:887 +msgid "Add HBAC rule" +msgstr "" + +#: ipaserver/plugins/internal.py:889 +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:892 +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:895 +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:898 +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:902 +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:905 +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:910 +msgid "Accessing" +msgstr "" + +#: ipaserver/plugins/internal.py:912 +msgid "Remove HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:914 +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:917 +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:920 +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:923 +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:927 +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:930 +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:932 +msgid "Via Service" +msgstr "" + +#: ipaserver/plugins/internal.py:936 ipaserver/plugins/internal.py:1531 +msgid "Who" +msgstr "" + +#: ipaserver/plugins/internal.py:939 +msgid "Add HBAC service" +msgstr "" + +#: ipaserver/plugins/internal.py:941 +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#: ipaserver/plugins/internal.py:944 +msgid "Remove HBAC services" +msgstr "" + +#: ipaserver/plugins/internal.py:946 +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#: ipaserver/plugins/internal.py:951 +msgid "Add HBAC service group" +msgstr "" + +#: ipaserver/plugins/internal.py:953 +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:956 +msgid "Remove HBAC service groups" +msgstr "" + +#: ipaserver/plugins/internal.py:958 +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:964 +msgid "Access Denied" +msgstr "" + +#: ipaserver/plugins/internal.py:965 +msgid "Access Granted" +msgstr "" + +#: ipaserver/plugins/internal.py:966 +msgid "Include Disabled" +msgstr "" + +#: ipaserver/plugins/internal.py:967 +msgid "Include Enabled" +msgstr "" + +#: ipaserver/plugins/internal.py:968 +msgid "HBAC Test" +msgstr "" + +#: ipaserver/plugins/internal.py:969 +msgid "Matched" +msgstr "" + +#: ipaserver/plugins/internal.py:970 +msgid "Missing values: " +msgstr "" + +#: ipaserver/plugins/internal.py:971 +msgid "New Test" +msgstr "" + +#: ipaserver/plugins/internal.py:972 +msgid "Rules" +msgstr "" + +#: ipaserver/plugins/internal.py:973 +msgid "Run Test" +msgstr "" + +#: ipaserver/plugins/internal.py:974 +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +#: ipaserver/plugins/internal.py:975 +msgid "Unmatched" +msgstr "" + +#: ipaserver/plugins/internal.py:978 +msgid "Add host" +msgstr "" + +#: ipaserver/plugins/internal.py:980 +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:983 +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:986 +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:989 +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:992 +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:995 +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:997 +msgid "Host Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:998 ipaserver/plugins/internal.py:1350 +msgid "Host Name" +msgstr "" + +#: ipaserver/plugins/internal.py:999 ipaserver/plugins/internal.py:1348 +msgid "Delete Key, Unprovision" +msgstr "" + +#: ipaserver/plugins/internal.py:1000 +msgid "Host Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1001 +msgid "Enrolled" +msgstr "" + +#: ipaserver/plugins/internal.py:1002 +msgid "Enrollment" +msgstr "" + +#: ipaserver/plugins/internal.py:1003 +msgid "Fully Qualified Host Name" +msgstr "" + +#: ipaserver/plugins/internal.py:1004 +msgid "Generate OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1005 +msgid "Generated OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1006 +msgid "Kerberos Key" +msgstr "" + +#: ipaserver/plugins/internal.py:1007 ipaserver/plugins/internal.py:1351 +msgid "Kerberos Key Not Present" +msgstr "" + +#: ipaserver/plugins/internal.py:1008 +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1009 ipaserver/plugins/internal.py:1738 +msgid "One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1010 +msgid "One-Time Password Not Present" +msgstr "" + +#: ipaserver/plugins/internal.py:1011 +msgid "One-Time Password Present" +msgstr "" + +#: ipaserver/plugins/internal.py:1012 +msgid "Reset OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1013 +msgid "Reset One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1014 +msgid "Set OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1015 +msgid "OTP set" +msgstr "" + +#: ipaserver/plugins/internal.py:1016 +msgid "Set One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1017 +msgid "Remove hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1019 +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1022 +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1025 +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1028 +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1031 +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1034 +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1037 ipaserver/plugins/internal.py:1362 +msgid "Unprovision" +msgstr "" + +#: ipaserver/plugins/internal.py:1038 +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +#: ipaserver/plugins/internal.py:1039 +msgid "Unprovisioning host" +msgstr "" + +#: ipaserver/plugins/internal.py:1040 +msgid "Host unprovisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1043 +msgid "Add host group" +msgstr "" + +#: ipaserver/plugins/internal.py:1045 +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1048 +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1051 +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1054 +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1057 +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1060 +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1063 +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1067 +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1071 +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1075 +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1079 +msgid "Host Group Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1080 +msgid "Remove host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1082 +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1085 +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1088 +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1091 +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1094 +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1097 +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1101 +msgid "Keycloak or Red Hat SSO" +msgstr "" + +#: ipaserver/plugins/internal.py:1102 +msgid "Google" +msgstr "" + +#: ipaserver/plugins/internal.py:1103 +msgid "Github" +msgstr "" + +#: ipaserver/plugins/internal.py:1104 +msgid "Microsoft or Azure" +msgstr "" + +#: ipaserver/plugins/internal.py:1105 +msgid "Okta" +msgstr "" + +#: ipaserver/plugins/internal.py:1106 +msgid "OAuth 2.0 client details" +msgstr "" + +#: ipaserver/plugins/internal.py:1107 +msgid "Identity provider details" +msgstr "" + +#: ipaserver/plugins/internal.py:1108 +msgid "Verify secret" +msgstr "" + +#: ipaserver/plugins/internal.py:1111 +msgid "User to override" +msgstr "" + +#: ipaserver/plugins/internal.py:1112 +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +#: ipaserver/plugins/internal.py:1113 +msgid "Enter trusted user login." +msgstr "" + +#: ipaserver/plugins/internal.py:1114 ipaserver/plugins/internal.py:1760 +msgid "Profile" +msgstr "" + +#: ipaserver/plugins/internal.py:1117 +msgid "Group to override" +msgstr "" + +#: ipaserver/plugins/internal.py:1118 +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#: ipaserver/plugins/internal.py:1119 +msgid "Enter trusted group name." +msgstr "" + +#: ipaserver/plugins/internal.py:1122 +msgid "Add ID view" +msgstr "" + +#: ipaserver/plugins/internal.py:1123 +msgid "Add group ID override" +msgstr "" + +#: ipaserver/plugins/internal.py:1124 +msgid "Add user ID override" +msgstr "" + +#: ipaserver/plugins/internal.py:1125 +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +#: ipaserver/plugins/internal.py:1126 ipaserver/plugins/internal.py:1127 +msgid "Applied to hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1128 +msgid "Apply to host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1130 +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1132 +msgid "Apply to hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1134 +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1137 +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +#: ipaserver/plugins/internal.py:1138 +msgid "Remove ID views" +msgstr "" + +#: ipaserver/plugins/internal.py:1139 +msgid "Remove user ID overrides" +msgstr "" + +#: ipaserver/plugins/internal.py:1140 +msgid "Remove group ID overrides" +msgstr "" + +#: ipaserver/plugins/internal.py:1141 +msgid "Un-apply from host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1142 +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1143 +msgid "Un-apply" +msgstr "" + +#: ipaserver/plugins/internal.py:1144 +msgid "Un-apply from hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1145 +msgid "Un-apply ID Views from hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1146 +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1148 +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1152 ipaserver/plugins/krbtpolicy.py:128 +#: ipaserver/plugins/krbtpolicy.py:129 +msgid "Kerberos Ticket Policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1155 +msgid "Add netgroup" +msgstr "" + +#: ipaserver/plugins/internal.py:1157 +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1160 +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1163 +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1166 +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1169 +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1172 +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1180 +msgid "Netgroup Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1182 +msgid "Remove netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1184 +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1187 +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1190 +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1193 +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1196 +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1199 +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1208 +msgid "Add OTP token" +msgstr "" + +#: ipaserver/plugins/internal.py:1210 +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1212 +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#: ipaserver/plugins/internal.py:1213 +msgid "Configure your token" +msgstr "" + +#: ipaserver/plugins/internal.py:1214 +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#: ipaserver/plugins/internal.py:1215 +msgid "OTP Token Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1216 +msgid "Disable token" +msgstr "" + +#: ipaserver/plugins/internal.py:1217 +msgid "Enable token" +msgstr "" + +#: ipaserver/plugins/internal.py:1218 +msgid "Remove OTP tokens" +msgstr "" + +#: ipaserver/plugins/internal.py:1220 +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1222 +msgid "Show QR code" +msgstr "" + +#: ipaserver/plugins/internal.py:1223 +msgid "Show configuration uri" +msgstr "" + +#: ipaserver/plugins/internal.py:1224 +msgid "Counter-based (HOTP)" +msgstr "" + +#: ipaserver/plugins/internal.py:1225 +msgid "Time-based (TOTP)" +msgstr "" + +#: ipaserver/plugins/internal.py:1228 +msgid "Add Passkey" +msgstr "" + +#: ipaserver/plugins/internal.py:1231 +#, python-brace-format +msgid "Do you want to remove passkey ${passkey}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1232 +msgid "Remove Passkey" +msgstr "" + +#: ipaserver/plugins/internal.py:1233 +msgid "(discoverable) " +msgstr "" + +#: ipaserver/plugins/internal.py:1234 +msgid "(server-side) " +msgstr "" + +#: ipaserver/plugins/internal.py:1240 +msgid "Add Custom Attribute" +msgstr "" + +#: ipaserver/plugins/internal.py:1243 +msgid "Permission settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1244 +msgid "Attribute breakdown" +msgstr "" + +#: ipaserver/plugins/internal.py:1248 +msgid "Privilege Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1251 +msgid "Public key:" +msgstr "" + +#: ipaserver/plugins/internal.py:1252 +msgid "Set public key" +msgstr "" + +#: ipaserver/plugins/internal.py:1253 ipaserver/plugins/internal.py:1372 +msgid "Show/Set key" +msgstr "" + +#: ipaserver/plugins/internal.py:1254 ipaserver/plugins/internal.py:1373 +msgid "Modified: key not set" +msgstr "" + +#: ipaserver/plugins/internal.py:1255 ipaserver/plugins/internal.py:1374 +msgid "Modified" +msgstr "" + +#: ipaserver/plugins/internal.py:1256 ipaserver/plugins/internal.py:1375 +msgid "New: key not set" +msgstr "" + +#: ipaserver/plugins/internal.py:1257 ipaserver/plugins/internal.py:1376 +msgid "New: key set" +msgstr "" + +#: ipaserver/plugins/internal.py:1260 +msgid "Add password policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1261 ipaserver/plugins/pwpolicy.py:302 +msgid "Password Policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1262 +msgid "Remove password policies" +msgstr "" + +#: ipaserver/plugins/internal.py:1265 +msgid "Add ID range" +msgstr "" + +#: ipaserver/plugins/internal.py:1266 +msgid "Range Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1268 ipaserver/plugins/internal.py:1398 +msgid "Base ID" +msgstr "" + +#: ipaserver/plugins/internal.py:1269 +msgid "Primary RID base" +msgstr "" + +#: ipaserver/plugins/internal.py:1270 ipaserver/plugins/internal.py:1405 +msgid "Range size" +msgstr "" + +#: ipaserver/plugins/internal.py:1271 +msgid "Domain SID" +msgstr "" + +#: ipaserver/plugins/internal.py:1272 +msgid "Secondary RID base" +msgstr "" + +#: ipaserver/plugins/internal.py:1273 +msgid "Remove ID ranges" +msgstr "" + +#: ipaserver/plugins/internal.py:1275 ipaserver/dcerpc_common.py:37 +msgid "Active Directory domain" +msgstr "" + +#: ipaserver/plugins/internal.py:1276 +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +#: ipaserver/plugins/internal.py:1277 +msgid "Detect" +msgstr "" + +#: ipaserver/plugins/internal.py:1278 +msgid "Local domain" +msgstr "" + +#: ipaserver/plugins/internal.py:1279 +msgid "IPA trust" +msgstr "" + +#: ipaserver/plugins/internal.py:1280 +msgid "Active Directory winsync" +msgstr "" + +#: ipaserver/plugins/internal.py:1283 +msgid "Add RADIUS server" +msgstr "" + +#: ipaserver/plugins/internal.py:1284 +msgid "RADIUS Proxy Server Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1285 +msgid "Remove RADIUS servers" +msgstr "" + +#: ipaserver/plugins/internal.py:1289 +msgid "Check DNS" +msgstr "" + +#: ipaserver/plugins/internal.py:1290 +msgid "Do you also want to perform DNS check?" +msgstr "" + +#: ipaserver/plugins/internal.py:1291 +msgid "Force Update" +msgstr "" + +#: ipaserver/plugins/internal.py:1296 +msgid "Add SELinux user map" +msgstr "" + +#: ipaserver/plugins/internal.py:1298 +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1301 +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1304 +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1307 +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1312 +msgid "Remove selinux user maps" +msgstr "" + +#: ipaserver/plugins/internal.py:1314 +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1317 +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1320 +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1323 +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1330 +msgid "Server Roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1331 +msgid "Server Role" +msgstr "" + +#: ipaserver/plugins/internal.py:1334 +msgid "Warning: Consider service replication" +msgstr "" + +#: ipaserver/plugins/internal.py:1335 +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#: ipaserver/plugins/internal.py:1336 +msgid "Delete Server" +msgstr "" + +#: ipaserver/plugins/internal.py:1337 +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#: ipaserver/plugins/internal.py:1340 +msgid "Add service" +msgstr "" + +#: ipaserver/plugins/internal.py:1342 +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1345 +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1347 +msgid "Service Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:1349 +msgid "Service Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1352 +msgid "Provisioning" +msgstr "" + +#: ipaserver/plugins/internal.py:1353 +msgid "Remove services" +msgstr "" + +#: ipaserver/plugins/internal.py:1355 +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1358 +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1363 +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +#: ipaserver/plugins/internal.py:1364 +msgid "Unprovisioning service" +msgstr "" + +#: ipaserver/plugins/internal.py:1365 +msgid "Service unprovisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1366 +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1369 +msgid "SSH public keys" +msgstr "" + +#: ipaserver/plugins/internal.py:1370 +msgid "SSH public key:" +msgstr "" + +#: ipaserver/plugins/internal.py:1371 +msgid "Set SSH key" +msgstr "" + +#: ipaserver/plugins/internal.py:1379 +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#: ipaserver/plugins/internal.py:1380 +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1381 +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +#: ipaserver/plugins/internal.py:1382 +msgid "Add stage user" +msgstr "" + +#: ipaserver/plugins/internal.py:1383 +msgid "Stage users" +msgstr "" + +#: ipaserver/plugins/internal.py:1384 +msgid "Preserved users" +msgstr "" + +#: ipaserver/plugins/internal.py:1385 +msgid "Remove preserved users" +msgstr "" + +#: ipaserver/plugins/internal.py:1386 +msgid "Remove stage users" +msgstr "" + +#: ipaserver/plugins/internal.py:1387 +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#: ipaserver/plugins/internal.py:1388 +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#: ipaserver/plugins/internal.py:1389 +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1390 +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#: ipaserver/plugins/internal.py:1391 +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1392 +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +#: ipaserver/plugins/internal.py:1393 +msgid "User categories" +msgstr "" + +#: ipaserver/plugins/internal.py:1396 +msgid "Add subid" +msgstr "" + +#: ipaserver/plugins/internal.py:1397 +msgid "Assigned subids" +msgstr "" + +#: ipaserver/plugins/internal.py:1399 +msgid "DNA remaining" +msgstr "" + +#: ipaserver/plugins/internal.py:1406 +msgid "Remaining subids" +msgstr "" + +#: ipaserver/plugins/internal.py:1407 +msgid "Subordinate ID Statistics" +msgstr "" + +#: ipaserver/plugins/internal.py:1410 +msgid "Add sudo command" +msgstr "" + +#: ipaserver/plugins/internal.py:1412 +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1416 +msgid "Remove sudo commands" +msgstr "" + +#: ipaserver/plugins/internal.py:1418 +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1423 +msgid "Add sudo command group" +msgstr "" + +#: ipaserver/plugins/internal.py:1425 +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1429 +msgid "Remove sudo command groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1431 +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1436 +msgid "Add sudo rule" +msgstr "" + +#: ipaserver/plugins/internal.py:1437 +msgid "Add sudo option" +msgstr "" + +#: ipaserver/plugins/internal.py:1439 +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1443 +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1447 +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1451 +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1455 +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1458 +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1461 +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1464 +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1467 +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1470 +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1473 +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1475 +msgid "Allow" +msgstr "" + +#: ipaserver/plugins/internal.py:1476 +msgid "Any Command" +msgstr "" + +#: ipaserver/plugins/internal.py:1477 +msgid "Any Group" +msgstr "" + +#: ipaserver/plugins/internal.py:1480 +msgid "Run Commands" +msgstr "" + +#: ipaserver/plugins/internal.py:1481 +msgid "Deny" +msgstr "" + +#: ipaserver/plugins/internal.py:1483 +msgid "Access this host" +msgstr "" + +#: ipaserver/plugins/internal.py:1485 +msgid "Option added" +msgstr "" + +#: ipaserver/plugins/internal.py:1486 +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +#: ipaserver/plugins/internal.py:1488 +msgid "Remove sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1490 +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1494 +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1498 +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1502 +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1506 +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1509 +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1512 +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1515 +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1518 +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1521 +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1524 +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1526 +msgid "As Whom" +msgstr "" + +#: ipaserver/plugins/internal.py:1527 +msgid "Specified Commands and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1528 +msgid "Specified Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1534 +msgid "Remove sudo options" +msgstr "" + +#: ipaserver/plugins/internal.py:1537 +msgid "Autogenerated" +msgstr "" + +#: ipaserver/plugins/internal.py:1538 +msgid "Segment details" +msgstr "" + +#: ipaserver/plugins/internal.py:1539 +msgid "Replication configuration" +msgstr "" + +#: ipaserver/plugins/internal.py:1540 +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +#: ipaserver/plugins/internal.py:1543 +msgid "Add IPA location" +msgstr "" + +#: ipaserver/plugins/internal.py:1545 +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1547 +msgid "Remove IPA locations" +msgstr "" + +#: ipaserver/plugins/internal.py:1549 +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1553 +msgid "Add topology segment" +msgstr "" + +#: ipaserver/plugins/internal.py:1554 +msgid "Remove topology segments" +msgstr "" + +#: ipaserver/plugins/internal.py:1557 +msgid "Account" +msgstr "" + +#: ipaserver/plugins/internal.py:1558 +msgid "Add trust" +msgstr "" + +#: ipaserver/plugins/internal.py:1559 +msgid "Administrative account" +msgstr "" + +#: ipaserver/plugins/internal.py:1560 +msgid "SID blocklists" +msgstr "" + +#: ipaserver/plugins/internal.py:1561 +msgid "Trust Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1563 +msgid "Establish using" +msgstr "" + +#: ipaserver/plugins/internal.py:1564 +msgid "Fetch domains" +msgstr "" + +#: ipaserver/plugins/internal.py:1567 +msgid "Pre-shared password" +msgstr "" + +#: ipaserver/plugins/internal.py:1568 +msgid "Remove trusts" +msgstr "" + +#: ipaserver/plugins/internal.py:1569 +msgid "Remove domains" +msgstr "" + +#: ipaserver/plugins/internal.py:1570 ipaserver/plugins/trust.py:559 +msgid "Trust direction" +msgstr "" + +#: ipaserver/plugins/internal.py:1571 ipaserver/plugins/trust.py:567 +msgid "Trust status" +msgstr "" + +#: ipaserver/plugins/internal.py:1572 ipaserver/plugins/trust.py:563 +msgid "Trust type" +msgstr "" + +#: ipaserver/plugins/internal.py:1573 +msgid "Alternative UPN suffixes" +msgstr "" + +#: ipaserver/plugins/internal.py:1577 +msgid "User attributes for SMB services" +msgstr "" + +#: ipaserver/plugins/internal.py:1580 +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +#: ipaserver/plugins/internal.py:1583 +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +#: ipaserver/plugins/internal.py:1586 +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#: ipaserver/plugins/internal.py:1589 +msgid "Drive to mount a home directory" +msgstr "" + +#: ipaserver/plugins/internal.py:1596 +msgid "Account Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1597 +msgid "Account Status" +msgstr "" + +#: ipaserver/plugins/internal.py:1598 +msgid "Active users" +msgstr "" + +#: ipaserver/plugins/internal.py:1599 +msgid "Add user" +msgstr "" + +#: ipaserver/plugins/internal.py:1601 +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1604 +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1607 +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1610 +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1613 +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1615 +msgid "Auto assign subordinate ids" +msgstr "" + +#: ipaserver/plugins/internal.py:1617 +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1620 +msgid "Contact Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1621 +msgid "Delete mode" +msgstr "" + +#: ipaserver/plugins/internal.py:1622 +msgid "Employee Information" +msgstr "" + +#: ipaserver/plugins/internal.py:1623 +msgid "Error changing account status" +msgstr "" + +#: ipaserver/plugins/internal.py:1624 +msgid "Password expiration" +msgstr "" + +#: ipaserver/plugins/internal.py:1625 +msgid "Mailing Address" +msgstr "" + +#: ipaserver/plugins/internal.py:1626 +msgid "Misc. Information" +msgstr "" + +#: ipaserver/plugins/internal.py:1627 +msgid "delete" +msgstr "" + +#: ipaserver/plugins/internal.py:1628 +msgid "preserve" +msgstr "" + +#: ipaserver/plugins/internal.py:1629 +msgid "No private group" +msgstr "" + +#: ipaserver/plugins/internal.py:1630 +msgid "Remove users" +msgstr "" + +#: ipaserver/plugins/internal.py:1632 +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1635 +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1638 +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1641 +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1644 +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1646 +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#: ipaserver/plugins/internal.py:1647 +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +#: ipaserver/plugins/internal.py:1648 +msgid "Unlock" +msgstr "" + +#: ipaserver/plugins/internal.py:1649 +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1652 +msgid "Add vault" +msgstr "" + +#: ipaserver/plugins/internal.py:1654 +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1657 +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1660 +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1663 +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1666 +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1669 +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1672 +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +#: ipaserver/plugins/internal.py:1676 +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +#: ipaserver/plugins/internal.py:1679 +msgid "Asymmetric" +msgstr "" + +#: ipaserver/plugins/internal.py:1680 +msgid "Vaults Config" +msgstr "" + +#: ipaserver/plugins/internal.py:1682 +msgid "Members" +msgstr "" + +#: ipaserver/plugins/internal.py:1683 +msgid "My User Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1684 +msgid "Owners" +msgstr "" + +#: ipaserver/plugins/internal.py:1685 +msgid "Remove vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1687 +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1690 +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1693 +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1696 +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1699 +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1702 +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1705 +msgid "Service Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1706 +msgid "Shared" +msgstr "" + +#: ipaserver/plugins/internal.py:1707 +msgid "Shared Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1708 +msgid "Standard" +msgstr "" + +#: ipaserver/plugins/internal.py:1709 +msgid "Symmetric" +msgstr "" + +#: ipaserver/plugins/internal.py:1710 +msgid "Vault Type" +msgstr "" + +#: ipaserver/plugins/internal.py:1712 +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#: ipaserver/plugins/internal.py:1716 +msgid "User Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1721 +msgid "Current password is required" +msgstr "" + +#: ipaserver/plugins/internal.py:1722 +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#: ipaserver/plugins/internal.py:1723 +msgid "First OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1727 +msgid "New password is required" +msgstr "" + +#: ipaserver/plugins/internal.py:1730 +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +#: ipaserver/plugins/internal.py:1734 +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +#: ipaserver/plugins/internal.py:1739 +msgid "Token synchronization failed" +msgstr "" + +#: ipaserver/plugins/internal.py:1740 +msgid "The username, password or token codes are not correct" +msgstr "" + +#: ipaserver/plugins/internal.py:1741 +msgid "Token was synchronized" +msgstr "" + +#: ipaserver/plugins/internal.py:1744 +msgid "Password change complete" +msgstr "" + +#: ipaserver/plugins/internal.py:1746 +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#: ipaserver/plugins/internal.py:1747 +msgid "Passwords must match" +msgstr "" + +#: ipaserver/plugins/internal.py:1748 +msgid "Password reset was not successful." +msgstr "" + +#: ipaserver/plugins/internal.py:1750 +msgid "Reset your password." +msgstr "" + +#: ipaserver/plugins/internal.py:1751 +msgid "Second OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1753 +msgid "Verify Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1763 +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1764 +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +#: ipaserver/plugins/internal.py:1765 +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1766 +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +#: ipaserver/plugins/internal.py:1767 +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1768 +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +#: ipaserver/plugins/internal.py:1769 +msgid "Some entries were not deleted" +msgstr "" + +#: ipaserver/plugins/internal.py:1772 +msgid "Quick Links" +msgstr "" + +#: ipaserver/plugins/internal.py:1773 +msgid "Select All" +msgstr "" + +#: ipaserver/plugins/internal.py:1774 +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +#: ipaserver/plugins/internal.py:1775 +msgid "Unselect All" +msgstr "" + +#: ipaserver/plugins/internal.py:1779 +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1783 +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1795 +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1831 +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1843 +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1872 +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1917 +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1928 +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1965 +msgid "Working" +msgstr "" + +#: ipaserver/plugins/internal.py:1968 +msgid "Audit" +msgstr "" + +#: ipaserver/plugins/internal.py:1969 +msgid "Authentication" +msgstr "" + +#: ipaserver/plugins/internal.py:1971 +msgid "Automount" +msgstr "" + +#: ipaserver/plugins/internal.py:1973 +msgid "DNS" +msgstr "" + +#: ipaserver/plugins/internal.py:1974 +msgid "Host-Based Access Control" +msgstr "" + +#: ipaserver/plugins/internal.py:1975 +msgid "Identity" +msgstr "" + +#: ipaserver/plugins/internal.py:1977 +msgid "Network Services" +msgstr "" + +#: ipaserver/plugins/internal.py:1978 +msgid "Policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1979 +msgid "Role-Based Access Control" +msgstr "" + +#: ipaserver/plugins/internal.py:1980 +msgid "Subordinate IDs" +msgstr "" + +#: ipaserver/plugins/internal.py:1981 +msgid "Sudo" +msgstr "" + +#: ipaserver/plugins/internal.py:1982 +msgid "Topology" +msgstr "" + +#: ipaserver/plugins/internal.py:1983 ipaserver/plugins/trust.py:533 +msgid "Trusts" +msgstr "" + +#: ipaserver/plugins/internal.py:1985 +msgid "True" +msgstr "" + +#: ipaserver/plugins/internal.py:1987 +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +#: ipaserver/plugins/internal.py:2004 +msgid "API Browser" +msgstr "" + +#: ipaserver/plugins/internal.py:2005 +msgid "First" +msgstr "" + +#: ipaserver/plugins/internal.py:2006 +msgid "Last" +msgstr "" + +#: ipaserver/plugins/internal.py:2007 +msgid "Next" +msgstr "" + +#: ipaserver/plugins/internal.py:2008 +msgid "Page" +msgstr "" + +#: ipaserver/plugins/internal.py:2009 +msgid "Prev" +msgstr "" + +#: ipaserver/plugins/internal.py:2010 +msgid "Undo" +msgstr "" + +#: ipaserver/plugins/internal.py:2011 +msgid "Undo this change." +msgstr "" + +#: ipaserver/plugins/internal.py:2012 +msgid "Undo All" +msgstr "" + +#: ipaserver/plugins/internal.py:2013 +msgid "Undo all changes in this field." +msgstr "" + +#: ipaserver/plugins/internal.py:2015 +msgid "Text does not match field pattern" +msgstr "" + +#: ipaserver/plugins/internal.py:2016 +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#: ipaserver/plugins/internal.py:2017 +msgid "Must be a decimal number" +msgstr "" + +#: ipaserver/plugins/internal.py:2018 +msgid "Format error" +msgstr "" + +#: ipaserver/plugins/internal.py:2019 +msgid "Must be an integer" +msgstr "" + +#: ipaserver/plugins/internal.py:2020 +msgid "Not a valid IP address" +msgstr "" + +#: ipaserver/plugins/internal.py:2021 +msgid "Not a valid IPv4 address" +msgstr "" + +#: ipaserver/plugins/internal.py:2022 +msgid "Not a valid IPv6 address" +msgstr "" + +#: ipaserver/plugins/internal.py:2023 +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#: ipaserver/plugins/internal.py:2024 +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +#: ipaserver/plugins/internal.py:2025 +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#: ipaserver/plugins/internal.py:2026 +msgid "Parse error" +msgstr "" + +#: ipaserver/plugins/internal.py:2027 +msgid "Must be a positive number" +msgstr "" + +#: ipaserver/plugins/internal.py:2028 +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#: ipaserver/plugins/internal.py:2029 +msgid "Required field" +msgstr "" + +#: ipaserver/plugins/internal.py:2030 +msgid "Unsupported value" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:86 +msgid "kerberos ticket policy settings" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:152 +msgid "OTP max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:153 +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:157 +msgid "OTP max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:158 +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:162 +msgid "RADIUS max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:163 +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:167 +msgid "RADIUS max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:168 +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:172 +msgid "PKINIT max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:173 +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:177 +msgid "PKINIT max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:178 +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:182 +msgid "Hardened max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:183 +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:187 +msgid "Hardened max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:188 +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:192 +msgid "IdP max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:193 +msgid "External Identity Provider ticket maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:198 +msgid "IdP max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:199 +msgid "External Identity Provider ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:204 +msgid "Passkey max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:205 +msgid "Passkey ticket maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:209 +msgid "Passkey max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:210 +msgid "Passkey ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:294 +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:314 +msgid "Default ticket policy could not be read" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:19 +msgid "" +"\n" +"Passkey configuration\n" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:21 +msgid "" +"\n" +"Manage Passkey configuration.\n" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:23 +msgid "" +"\n" +"IPA supports the use of passkeys for authentication. A passkey\n" +"device has to be registered to SSSD and the resulting authentication " +"mapping\n" +"stored in the user entry.\n" +"The passkey authentication supports the following configuration option:\n" +"require user verification. When set, the method for user verification " +"depends\n" +"on the type of device (PIN, fingerprint, external pad...)\n" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:32 +msgid "" +"\n" +" Display the Passkey configuration:\n" +" ipa passkeyconfig-show\n" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:35 +msgid "" +"\n" +" Modify the Passkey configuration to always require user verification:\n" +" ipa passkeyconfig-mod --require-user-verification=TRUE\n" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:48 +msgid "Passkey configuration options" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:52 ipaserver/plugins/passkeyconfig.py:53 +msgid "Passkey Configuration" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:59 +msgid "Require user verification" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:60 +msgid "Require user verification during authentication" +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:89 +msgid "Modify Passkey configuration." +msgstr "" + +#: ipaserver/plugins/passkeyconfig.py:94 +msgid "Show the current Passkey configuration." +msgstr "" + #: ipaserver/plugins/permission.py:41 msgid "" "\n" @@ -19551,10 +25661,6 @@ msgstr "" msgid "Password Policies" msgstr "" -#: ipaserver/plugins/pwpolicy.py:302 ipaserver/plugins/internal.py:1248 -msgid "Password Policy" -msgstr "" - #: ipaserver/plugins/pwpolicy.py:374 msgid "Max repeat" msgstr "" @@ -19613,6802 +25719,6 @@ msgstr "" msgid "priority cannot be set on global policy" msgstr "" -#: ipaserver/plugins/vault.py:52 -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#: ipaserver/plugins/vault.py:54 -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:56 -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:60 -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -#: ipaserver/plugins/vault.py:65 -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:70 -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -#: ipaserver/plugins/vault.py:76 -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:80 -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:84 -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:90 -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:94 -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -#: ipaserver/plugins/vault.py:99 -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:104 -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -#: ipaserver/plugins/vault.py:109 -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:113 -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -#: ipaserver/plugins/vault.py:118 -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:125 -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -#: ipaserver/plugins/vault.py:138 -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -#: ipaserver/plugins/vault.py:144 -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:148 -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -#: ipaserver/plugins/vault.py:151 -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -#: ipaserver/plugins/vault.py:156 -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:162 -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -#: ipaserver/plugins/vault.py:167 -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -#: ipaserver/plugins/vault.py:172 -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:178 -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -#: ipaserver/plugins/vault.py:183 -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:188 -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:193 -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:198 -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:250 -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#: ipaserver/plugins/vault.py:256 -msgid "vaultcontainer" -msgstr "" - -#: ipaserver/plugins/vault.py:257 -msgid "vaultcontainers" -msgstr "" - -#: ipaserver/plugins/vault.py:265 -msgid "Vault Containers" -msgstr "" - -#: ipaserver/plugins/vault.py:266 -msgid "Vault Container" -msgstr "" - -#: ipaserver/plugins/vault.py:355 -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:365 ipaserver/plugins/vault.py:695 -msgid "Host is not supported" -msgstr "" - -#: ipaserver/plugins/vault.py:407 ipaserver/plugins/vault.py:431 -#: ipaserver/plugins/vault.py:798 ipaserver/plugins/vault.py:836 -#: ipaserver/plugins/vault.py:892 ipaserver/plugins/vault.py:948 -#: ipaserver/plugins/vault.py:970 ipaserver/plugins/vault.py:1011 -#: ipaserver/plugins/vault.py:1067 ipaserver/plugins/vault.py:1146 -msgid "KRA service is not enabled" -msgstr "" - -#: ipaserver/plugins/vault.py:422 -msgid "Deleted vault container" -msgstr "" - -#: ipaserver/plugins/vault.py:447 ipaserver/plugins/vault.py:472 -#: ipaserver/plugins/vault.py:1203 ipaserver/plugins/vault.py:1228 -#, python-format -msgid "owner %s" -msgstr "" - -#: ipaserver/plugins/vault.py:492 -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#: ipaserver/plugins/vault.py:498 -msgid "vault" -msgstr "" - -#: ipaserver/plugins/vault.py:499 -msgid "vaults" -msgstr "" - -#: ipaserver/plugins/vault.py:522 -msgid "Vaults" -msgstr "" - -#: ipaserver/plugins/vault.py:523 -msgid "Vault" -msgstr "" - -#: ipaserver/plugins/vault.py:680 -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:784 -msgid "Add a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:790 -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:829 -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:881 -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/vault.py:899 -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:939 -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:981 -msgid "Vault configuration" -msgstr "" - -#: ipaserver/plugins/vault.py:991 -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#: ipaserver/plugins/vault.py:1052 ipaserver/plugins/vault.py:1131 -msgid "Key wrapping algorithm" -msgstr "" - -#: ipaserver/plugins/vault.py:1061 -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:1120 -msgid "Retrieve data from a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:1140 -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:1169 -msgid "No archived data." -msgstr "" - -#: ipaserver/plugins/vault.py:1262 -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#: ipaserver/plugins/otptoken.py:42 -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:44 -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:46 -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:51 -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:54 -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:57 -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:60 -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:137 -msgid "OTP token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:138 -msgid "OTP tokens" -msgstr "" - -#: ipaserver/plugins/otptoken.py:154 -msgid "OTP Tokens" -msgstr "" - -#: ipaserver/plugins/otptoken.py:155 -msgid "OTP Token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:272 -msgid "URI" -msgstr "" - -#: ipaserver/plugins/otptoken.py:281 -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:335 -msgid "cannot be empty" -msgstr "" - -#: ipaserver/plugins/otptoken.py:367 -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:373 -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:422 -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/ca.py:21 -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -#: ipaserver/plugins/ca.py:23 -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:26 -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:29 -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:33 -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:38 -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -#: ipaserver/plugins/ca.py:44 -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:48 -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:52 -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:80 -msgid "Certificate Authority" -msgstr "" - -#: ipaserver/plugins/ca.py:70 ipaserver/plugins/ca.py:79 -msgid "Certificate Authorities" -msgstr "" - -#: ipaserver/plugins/ca.py:86 ipaserver/plugins/schema.py:48 -#: ipaserver/plugins/trust.py:1422 -msgid "Name" -msgstr "" - -#: ipaserver/plugins/ca.py:87 -msgid "Name for referencing the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:92 -msgid "Description of the purpose of the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:96 -msgid "Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:97 -msgid "Dogtag Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:102 ipaserver/plugins/ca.py:296 -msgid "Subject DN" -msgstr "" - -#: ipaserver/plugins/ca.py:103 -msgid "Subject Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:108 ipaserver/plugins/cert.py:427 -msgid "Issuer DN" -msgstr "" - -#: ipaserver/plugins/ca.py:109 -msgid "Issuer Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:115 ipaserver/plugins/cert.py:355 -msgid "Base-64 encoded certificate." -msgstr "" - -#: ipaserver/plugins/ca.py:120 ipaserver/plugins/cert.py:360 -msgid "Certificate chain" -msgstr "" - -#: ipaserver/plugins/ca.py:121 ipaserver/plugins/cert.py:361 -msgid "X.509 certificate chain" -msgstr "" - -#: ipaserver/plugins/ca.py:127 -msgid "RSN Version" -msgstr "" - -#: ipaserver/plugins/ca.py:128 -msgid "Random Serial Number Version" -msgstr "" - -#: ipaserver/plugins/ca.py:228 -msgid "Search for CAs." -msgstr "" - -#: ipaserver/plugins/ca.py:230 -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/ca.py:247 ipaserver/plugins/cert.py:597 -msgid "Include certificate chain in output" -msgstr "" - -#: ipaserver/plugins/ca.py:253 -msgid "Display the properties of a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:270 -msgid "Create a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:271 -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:281 -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#: ipaserver/plugins/ca.py:297 -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/ca.py:312 -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -#: ipaserver/plugins/ca.py:336 -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#: ipaserver/plugins/ca.py:338 -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:347 -msgid "Insufficient privilege to delete a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:351 ipaserver/plugins/ca.py:360 -#: ipaserver/plugins/ca.py:379 ipaserver/plugins/ca.py:419 -#: ipaserver/plugins/internal.py:641 -msgid "CA" -msgstr "" - -#: ipaserver/plugins/ca.py:353 -msgid "IPA CA cannot be deleted" -msgstr "" - -#: ipaserver/plugins/ca.py:362 -msgid "Must be disabled first" -msgstr "" - -#: ipaserver/plugins/ca.py:370 -msgid "Modify CA configuration." -msgstr "" - -#: ipaserver/plugins/ca.py:371 -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:397 -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:413 -msgid "Disable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:414 -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:421 -msgid "IPA CA cannot be disabled" -msgstr "" - -#: ipaserver/plugins/ca.py:431 -msgid "Enable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:432 -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:218 -msgid "automount location" -msgstr "" - -#: ipaserver/plugins/automount.py:219 -msgid "automount locations" -msgstr "" - -#: ipaserver/plugins/automount.py:222 -msgid "Automount Locations" -msgstr "" - -#: ipaserver/plugins/automount.py:223 -msgid "Automount Location" -msgstr "" - -#: ipaserver/plugins/automount.py:263 -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:283 -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:296 -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automount.py:349 -msgid "automount map" -msgstr "" - -#: ipaserver/plugins/automount.py:350 -msgid "automount maps" -msgstr "" - -#: ipaserver/plugins/automount.py:393 -msgid "Automount Maps" -msgstr "" - -#: ipaserver/plugins/automount.py:394 -msgid "Automount Map" -msgstr "" - -#: ipaserver/plugins/automount.py:401 -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:408 -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:428 -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:436 -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automount.py:448 -msgid "Automount key object." -msgstr "" - -#: ipaserver/plugins/automount.py:452 -msgid "automount key" -msgstr "" - -#: ipaserver/plugins/automount.py:453 -msgid "automount keys" -msgstr "" - -#: ipaserver/plugins/automount.py:512 -msgid "Automount Keys" -msgstr "" - -#: ipaserver/plugins/automount.py:513 -msgid "Automount Key" -msgstr "" - -#: ipaserver/plugins/automount.py:514 -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#: ipaserver/plugins/automount.py:515 -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#: ipaserver/plugins/automount.py:516 -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#: ipaserver/plugins/automount.py:566 -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#: ipaserver/plugins/automount.py:625 -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:654 -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:678 -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#: ipaserver/plugins/automount.py:707 -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:748 -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:807 -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/baseldap.py:101 -msgid "Member service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:110 -msgid "Member HBAC service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:127 -msgid "Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:129 -msgid "Indirect Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:146 -msgid "Indirect Member permissions" -msgstr "" - -#: ipaserver/plugins/baseldap.py:149 -msgid "Indirect Member HBAC service" -msgstr "" - -#: ipaserver/plugins/baseldap.py:152 -msgid "Indirect Member HBAC service group" -msgstr "" - -#: ipaserver/plugins/baseldap.py:213 -msgid "Invalid format. Should be name=value" -msgstr "" - -#: ipaserver/plugins/baseldap.py:584 -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -#: ipaserver/plugins/baseldap.py:615 -msgid "entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:616 -msgid "entries" -msgstr "" - -#: ipaserver/plugins/baseldap.py:654 ipaserver/plugins/baseldap.py:655 -msgid "Entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:658 -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:659 -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:660 ipaserver/plugins/schema.py:257 -#: ipaserver/plugins/schema.py:333 ipaserver/plugins/schema.py:424 -#: ipaserver/plugins/schema.py:663 ipaserver/plugins/schema.py:756 -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:661 -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#: ipaserver/plugins/baseldap.py:954 ipaserver/plugins/baseldap.py:962 -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:967 -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1025 -msgid "attribute is not configurable" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1128 -msgid "No such attribute on this entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1488 -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1586 ipaserver/plugins/baseldap.py:2494 -msgid "the entry was deleted while being modified" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1719 ipaserver/plugins/baseldap.py:2221 -#, python-format -msgid "%s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1762 ipaserver/plugins/baseldap.py:2245 -#, python-format -msgid "%s to add" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1861 ipaserver/plugins/baseldap.py:2344 -#, python-format -msgid "%s to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1961 ipaserver/plugins/schema.py:122 -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1969 -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1970 -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:2525 -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2539 -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2548 -msgid "one or more values to remove" -msgstr "" - -#: ipaserver/plugins/cert.py:70 -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -#: ipaserver/plugins/cert.py:72 -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:74 -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:77 -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:80 -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:83 -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:85 -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -#: ipaserver/plugins/cert.py:88 -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:90 -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:93 -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:96 -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:98 -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:102 -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#: ipaserver/plugins/cert.py:105 -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:108 -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:111 -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:114 -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -#: ipaserver/plugins/cert.py:117 -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#: ipaserver/plugins/cert.py:120 -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -#: ipaserver/plugins/cert.py:123 -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -#: ipaserver/plugins/cert.py:126 -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:129 -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -#: ipaserver/plugins/cert.py:132 -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:135 -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:139 -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:142 -msgid " * 0 - unspecified\n" -msgstr "" - -#: ipaserver/plugins/cert.py:143 -msgid " * 1 - keyCompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:144 -msgid " * 2 - cACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:145 -msgid " * 3 - affiliationChanged\n" -msgstr "" - -#: ipaserver/plugins/cert.py:146 -msgid " * 4 - superseded\n" -msgstr "" - -#: ipaserver/plugins/cert.py:147 -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#: ipaserver/plugins/cert.py:148 -msgid " * 6 - certificateHold\n" -msgstr "" - -#: ipaserver/plugins/cert.py:149 -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#: ipaserver/plugins/cert.py:150 -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -#: ipaserver/plugins/cert.py:151 -msgid " * 10 - aACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:152 -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:154 -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:290 -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -#: ipaserver/plugins/cert.py:310 -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#: ipaserver/plugins/cert.py:314 -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -#: ipaserver/plugins/cert.py:348 -msgid "Issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:349 -msgid "Name of issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:371 -msgid "Subject email address" -msgstr "" - -#: ipaserver/plugins/cert.py:376 -msgid "Subject DNS name" -msgstr "" - -#: ipaserver/plugins/cert.py:381 -msgid "Subject X.400 address" -msgstr "" - -#: ipaserver/plugins/cert.py:386 -msgid "Subject directory name" -msgstr "" - -#: ipaserver/plugins/cert.py:391 -msgid "Subject EDI Party name" -msgstr "" - -#: ipaserver/plugins/cert.py:396 -msgid "Subject URI" -msgstr "" - -#: ipaserver/plugins/cert.py:401 -msgid "Subject IP Address" -msgstr "" - -#: ipaserver/plugins/cert.py:406 -msgid "Subject OID" -msgstr "" - -#: ipaserver/plugins/cert.py:411 -msgid "Subject UPN" -msgstr "" - -#: ipaserver/plugins/cert.py:416 -msgid "Subject Kerberos principal name" -msgstr "" - -#: ipaserver/plugins/cert.py:421 -msgid "Subject Other Name" -msgstr "" - -#: ipaserver/plugins/cert.py:432 ipaserver/plugins/host.py:552 -#: ipaserver/plugins/service.py:577 -msgid "Not Before" -msgstr "" - -#: ipaserver/plugins/cert.py:437 ipaserver/plugins/host.py:556 -#: ipaserver/plugins/service.py:581 -msgid "Not After" -msgstr "" - -#: ipaserver/plugins/cert.py:442 ipaserver/plugins/host.py:560 -#: ipaserver/plugins/service.py:585 -msgid "Fingerprint (SHA1)" -msgstr "" - -#: ipaserver/plugins/cert.py:447 ipaserver/plugins/host.py:564 -#: ipaserver/plugins/service.py:589 -msgid "Fingerprint (SHA256)" -msgstr "" - -#: ipaserver/plugins/cert.py:459 -msgid "Serial number (hex)" -msgstr "" - -#: ipaserver/plugins/cert.py:582 -msgid "Request status" -msgstr "" - -#: ipaserver/plugins/cert.py:628 -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#: ipaserver/plugins/cert.py:677 -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -#: ipaserver/plugins/cert.py:729 -msgid "No Common Name was found in subject of request." -msgstr "" - -#: ipaserver/plugins/cert.py:737 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#: ipaserver/plugins/cert.py:743 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -#: ipaserver/plugins/cert.py:752 -msgid "DN commonName does not match user's login" -msgstr "" - -#: ipaserver/plugins/cert.py:766 -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#: ipaserver/plugins/cert.py:775 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/cert.py:796 ipaserver/plugins/cert.py:914 -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#: ipaserver/plugins/cert.py:841 -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#: ipaserver/plugins/cert.py:872 -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#: ipaserver/plugins/cert.py:890 -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -#: ipaserver/plugins/cert.py:899 -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#: ipaserver/plugins/cert.py:906 -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#: ipaserver/plugins/cert.py:923 -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#: ipaserver/plugins/cert.py:941 -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#: ipaserver/plugins/cert.py:1028 -msgid "'add' option" -msgstr "" - -#: ipaserver/plugins/cert.py:1032 -msgid "The principal for this request doesn't exist." -msgstr "" - -#: ipaserver/plugins/cert.py:1148 -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#: ipaserver/plugins/cert.py:1165 -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#: ipaserver/plugins/cert.py:1177 -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -#: ipaserver/plugins/cert.py:1271 ipaserver/plugins/internal.py:705 -#: ipaserver/plugins/internal.py:1035 ipaserver/plugins/internal.py:1348 -#: ipaserver/plugins/internal.py:1951 -msgid "Status" -msgstr "" - -#: ipaserver/plugins/cert.py:1276 -msgid "Revoked" -msgstr "" - -#: ipaserver/plugins/cert.py:1281 ipaserver/plugins/host.py:568 -#: ipaserver/plugins/internal.py:655 ipaserver/plugins/internal.py:696 -#: ipaserver/plugins/service.py:593 -msgid "Revocation reason" -msgstr "" - -#: ipaserver/plugins/cert.py:1282 -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#: ipaserver/plugins/cert.py:1304 -#, python-format -msgid "Owner %s" -msgstr "" - -#: ipaserver/plugins/cert.py:1391 -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#: ipaserver/plugins/cert.py:1460 -msgid "7 is not a valid revocation reason" -msgstr "" - -#: ipaserver/plugins/cert.py:1560 -msgid "Status of the certificate" -msgstr "" - -#: ipaserver/plugins/cert.py:1566 -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#: ipaserver/plugins/cert.py:1582 -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/cert.py:1604 -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#: ipaserver/plugins/cert.py:1615 -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1251 -msgid "REST API is not logged in." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1273 -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1299 -msgid "Unable to communicate with CMS" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1490 ipaserver/plugins/dogtag.py:1576 -#: ipaserver/plugins/dogtag.py:2098 ipaserver/plugins/dogtag.py:2108 -msgid "Response from CA was not valid JSON" -msgstr "" - -#: ipaserver/plugins/group.py:62 -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from " -"\"localadmins\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#: ipaserver/plugins/group.py:195 -msgid "groups" -msgstr "" - -#: ipaserver/plugins/group.py:328 -msgid "User Group" -msgstr "" - -#: ipaserver/plugins/group.py:360 -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:383 -msgid "gid cannot be set for external group" -msgstr "" - -#: ipaserver/plugins/group.py:395 -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#: ipaserver/plugins/group.py:404 -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:418 -msgid "privileged group" -msgstr "" - -#: ipaserver/plugins/group.py:451 -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:526 -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/group.py:635 ipaserver/plugins/group.py:692 -#: ipaserver/plugins/trust.py:877 -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/group.py:726 -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:751 -msgid "not allowed to modify user entries" -msgstr "" - -#: ipaserver/plugins/group.py:762 -msgid "not allowed to modify group entries" -msgstr "" - -#: ipaserver/plugins/group.py:782 -msgid "Not a managed group" -msgstr "" - -#: ipaserver/plugins/group.py:804 -msgid "Add users that can manage members of this group." -msgstr "" - -#: ipaserver/plugins/group.py:812 -msgid "Remove users that can manage members of this group." -msgstr "" - -#: ipaserver/plugins/host.py:74 -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -#: ipaserver/plugins/host.py:82 -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -#: ipaserver/plugins/host.py:94 -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -#: ipaserver/plugins/host.py:106 -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/host.py:109 -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:112 -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:115 -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:118 -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:121 -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:124 -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:127 -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -#: ipaserver/plugins/host.py:130 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/host.py:242 ipaserver/plugins/service.py:164 -msgid "Users allowed to add resource delegation" -msgstr "" - -#: ipaserver/plugins/host.py:244 ipaserver/plugins/service.py:166 -msgid "Groups allowed to add resource delegation" -msgstr "" - -#: ipaserver/plugins/host.py:246 ipaserver/plugins/service.py:168 -msgid "Hosts allowed to add resource delegation" -msgstr "" - -#: ipaserver/plugins/host.py:248 ipaserver/plugins/service.py:170 -msgid "Host Groups allowed to add resource delegation" -msgstr "" - -#: ipaserver/plugins/host.py:481 ipaserver/plugins/internal.py:1176 -#: ipaserver/plugins/internal.py:1298 -msgid "Host" -msgstr "" - -#: ipaserver/plugins/host.py:533 -msgid "Base-64 encoded host certificate" -msgstr "" - -#: ipaserver/plugins/host.py:540 ipaserver/plugins/internal.py:701 -#: ipaserver/plugins/service.py:565 -msgid "Serial Number" -msgstr "" - -#: ipaserver/plugins/host.py:544 ipaserver/plugins/internal.py:702 -#: ipaserver/plugins/service.py:569 -msgid "Serial Number (hex)" -msgstr "" - -#: ipaserver/plugins/host.py:588 ipaserver/plugins/host.py:589 -#: ipaserver/plugins/service.py:549 ipaserver/plugins/service.py:550 -msgid "Delegation principal" -msgstr "" - -#: ipaserver/plugins/host.py:624 ipaserver/plugins/service.py:607 -msgid "Authentication Indicators" -msgstr "" - -#: ipaserver/plugins/host.py:625 -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#: ipaserver/plugins/host.py:697 -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:821 -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:826 -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -#: ipaserver/plugins/host.py:898 -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#: ipaserver/plugins/host.py:914 -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:935 -msgid "Password cannot be set on enrolled host." -msgstr "" - -#: ipaserver/plugins/host.py:939 -msgid "cn is immutable" -msgstr "" - -#: ipaserver/plugins/host.py:1064 -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/host.py:1219 -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1388 -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1395 -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1411 -msgid "Add new principal alias to host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1412 -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1423 -msgid "Remove principal alias from a host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1424 -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1434 -msgid "Add new resource delegation to a host" -msgstr "" - -#: ipaserver/plugins/host.py:1435 -#, python-format -msgid "Added new resource delegation to the host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1448 -msgid "Remove resource delegation from a host" -msgstr "" - -#: ipaserver/plugins/host.py:1449 -#, python-format -msgid "Removed resource delegation from the host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1455 -msgid "" -"Allow users, groups, hosts or host groups to handle a resource delegation of " -"this host." -msgstr "" - -#: ipaserver/plugins/host.py:1475 -msgid "" -"Disallow users, groups, hosts or host groups to handle a resource delegation " -"of this host." -msgstr "" - -#: ipaserver/plugins/idp.py:24 -msgid "" -"\n" -"External Identity Provider References\n" -msgstr "" - -#: ipaserver/plugins/idp.py:26 -msgid "" -"\n" -"Manage External Identity Provider References.\n" -msgstr "" - -#: ipaserver/plugins/idp.py:28 -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for OAuth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -#: ipaserver/plugins/idp.py:33 -msgid "" -"\n" -" Add a new external Identity Provider reference:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -#: ipaserver/plugins/idp.py:38 -msgid "" -"\n" -" Add a new external Identity Provider reference using github predefined\n" -" endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -#: ipaserver/plugins/idp.py:42 -msgid "" -"\n" -" Find all external Identity Provider references whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -#: ipaserver/plugins/idp.py:46 -msgid "" -"\n" -" Examine the configuration of an external Identity Provider reference:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -#: ipaserver/plugins/idp.py:49 -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -#: ipaserver/plugins/idp.py:52 -msgid "" -"\n" -" Delete an external Identity Provider reference:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -#: ipaserver/plugins/idp.py:70 -msgid "Invalid URI: not an https scheme" -msgstr "" - -#: ipaserver/plugins/idp.py:73 -msgid "Invalid URI: missing netloc" -msgstr "" - -#: ipaserver/plugins/idp.py:84 ipaserver/plugins/idp.py:100 -msgid "Identity Provider reference" -msgstr "" - -#: ipaserver/plugins/idp.py:85 ipaserver/plugins/idp.py:99 -msgid "Identity Provider references" -msgstr "" - -#: ipaserver/plugins/idp.py:105 -msgid "Identity Provider reference name" -msgstr "" - -#: ipaserver/plugins/idp.py:111 -msgid "Authorization URI" -msgstr "" - -#: ipaserver/plugins/idp.py:112 -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:117 -msgid "Device authorization URI" -msgstr "" - -#: ipaserver/plugins/idp.py:118 -msgid "Device authorization endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:123 -msgid "Token URI" -msgstr "" - -#: ipaserver/plugins/idp.py:124 -msgid "Token endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:129 -msgid "User info URI" -msgstr "" - -#: ipaserver/plugins/idp.py:130 -msgid "User information endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:135 -msgid "JWKS URI" -msgstr "" - -#: ipaserver/plugins/idp.py:136 -msgid "JWKS endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:140 -msgid "OIDC URL" -msgstr "" - -#: ipaserver/plugins/idp.py:142 -msgid "The Identity Provider OIDC URL" -msgstr "" - -#: ipaserver/plugins/idp.py:146 -msgid "Client identifier" -msgstr "" - -#: ipaserver/plugins/idp.py:148 -msgid "OAuth 2.0 client identifier" -msgstr "" - -#: ipaserver/plugins/idp.py:153 -msgid "OAuth 2.0 client secret" -msgstr "" - -#: ipaserver/plugins/idp.py:159 -msgid "Scope" -msgstr "" - -#: ipaserver/plugins/idp.py:160 -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -#: ipaserver/plugins/idp.py:164 -msgid "External IdP user identifier attribute" -msgstr "" - -#: ipaserver/plugins/idp.py:165 -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#: ipaserver/plugins/idp.py:229 -msgid "Add a new Identity Provider reference." -msgstr "" - -#: ipaserver/plugins/idp.py:230 -#, python-format -msgid "Added Identity Provider reference \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:309 -msgid "IdP provider template" -msgstr "" - -#: ipaserver/plugins/idp.py:310 -msgid "Choose a pre-defined template to use" -msgstr "" - -#: ipaserver/plugins/idp.py:316 ipaserver/plugins/internal.py:684 -msgid "Organization" -msgstr "" - -#: ipaserver/plugins/idp.py:317 -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -#: ipaserver/plugins/idp.py:321 -msgid "Base URL" -msgstr "" - -#: ipaserver/plugins/idp.py:322 -msgid "Base URL for IdP provider templates" -msgstr "" - -#: ipaserver/plugins/idp.py:336 -msgid "unknown provider" -msgstr "" - -#: ipaserver/plugins/idp.py:351 -msgid "value is missing" -msgstr "" - -#: ipaserver/plugins/idp.py:382 -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#: ipaserver/plugins/idp.py:413 -msgid "Delete an Identity Provider reference." -msgstr "" - -#: ipaserver/plugins/idp.py:414 -#, python-format -msgid "Deleted Identity Provider reference \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:419 -msgid "Modify an Identity Provider reference." -msgstr "" - -#: ipaserver/plugins/idp.py:420 -#, python-format -msgid "Modified Identity Provider reference \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:425 -msgid "Search for Identity Provider references." -msgstr "" - -#: ipaserver/plugins/idp.py:427 -#, python-format -msgid "%(count)d Identity Provider reference matched" -msgid_plural "%(count)d Identity Provider references matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idp.py:442 -msgid "Display information about an Identity Provider reference." -msgstr "" - -#: ipaserver/plugins/idrange.py:43 -msgid "" -"-------\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"\n" -"-------\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:58 -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:203 -msgid "ID Ranges" -msgstr "" - -#: ipaserver/plugins/idrange.py:204 -msgid "ID Range" -msgstr "" - -#: ipaserver/plugins/idrange.py:208 -msgid "local domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:211 ipaserver/plugins/trust.py:678 -msgid "Active Directory domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:212 ipaserver/plugins/trust.py:679 -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -#: ipaserver/plugins/idrange.py:256 -msgid "ID range type, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:261 ipaserver/plugins/internal.py:1254 -msgid "Auto private groups" -msgstr "" - -#: ipaserver/plugins/idrange.py:263 -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:337 -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#: ipaserver/plugins/idrange.py:342 -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/idrange.py:349 -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/idrange.py:361 -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:398 -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:424 -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:437 ipaserver/plugins/idrange.py:702 -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:448 -msgid "Specified trusted domain name could not be found." -msgstr "" - -#: ipaserver/plugins/idrange.py:463 -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:470 ipaserver/plugins/idrange.py:737 -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -#: ipaserver/plugins/idrange.py:477 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:483 -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:502 -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -#: ipaserver/plugins/idrange.py:512 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:519 ipaserver/plugins/idrange.py:756 -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:529 ipaserver/plugins/idrange.py:779 -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -#: ipaserver/plugins/idrange.py:541 -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#: ipaserver/plugins/idrange.py:560 -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:609 -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idrange.py:645 -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:649 -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:684 -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -#: ipaserver/plugins/idrange.py:714 -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -#: ipaserver/plugins/idrange.py:721 -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:728 -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idviews.py:72 ipaserver/plugins/idviews.py:123 -#: ipaserver/plugins/idviews.py:131 ipaserver/plugins/idviews.py:359 -#: ipaserver/plugins/idviews.py:850 -msgid "ID View" -msgstr "" - -#: ipaserver/plugins/idviews.py:74 -msgid "system ID View" -msgstr "" - -#: ipaserver/plugins/idviews.py:124 ipaserver/plugins/idviews.py:130 -msgid "ID Views" -msgstr "" - -#: ipaserver/plugins/idviews.py:145 -msgid "User object overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:149 -msgid "Group object overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:153 -msgid "Hosts the view applies to" -msgstr "" - -#: ipaserver/plugins/idviews.py:197 -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:214 -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:227 -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:243 -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:360 -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#: ipaserver/plugins/idviews.py:388 ipaserver/plugins/idviews.py:421 -msgid "not found" -msgstr "" - -#: ipaserver/plugins/idviews.py:402 -msgid "ID View cannot be applied to IPA master" -msgstr "" - -#: ipaserver/plugins/idviews.py:419 -msgid "ID View already applied" -msgstr "" - -#: ipaserver/plugins/idviews.py:439 -msgid "value" -msgstr "" - -#: ipaserver/plugins/idviews.py:452 -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#: ipaserver/plugins/idviews.py:453 -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#: ipaserver/plugins/idviews.py:495 -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#: ipaserver/plugins/idviews.py:496 -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -#: ipaserver/plugins/idviews.py:564 -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -#: ipaserver/plugins/idviews.py:602 -msgid "IPA object" -msgstr "" - -#: ipaserver/plugins/idviews.py:603 -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#: ipaserver/plugins/idviews.py:697 -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -#: ipaserver/plugins/idviews.py:851 -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#: ipaserver/plugins/idviews.py:895 -msgid "Add a new ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:896 -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:911 -msgid "Delete an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:912 -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:935 -msgid "Modify an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:936 -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:943 -msgid "ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:944 -msgid "ID overrides cannot be renamed" -msgstr "" - -#: ipaserver/plugins/idviews.py:956 -msgid "Search for an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:957 -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:969 -msgid "Display information about an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:981 ipaserver/plugins/idviews.py:985 -msgid "User ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:982 ipaserver/plugins/idviews.py:984 -msgid "User ID overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:1104 ipaserver/plugins/idviews.py:1108 -msgid "Group ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:1105 ipaserver/plugins/idviews.py:1107 -msgid "Group ID overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:1149 -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#: ipaserver/plugins/idviews.py:1150 -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1172 -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#: ipaserver/plugins/idviews.py:1173 -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1197 -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1222 -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1228 -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1260 -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:1296 -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1302 -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1308 -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1314 -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/internal.py:151 -msgid "Internationalization messages" -msgstr "" - -#: ipaserver/plugins/internal.py:157 -msgid "Your session has expired. Please log in again." -msgstr "" - -#: ipaserver/plugins/internal.py:161 ipaserver/plugins/internal.py:210 -msgid "Apply" -msgstr "" - -#: ipaserver/plugins/internal.py:162 -msgid "Rebuild auto membership" -msgstr "" - -#: ipaserver/plugins/internal.py:164 -msgid "" -"Are you sure you want to rebuild auto membership? In case of a high number " -"of users, hosts or groups, the operation may require high CPU usage." -msgstr "" - -#: ipaserver/plugins/internal.py:169 -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#: ipaserver/plugins/internal.py:170 -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:171 -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:172 -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:173 -msgid "Actions" -msgstr "" - -#: ipaserver/plugins/internal.py:176 ipaserver/plugins/internal.py:205 -#: ipaserver/plugins/internal.py:267 -msgid "Add" -msgstr "" - -#: ipaserver/plugins/internal.py:177 -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -#: ipaserver/plugins/internal.py:178 -msgid "Direct Membership" -msgstr "" - -#: ipaserver/plugins/internal.py:179 -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:180 -msgid "Indirect Membership" -msgstr "" - -#: ipaserver/plugins/internal.py:181 -msgid "No entries." -msgstr "" - -#: ipaserver/plugins/internal.py:182 -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -#: ipaserver/plugins/internal.py:183 ipaserver/plugins/internal.py:282 -msgid "Remove" -msgstr "" - -#: ipaserver/plugins/internal.py:184 -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -#: ipaserver/plugins/internal.py:185 -msgid "Show Results" -msgstr "" - -#: ipaserver/plugins/internal.py:188 -msgid "Authentication indicators" -msgstr "" - -#: ipaserver/plugins/internal.py:189 -msgid "Authentication indicator" -msgstr "" - -#: ipaserver/plugins/internal.py:190 -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#: ipaserver/plugins/internal.py:191 -msgid "Add Custom Authentication Indicator" -msgstr "" - -#: ipaserver/plugins/internal.py:193 -msgid "Two factor authentication (password + OTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:195 -msgid "RADIUS" -msgstr "" - -#: ipaserver/plugins/internal.py:197 -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -#: ipaserver/plugins/internal.py:198 -msgid "External Identity Provider" -msgstr "" - -#: ipaserver/plugins/internal.py:199 -msgid "Disable per-user override" -msgstr "" - -#: ipaserver/plugins/internal.py:200 -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#: ipaserver/plugins/internal.py:203 ipaserver/plugins/internal.py:277 -#: ipaserver/plugins/internal.py:1743 -msgid "About" -msgstr "" - -#: ipaserver/plugins/internal.py:204 -msgid "Activate" -msgstr "" - -#: ipaserver/plugins/internal.py:206 -msgid "Add and Add Another" -msgstr "" - -#: ipaserver/plugins/internal.py:207 -msgid "Add and Close" -msgstr "" - -#: ipaserver/plugins/internal.py:208 -msgid "Add and Edit" -msgstr "" - -#: ipaserver/plugins/internal.py:209 -msgid "Add Many" -msgstr "" - -#: ipaserver/plugins/internal.py:211 -msgid "Back" -msgstr "" - -#: ipaserver/plugins/internal.py:212 -msgid "Cancel" -msgstr "" - -#: ipaserver/plugins/internal.py:213 -msgid "Clear" -msgstr "" - -#: ipaserver/plugins/internal.py:214 -msgid "Clear all fields on the page." -msgstr "" - -#: ipaserver/plugins/internal.py:215 -msgid "Close" -msgstr "" - -#: ipaserver/plugins/internal.py:216 ipaserver/plugins/internal.py:1947 -msgid "Disable" -msgstr "" - -#: ipaserver/plugins/internal.py:217 ipaserver/plugins/internal.py:648 -msgid "Download" -msgstr "" - -#: ipaserver/plugins/internal.py:218 -msgid "Download certificate as PEM formatted file." -msgstr "" - -#: ipaserver/plugins/internal.py:219 -msgid "Edit" -msgstr "" - -#: ipaserver/plugins/internal.py:220 ipaserver/plugins/internal.py:1949 -msgid "Enable" -msgstr "" - -#: ipaserver/plugins/internal.py:222 -msgid "Find" -msgstr "" - -#: ipaserver/plugins/internal.py:223 -msgid "Get" -msgstr "" - -#: ipaserver/plugins/internal.py:224 -msgid "Hide" -msgstr "" - -#: ipaserver/plugins/internal.py:225 -msgid "Issue" -msgstr "" - -#: ipaserver/plugins/internal.py:226 -msgid "Match" -msgstr "" - -#: ipaserver/plugins/internal.py:227 -msgid "Match users according to certificate." -msgstr "" - -#: ipaserver/plugins/internal.py:228 -msgid "Migrate" -msgstr "" - -#: ipaserver/plugins/internal.py:229 -msgid "OK" -msgstr "" - -#: ipaserver/plugins/internal.py:230 -msgid "Refresh" -msgstr "" - -#: ipaserver/plugins/internal.py:231 -msgid "Reload current settings from the server." -msgstr "" - -#: ipaserver/plugins/internal.py:232 -msgid "Delete" -msgstr "" - -#: ipaserver/plugins/internal.py:233 ipaserver/plugins/internal.py:689 -msgid "Remove hold" -msgstr "" - -#: ipaserver/plugins/internal.py:234 -msgid "Reset" -msgstr "" - -#: ipaserver/plugins/internal.py:235 ipaserver/plugins/internal.py:1736 -msgid "Reset Password" -msgstr "" - -#: ipaserver/plugins/internal.py:236 -msgid "Reset Password and Log in" -msgstr "" - -#: ipaserver/plugins/internal.py:237 -msgid "Restore" -msgstr "" - -#: ipaserver/plugins/internal.py:238 -msgid "Retry" -msgstr "" - -#: ipaserver/plugins/internal.py:239 -msgid "Revert" -msgstr "" - -#: ipaserver/plugins/internal.py:241 -msgid "Revoke" -msgstr "" - -#: ipaserver/plugins/internal.py:242 -msgid "Save" -msgstr "" - -#: ipaserver/plugins/internal.py:243 -msgid "Set" -msgstr "" - -#: ipaserver/plugins/internal.py:244 -msgid "Show" -msgstr "" - -#: ipaserver/plugins/internal.py:245 -msgid "Stage" -msgstr "" - -#: ipaserver/plugins/internal.py:247 -msgid "Update" -msgstr "" - -#: ipaserver/plugins/internal.py:248 -msgid "View" -msgstr "" - -#: ipaserver/plugins/internal.py:251 ipaserver/plugins/internal.py:1744 -msgid "Customization" -msgstr "" - -#: ipaserver/plugins/internal.py:252 -msgid "Pagination Size" -msgstr "" - -#: ipaserver/plugins/internal.py:255 -msgid "Collapse All" -msgstr "" - -#: ipaserver/plugins/internal.py:256 -msgid "Expand All" -msgstr "" - -#: ipaserver/plugins/internal.py:257 -msgid "General" -msgstr "" - -#: ipaserver/plugins/internal.py:258 -msgid "Identity Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:259 -msgid "Record Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:260 -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:261 -msgid "Back to Top" -msgstr "" - -#: ipaserver/plugins/internal.py:262 -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#: ipaserver/plugins/internal.py:265 -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#: ipaserver/plugins/internal.py:266 -msgid "Add custom value" -msgstr "" - -#: ipaserver/plugins/internal.py:268 -msgid "Available" -msgstr "" - -#: ipaserver/plugins/internal.py:269 -msgid "Some operations failed." -msgstr "" - -#: ipaserver/plugins/internal.py:270 -msgid "Operations Error" -msgstr "" - -#: ipaserver/plugins/internal.py:271 -msgid "Confirmation" -msgstr "" - -#: ipaserver/plugins/internal.py:272 -msgid "Custom value" -msgstr "" - -#: ipaserver/plugins/internal.py:273 -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -#: ipaserver/plugins/internal.py:274 -msgid "Unsaved Changes" -msgstr "" - -#: ipaserver/plugins/internal.py:275 -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:276 -msgid "Hide details" -msgstr "" - -#: ipaserver/plugins/internal.py:278 -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -#: ipaserver/plugins/internal.py:279 -msgid "Prospective" -msgstr "" - -#: ipaserver/plugins/internal.py:280 -msgid "Redirection" -msgstr "" - -#: ipaserver/plugins/internal.py:281 -msgid "Select entries to be removed." -msgstr "" - -#: ipaserver/plugins/internal.py:283 -msgid "Result" -msgstr "" - -#: ipaserver/plugins/internal.py:284 -msgid "Show details" -msgstr "" - -#: ipaserver/plugins/internal.py:285 -msgid "Success" -msgstr "" - -#: ipaserver/plugins/internal.py:286 -msgid "Validation error" -msgstr "" - -#: ipaserver/plugins/internal.py:287 -msgid "Input form contains invalid or missing values." -msgstr "" - -#: ipaserver/plugins/internal.py:290 -msgid "Please try the following options:" -msgstr "" - -#: ipaserver/plugins/internal.py:291 -msgid "If the problem persists please contact the system administrator." -msgstr "" - -#: ipaserver/plugins/internal.py:292 -msgid "Refresh the page." -msgstr "" - -#: ipaserver/plugins/internal.py:293 -msgid "Reload the browser." -msgstr "" - -#: ipaserver/plugins/internal.py:294 -msgid "Return to the main page and retry the operation" -msgstr "" - -#: ipaserver/plugins/internal.py:295 -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#: ipaserver/plugins/internal.py:299 -msgid "HTTP Error" -msgstr "" - -#: ipaserver/plugins/internal.py:300 -msgid "Internal Error" -msgstr "" - -#: ipaserver/plugins/internal.py:301 -msgid "IPA Error" -msgstr "" - -#: ipaserver/plugins/internal.py:302 -msgid "No response" -msgstr "" - -#: ipaserver/plugins/internal.py:303 -msgid "Unknown Error" -msgstr "" - -#: ipaserver/plugins/internal.py:304 -msgid "URL" -msgstr "" - -#: ipaserver/plugins/internal.py:307 -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#: ipaserver/plugins/internal.py:308 -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#: ipaserver/plugins/internal.py:309 -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#: ipaserver/plugins/internal.py:310 -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -#: ipaserver/plugins/internal.py:313 -msgid "Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:314 ipaserver/plugins/internal.py:1757 -msgid "Search" -msgstr "" - -#: ipaserver/plugins/internal.py:316 -msgid "False" -msgstr "" - -#: ipaserver/plugins/internal.py:319 -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:322 -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:325 -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:328 -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:331 -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:334 -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:337 -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:340 -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:342 -msgid "Allowed to create keytab" -msgstr "" - -#: ipaserver/plugins/internal.py:343 -msgid "Allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/internal.py:345 -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:348 -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:351 -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:354 -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:357 -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:360 -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:363 -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:366 -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:370 -msgid "Add Kerberos Principal Alias" -msgstr "" - -#: ipaserver/plugins/internal.py:371 -msgid "New kerberos principal alias" -msgstr "" - -#: ipaserver/plugins/internal.py:372 -msgid "Remove Kerberos Alias" -msgstr "" - -#: ipaserver/plugins/internal.py:373 -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -#: ipaserver/plugins/internal.py:376 -msgid "Inherited from server configuration" -msgstr "" - -#: ipaserver/plugins/internal.py:377 -msgid "MS-PAC" -msgstr "" - -#: ipaserver/plugins/internal.py:378 -msgid "Override inherited settings" -msgstr "" - -#: ipaserver/plugins/internal.py:379 -msgid "PAD" -msgstr "" - -#: ipaserver/plugins/internal.py:382 -msgid "Authenticating" -msgstr "" - -#: ipaserver/plugins/internal.py:384 -msgid "Authentication with personal certificate failed" -msgstr "" - -#: ipaserver/plugins/internal.py:386 -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -#: ipaserver/plugins/internal.py:390 -msgid "Continue to next page" -msgstr "" - -#: ipaserver/plugins/internal.py:392 -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -#: ipaserver/plugins/internal.py:395 -msgid "Login failed due to an unknown reason" -msgstr "" - -#: ipaserver/plugins/internal.py:396 -msgid "Logged In As" -msgstr "" - -#: ipaserver/plugins/internal.py:397 -msgid "Authentication with Kerberos failed" -msgstr "" - -#: ipaserver/plugins/internal.py:399 -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -#: ipaserver/plugins/internal.py:404 -msgid "Loading" -msgstr "" - -#: ipaserver/plugins/internal.py:406 -msgid "Kerberos Principal you entered is expired" -msgstr "" - -#: ipaserver/plugins/internal.py:407 -msgid "Loading data" -msgstr "" - -#: ipaserver/plugins/internal.py:408 -msgid "Log in" -msgstr "" - -#: ipaserver/plugins/internal.py:409 -msgid "Log In Using Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:410 -msgid "Log in using personal certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:411 ipaserver/plugins/internal.py:1745 -msgid "Log out" -msgstr "" - -#: ipaserver/plugins/internal.py:412 -msgid "Log out error" -msgstr "" - -#: ipaserver/plugins/internal.py:414 ipaserver/plugins/internal.py:1730 -msgid "Password or Password+One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:415 -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -#: ipaserver/plugins/internal.py:416 -msgid "Sync OTP Token" -msgstr "" - -#: ipaserver/plugins/internal.py:417 -msgid "Synchronizing" -msgstr "" - -#: ipaserver/plugins/internal.py:419 -msgid "The user account you entered is locked" -msgstr "" - -#: ipaserver/plugins/internal.py:422 -msgid "number of passwords" -msgstr "" - -#: ipaserver/plugins/internal.py:423 -msgid "seconds" -msgstr "" - -#: ipaserver/plugins/internal.py:426 -msgid "Migrating" -msgstr "" - -#: ipaserver/plugins/internal.py:428 -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#: ipaserver/plugins/internal.py:431 -msgid "Password migration was not successful" -msgstr "" - -#: ipaserver/plugins/internal.py:433 -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#: ipaserver/plugins/internal.py:440 ipaserver/plugins/internal.py:1712 -msgid "The password or username you entered is incorrect" -msgstr "" - -#: ipaserver/plugins/internal.py:441 -msgid "Password migration was successful" -msgstr "" - -#: ipaserver/plugins/internal.py:445 ipaserver/plugins/internal.py:530 -#: ipaserver/plugins/internal.py:1228 -msgid "Attribute" -msgstr "" - -#: ipaserver/plugins/internal.py:448 -msgid "Add delegation" -msgstr "" - -#: ipaserver/plugins/internal.py:449 -msgid "Remove delegations" -msgstr "" - -#: ipaserver/plugins/internal.py:452 ipaserver/plugins/internal.py:784 -msgid "Add permission" -msgstr "" - -#: ipaserver/plugins/internal.py:454 -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:456 -msgid "Remove permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:458 -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:462 -msgid "Add privilege" -msgstr "" - -#: ipaserver/plugins/internal.py:464 -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:467 -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:469 -msgid "Remove privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:471 -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:474 -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:478 -msgid "Role Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:479 -msgid "Add role" -msgstr "" - -#: ipaserver/plugins/internal.py:481 -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:484 -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:487 -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:490 -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:493 -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:496 -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:498 -msgid "Remove roles" -msgstr "" - -#: ipaserver/plugins/internal.py:500 -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:503 -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:506 -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:509 -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:512 -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:515 -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:519 -msgid "Add self service permission" -msgstr "" - -#: ipaserver/plugins/internal.py:520 -msgid "Remove self service permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:523 -msgid "Add rule" -msgstr "" - -#: ipaserver/plugins/internal.py:525 -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:528 -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:532 -msgid "Are you sure you want to change default group?" -msgstr "" - -#: ipaserver/plugins/internal.py:534 -msgid "Default host group" -msgstr "" - -#: ipaserver/plugins/internal.py:535 -msgid "Default user group" -msgstr "" - -#: ipaserver/plugins/internal.py:536 -msgid "Exclusive" -msgstr "" - -#: ipaserver/plugins/internal.py:537 -msgid "Expression" -msgstr "" - -#: ipaserver/plugins/internal.py:538 -msgid "Host group rule" -msgstr "" - -#: ipaserver/plugins/internal.py:539 -msgid "Host group rules" -msgstr "" - -#: ipaserver/plugins/internal.py:540 -msgid "Inclusive" -msgstr "" - -#: ipaserver/plugins/internal.py:541 -msgid "Remove auto membership rules" -msgstr "" - -#: ipaserver/plugins/internal.py:543 -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:546 -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:548 -msgid "User group rule" -msgstr "" - -#: ipaserver/plugins/internal.py:549 -msgid "User group rules" -msgstr "" - -#: ipaserver/plugins/internal.py:552 -msgid "Add automount key" -msgstr "" - -#: ipaserver/plugins/internal.py:553 -msgid "Remove automount keys" -msgstr "" - -#: ipaserver/plugins/internal.py:556 -msgid "Add automount location" -msgstr "" - -#: ipaserver/plugins/internal.py:557 -msgid "Automount Location Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:558 -msgid "Remove automount locations" -msgstr "" - -#: ipaserver/plugins/internal.py:561 -msgid "Add automount map" -msgstr "" - -#: ipaserver/plugins/internal.py:562 -msgid "Map Type" -msgstr "" - -#: ipaserver/plugins/internal.py:563 -msgid "Direct" -msgstr "" - -#: ipaserver/plugins/internal.py:564 -msgid "Indirect" -msgstr "" - -#: ipaserver/plugins/internal.py:565 -msgid "Remove automount maps" -msgstr "" - -#: ipaserver/plugins/internal.py:568 -msgid "Add certificate authority" -msgstr "" - -#: ipaserver/plugins/internal.py:569 -msgid "Remove certificate authorities" -msgstr "" - -#: ipaserver/plugins/internal.py:572 -msgid "Add CA ACL" -msgstr "" - -#: ipaserver/plugins/internal.py:574 -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:578 -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:581 -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:584 -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:587 -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:590 -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:593 -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:595 -msgid "All" -msgstr "" - -#: ipaserver/plugins/internal.py:596 -msgid "Any CA" -msgstr "" - -#: ipaserver/plugins/internal.py:597 ipaserver/plugins/internal.py:906 -#: ipaserver/plugins/internal.py:1173 ipaserver/plugins/internal.py:1296 -#: ipaserver/plugins/internal.py:1465 -msgid "Any Host" -msgstr "" - -#: ipaserver/plugins/internal.py:598 ipaserver/plugins/internal.py:907 -msgid "Any Service" -msgstr "" - -#: ipaserver/plugins/internal.py:599 -msgid "Any Profile" -msgstr "" - -#: ipaserver/plugins/internal.py:600 ipaserver/plugins/internal.py:908 -#: ipaserver/plugins/internal.py:1174 ipaserver/plugins/internal.py:1297 -#: ipaserver/plugins/internal.py:1466 -msgid "Anyone" -msgstr "" - -#: ipaserver/plugins/internal.py:601 ipaserver/plugins/internal.py:910 -#: ipaserver/plugins/internal.py:1471 -msgid "Rule status" -msgstr "" - -#: ipaserver/plugins/internal.py:602 -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#: ipaserver/plugins/internal.py:604 -msgid "Remove CA ACLs" -msgstr "" - -#: ipaserver/plugins/internal.py:606 -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:610 -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:613 -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:616 -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:619 -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:622 -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:625 -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:627 -msgid "Specified CAs" -msgstr "" - -#: ipaserver/plugins/internal.py:628 ipaserver/plugins/internal.py:932 -#: ipaserver/plugins/internal.py:1200 ipaserver/plugins/internal.py:1312 -#: ipaserver/plugins/internal.py:1516 -msgid "Specified Hosts and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:629 -msgid "Specified Profiles" -msgstr "" - -#: ipaserver/plugins/internal.py:630 ipaserver/plugins/internal.py:933 -msgid "Specified Services and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:631 ipaserver/plugins/internal.py:934 -#: ipaserver/plugins/internal.py:1201 ipaserver/plugins/internal.py:1313 -#: ipaserver/plugins/internal.py:1517 -msgid "Specified Users and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:632 -msgid "Permitted to have certificates issued" -msgstr "" - -#: ipaserver/plugins/internal.py:635 -msgid "Remove certificate profiles" -msgstr "" - -#: ipaserver/plugins/internal.py:638 -msgid "AA Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:639 -msgid "Add principal" -msgstr "" - -#: ipaserver/plugins/internal.py:640 -msgid "Affiliation Changed" -msgstr "" - -#: ipaserver/plugins/internal.py:642 -msgid "CA Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:644 ipaserver/plugins/internal.py:1959 -msgid "Certificates" -msgstr "" - -#: ipaserver/plugins/internal.py:645 -msgid "Certificate Hold" -msgstr "" - -#: ipaserver/plugins/internal.py:646 -msgid "Cessation of Operation" -msgstr "" - -#: ipaserver/plugins/internal.py:647 -msgid "Common Name" -msgstr "" - -#: ipaserver/plugins/internal.py:649 -msgid "the certificate with serial number " -msgstr "" - -#: ipaserver/plugins/internal.py:650 -msgid "Expires On" -msgstr "" - -#: ipaserver/plugins/internal.py:651 -msgid "Issued on from" -msgstr "" - -#: ipaserver/plugins/internal.py:652 -msgid "Issued on to" -msgstr "" - -#: ipaserver/plugins/internal.py:653 -msgid "Maximum serial number" -msgstr "" - -#: ipaserver/plugins/internal.py:654 -msgid "Minimum serial number" -msgstr "" - -#: ipaserver/plugins/internal.py:656 -msgid "Revoked on from" -msgstr "" - -#: ipaserver/plugins/internal.py:657 -msgid "Revoked on to" -msgstr "" - -#: ipaserver/plugins/internal.py:659 -msgid "Valid not after from" -msgstr "" - -#: ipaserver/plugins/internal.py:660 -msgid "Valid not after to" -msgstr "" - -#: ipaserver/plugins/internal.py:661 -msgid "Valid not before from" -msgstr "" - -#: ipaserver/plugins/internal.py:662 -msgid "Valid not before to" -msgstr "" - -#: ipaserver/plugins/internal.py:663 -msgid "Fingerprints" -msgstr "" - -#: ipaserver/plugins/internal.py:664 -msgid "Get Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:665 -msgid "Certificate Hold Removed" -msgstr "" - -#: ipaserver/plugins/internal.py:667 -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:670 -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:673 -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:675 -msgid "Issue new certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:676 -msgid "Issued By" -msgstr "" - -#: ipaserver/plugins/internal.py:677 -msgid "Issued On" -msgstr "" - -#: ipaserver/plugins/internal.py:678 -msgid "Issued To" -msgstr "" - -#: ipaserver/plugins/internal.py:679 -msgid "Key Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:680 -msgid "No Valid Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:681 -msgid "New Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:682 -msgid "Certificate in base64 or PEM format" -msgstr "" - -#: ipaserver/plugins/internal.py:683 -msgid "Note" -msgstr "" - -#: ipaserver/plugins/internal.py:685 -msgid "Organizational Unit" -msgstr "" - -#: ipaserver/plugins/internal.py:686 -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -#: ipaserver/plugins/internal.py:687 -msgid "Privilege Withdrawn" -msgstr "" - -#: ipaserver/plugins/internal.py:688 -msgid "Reason for Revocation" -msgstr "" - -#: ipaserver/plugins/internal.py:690 -msgid "Remove certificate hold" -msgstr "" - -#: ipaserver/plugins/internal.py:691 -msgid "Do you want to remove the certificate hold?" -msgstr "" - -#: ipaserver/plugins/internal.py:692 -msgid "Remove from CRL" -msgstr "" - -#: ipaserver/plugins/internal.py:693 -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#: ipaserver/plugins/internal.py:694 -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#: ipaserver/plugins/internal.py:695 -msgid "Certificate requested" -msgstr "" - -#: ipaserver/plugins/internal.py:697 -msgid "Revoke certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:698 -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#: ipaserver/plugins/internal.py:699 -msgid "Certificate Revoked" -msgstr "" - -#: ipaserver/plugins/internal.py:700 -msgid "REVOKED" -msgstr "" - -#: ipaserver/plugins/internal.py:703 -msgid "SHA1 Fingerprint" -msgstr "" - -#: ipaserver/plugins/internal.py:704 -msgid "SHA256 Fingerprint" -msgstr "" - -#: ipaserver/plugins/internal.py:706 -msgid "Superseded" -msgstr "" - -#: ipaserver/plugins/internal.py:707 -msgid "Unspecified" -msgstr "" - -#: ipaserver/plugins/internal.py:708 -msgid "Valid Certificate Present" -msgstr "" - -#: ipaserver/plugins/internal.py:709 -msgid "Valid from" -msgstr "" - -#: ipaserver/plugins/internal.py:710 -msgid "Valid to" -msgstr "" - -#: ipaserver/plugins/internal.py:711 -msgid "Validity" -msgstr "" - -#: ipaserver/plugins/internal.py:712 -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#: ipaserver/plugins/internal.py:713 -msgid "View Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:716 -msgid "Certificate Data" -msgstr "" - -#: ipaserver/plugins/internal.py:717 -msgid "Certificate For Match" -msgstr "" - -#: ipaserver/plugins/internal.py:718 -msgid "Certificate Mapping Match" -msgstr "" - -#: ipaserver/plugins/internal.py:720 -msgid "Matched Users" -msgstr "" - -#: ipaserver/plugins/internal.py:721 -msgid "User Login" -msgstr "" - -#: ipaserver/plugins/internal.py:724 -msgid "Add certificate identity mapping rule" -msgstr "" - -#: ipaserver/plugins/internal.py:725 -msgid "Add certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:728 -msgid "Configuration string" -msgstr "" - -#: ipaserver/plugins/internal.py:729 -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#: ipaserver/plugins/internal.py:730 -msgid "Remove certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:732 -msgid "Issuer and subject" -msgstr "" - -#: ipaserver/plugins/internal.py:733 -msgid "Remove certificate identity mapping rules" -msgstr "" - -#: ipaserver/plugins/internal.py:735 ipaserver/plugins/schema.py:147 -msgid "Version" -msgstr "" - -#: ipaserver/plugins/internal.py:738 -msgid "Group Options" -msgstr "" - -#: ipaserver/plugins/internal.py:739 -msgid "Search Options" -msgstr "" - -#: ipaserver/plugins/internal.py:740 -msgid "SELinux Options" -msgstr "" - -#: ipaserver/plugins/internal.py:741 -msgid "Server Options" -msgstr "" - -#: ipaserver/plugins/internal.py:742 -msgid "Service Options" -msgstr "" - -#: ipaserver/plugins/internal.py:743 -msgid "User Options" -msgstr "" - -#: ipaserver/plugins/internal.py:748 -msgid "Forward first" -msgstr "" - -#: ipaserver/plugins/internal.py:749 -msgid "Forwarding disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:750 -msgid "Forward only" -msgstr "" - -#: ipaserver/plugins/internal.py:751 ipaserver/plugins/internal.py:1474 -#: ipaserver/plugins/internal.py:1580 -msgid "Options" -msgstr "" - -#: ipaserver/plugins/internal.py:752 -msgid "Update System DNS Records" -msgstr "" - -#: ipaserver/plugins/internal.py:753 -msgid "Do you want to update system DNS records?" -msgstr "" - -#: ipaserver/plugins/internal.py:754 -msgid "System DNS records updated" -msgstr "" - -#: ipaserver/plugins/internal.py:757 -msgid "Add DNS forward zone" -msgstr "" - -#: ipaserver/plugins/internal.py:758 -msgid "Remove DNS forward zones" -msgstr "" - -#: ipaserver/plugins/internal.py:761 -msgid "Add DNS resource record" -msgstr "" - -#: ipaserver/plugins/internal.py:763 -msgid "DNS record was deleted because it contained no data." -msgstr "" - -#: ipaserver/plugins/internal.py:764 -msgid "Other Record Types" -msgstr "" - -#: ipaserver/plugins/internal.py:765 -msgid "Address not valid, can't redirect" -msgstr "" - -#: ipaserver/plugins/internal.py:766 -msgid "Create dns record" -msgstr "" - -#: ipaserver/plugins/internal.py:767 -msgid "Creating record." -msgstr "" - -#: ipaserver/plugins/internal.py:768 -msgid "Record creation failed." -msgstr "" - -#: ipaserver/plugins/internal.py:769 -msgid "Checking if record exists." -msgstr "" - -#: ipaserver/plugins/internal.py:770 -msgid "Record not found." -msgstr "" - -#: ipaserver/plugins/internal.py:771 -msgid "Redirection to PTR record" -msgstr "" - -#: ipaserver/plugins/internal.py:772 -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#: ipaserver/plugins/internal.py:773 -msgid "Target reverse zone not found." -msgstr "" - -#: ipaserver/plugins/internal.py:774 -msgid "Fetching DNS zones." -msgstr "" - -#: ipaserver/plugins/internal.py:775 -msgid "An error occurred while fetching dns zones." -msgstr "" - -#: ipaserver/plugins/internal.py:776 -msgid "You will be redirected to DNS Zone." -msgstr "" - -#: ipaserver/plugins/internal.py:777 -msgid "Remove DNS resource records" -msgstr "" - -#: ipaserver/plugins/internal.py:778 -msgid "Standard Record Types" -msgstr "" - -#: ipaserver/plugins/internal.py:779 -msgid "Records for DNS Zone" -msgstr "" - -#: ipaserver/plugins/internal.py:780 -msgid "Record Type" -msgstr "" - -#: ipaserver/plugins/internal.py:783 -msgid "Add DNS zone" -msgstr "" - -#: ipaserver/plugins/internal.py:785 -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:786 -msgid "DNS Zone Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:787 -msgid "Remove DNS zones" -msgstr "" - -#: ipaserver/plugins/internal.py:788 -msgid "Remove Permission" -msgstr "" - -#: ipaserver/plugins/internal.py:789 -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:790 -msgid "Skip DNS check" -msgstr "" - -#: ipaserver/plugins/internal.py:791 -msgid "Skip overlap check" -msgstr "" - -#: ipaserver/plugins/internal.py:792 -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:793 -msgid "Authoritative nameserver change" -msgstr "" - -#: ipaserver/plugins/internal.py:798 -msgid "Level" -msgstr "" - -#: ipaserver/plugins/internal.py:799 -msgid "Set Domain Level" -msgstr "" - -#: ipaserver/plugins/internal.py:802 -msgid "Add user group" -msgstr "" - -#: ipaserver/plugins/internal.py:804 -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:807 -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:810 -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:813 -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:816 -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:819 -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:822 -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:825 -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:828 -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:832 -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:836 -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:840 -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:844 -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:846 -msgid "Group Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:847 ipaserver/plugins/internal.py:1175 -#: ipaserver/plugins/internal.py:1469 -msgid "External" -msgstr "" - -#: ipaserver/plugins/internal.py:848 ipaserver/plugins/internal.py:1402 -msgid "Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:849 -msgid "Group categories" -msgstr "" - -#: ipaserver/plugins/internal.py:850 -msgid "Change to external group" -msgstr "" - -#: ipaserver/plugins/internal.py:851 -msgid "Change to POSIX group" -msgstr "" - -#: ipaserver/plugins/internal.py:852 -msgid "Non-POSIX" -msgstr "" - -#: ipaserver/plugins/internal.py:853 -msgid "POSIX" -msgstr "" - -#: ipaserver/plugins/internal.py:854 -msgid "Remove user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:856 -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:859 -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:862 -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:865 -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:868 -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:871 -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:874 -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:877 -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:880 -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:882 -msgid "Group Type" -msgstr "" - -#: ipaserver/plugins/internal.py:886 -msgid "Add HBAC rule" -msgstr "" - -#: ipaserver/plugins/internal.py:888 -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:891 -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:894 -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:897 -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:901 -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:904 -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:909 -msgid "Accessing" -msgstr "" - -#: ipaserver/plugins/internal.py:911 -msgid "Remove HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:913 -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:916 -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:919 -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:922 -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:926 -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:929 -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:931 -msgid "Via Service" -msgstr "" - -#: ipaserver/plugins/internal.py:935 ipaserver/plugins/internal.py:1518 -msgid "Who" -msgstr "" - -#: ipaserver/plugins/internal.py:938 -msgid "Add HBAC service" -msgstr "" - -#: ipaserver/plugins/internal.py:940 -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:943 -msgid "Remove HBAC services" -msgstr "" - -#: ipaserver/plugins/internal.py:945 -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:950 -msgid "Add HBAC service group" -msgstr "" - -#: ipaserver/plugins/internal.py:952 -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:955 -msgid "Remove HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:957 -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:963 -msgid "Access Denied" -msgstr "" - -#: ipaserver/plugins/internal.py:964 -msgid "Access Granted" -msgstr "" - -#: ipaserver/plugins/internal.py:965 -msgid "Include Disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:966 -msgid "Include Enabled" -msgstr "" - -#: ipaserver/plugins/internal.py:967 -msgid "HBAC Test" -msgstr "" - -#: ipaserver/plugins/internal.py:968 -msgid "Matched" -msgstr "" - -#: ipaserver/plugins/internal.py:969 -msgid "Missing values: " -msgstr "" - -#: ipaserver/plugins/internal.py:970 -msgid "New Test" -msgstr "" - -#: ipaserver/plugins/internal.py:971 -msgid "Rules" -msgstr "" - -#: ipaserver/plugins/internal.py:972 -msgid "Run Test" -msgstr "" - -#: ipaserver/plugins/internal.py:973 -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:974 -msgid "Unmatched" -msgstr "" - -#: ipaserver/plugins/internal.py:977 -msgid "Add host" -msgstr "" - -#: ipaserver/plugins/internal.py:979 -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:982 -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:985 -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:988 -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:991 -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:994 -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:996 -msgid "Host Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:997 ipaserver/plugins/internal.py:1337 -msgid "Host Name" -msgstr "" - -#: ipaserver/plugins/internal.py:998 ipaserver/plugins/internal.py:1335 -msgid "Delete Key, Unprovision" -msgstr "" - -#: ipaserver/plugins/internal.py:999 -msgid "Host Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1000 -msgid "Enrolled" -msgstr "" - -#: ipaserver/plugins/internal.py:1001 -msgid "Enrollment" -msgstr "" - -#: ipaserver/plugins/internal.py:1002 -msgid "Fully Qualified Host Name" -msgstr "" - -#: ipaserver/plugins/internal.py:1003 -msgid "Generate OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1004 -msgid "Generated OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1005 -msgid "Kerberos Key" -msgstr "" - -#: ipaserver/plugins/internal.py:1006 ipaserver/plugins/internal.py:1338 -msgid "Kerberos Key Not Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1007 -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1008 ipaserver/plugins/internal.py:1725 -msgid "One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1009 -msgid "One-Time Password Not Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1010 -msgid "One-Time Password Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1011 -msgid "Reset OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1012 -msgid "Reset One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1013 -msgid "Set OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1014 -msgid "OTP set" -msgstr "" - -#: ipaserver/plugins/internal.py:1015 -msgid "Set One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1016 -msgid "Remove hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1018 -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1021 -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1024 -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1027 -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1030 -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1033 -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1036 ipaserver/plugins/internal.py:1349 -msgid "Unprovision" -msgstr "" - -#: ipaserver/plugins/internal.py:1037 -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -#: ipaserver/plugins/internal.py:1038 -msgid "Unprovisioning host" -msgstr "" - -#: ipaserver/plugins/internal.py:1039 -msgid "Host unprovisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1042 -msgid "Add host group" -msgstr "" - -#: ipaserver/plugins/internal.py:1044 -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1047 -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1050 -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1053 -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1056 -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1059 -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1062 -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1066 -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1070 -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1074 -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1078 -msgid "Host Group Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1079 -msgid "Remove host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1081 -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1084 -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1087 -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1090 -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1093 -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1096 -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1100 -msgid "Keycloak or Red Hat SSO" -msgstr "" - -#: ipaserver/plugins/internal.py:1101 -msgid "Google" -msgstr "" - -#: ipaserver/plugins/internal.py:1102 -msgid "Github" -msgstr "" - -#: ipaserver/plugins/internal.py:1103 -msgid "Microsoft or Azure" -msgstr "" - -#: ipaserver/plugins/internal.py:1104 -msgid "Okta" -msgstr "" - -#: ipaserver/plugins/internal.py:1105 -msgid "OAuth 2.0 client details" -msgstr "" - -#: ipaserver/plugins/internal.py:1106 -msgid "Identity provider details" -msgstr "" - -#: ipaserver/plugins/internal.py:1107 -msgid "Verify secret" -msgstr "" - -#: ipaserver/plugins/internal.py:1110 -msgid "User to override" -msgstr "" - -#: ipaserver/plugins/internal.py:1111 -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -#: ipaserver/plugins/internal.py:1112 -msgid "Enter trusted user login." -msgstr "" - -#: ipaserver/plugins/internal.py:1113 ipaserver/plugins/internal.py:1747 -msgid "Profile" -msgstr "" - -#: ipaserver/plugins/internal.py:1116 -msgid "Group to override" -msgstr "" - -#: ipaserver/plugins/internal.py:1117 -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#: ipaserver/plugins/internal.py:1118 -msgid "Enter trusted group name." -msgstr "" - -#: ipaserver/plugins/internal.py:1121 -msgid "Add ID view" -msgstr "" - -#: ipaserver/plugins/internal.py:1122 -msgid "Add group ID override" -msgstr "" - -#: ipaserver/plugins/internal.py:1123 -msgid "Add user ID override" -msgstr "" - -#: ipaserver/plugins/internal.py:1124 -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -#: ipaserver/plugins/internal.py:1125 ipaserver/plugins/internal.py:1126 -msgid "Applied to hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1127 -msgid "Apply to host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1129 -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1131 -msgid "Apply to hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1133 -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1136 -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -#: ipaserver/plugins/internal.py:1137 -msgid "Remove ID views" -msgstr "" - -#: ipaserver/plugins/internal.py:1138 -msgid "Remove user ID overrides" -msgstr "" - -#: ipaserver/plugins/internal.py:1139 -msgid "Remove group ID overrides" -msgstr "" - -#: ipaserver/plugins/internal.py:1140 -msgid "Un-apply from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1141 -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1142 -msgid "Un-apply" -msgstr "" - -#: ipaserver/plugins/internal.py:1143 -msgid "Un-apply from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1144 -msgid "Un-apply ID Views from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1145 -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1147 -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1154 -msgid "Add netgroup" -msgstr "" - -#: ipaserver/plugins/internal.py:1156 -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1159 -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1162 -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1165 -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1168 -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1171 -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1179 -msgid "Netgroup Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1181 -msgid "Remove netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1183 -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1186 -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1189 -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1192 -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1195 -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1198 -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1207 -msgid "Add OTP token" -msgstr "" - -#: ipaserver/plugins/internal.py:1209 -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1211 -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#: ipaserver/plugins/internal.py:1212 -msgid "Configure your token" -msgstr "" - -#: ipaserver/plugins/internal.py:1213 -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#: ipaserver/plugins/internal.py:1214 -msgid "OTP Token Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1215 -msgid "Disable token" -msgstr "" - -#: ipaserver/plugins/internal.py:1216 -msgid "Enable token" -msgstr "" - -#: ipaserver/plugins/internal.py:1217 -msgid "Remove OTP tokens" -msgstr "" - -#: ipaserver/plugins/internal.py:1219 -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1221 -msgid "Show QR code" -msgstr "" - -#: ipaserver/plugins/internal.py:1222 -msgid "Show configuration uri" -msgstr "" - -#: ipaserver/plugins/internal.py:1223 -msgid "Counter-based (HOTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:1224 -msgid "Time-based (TOTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:1227 -msgid "Add Custom Attribute" -msgstr "" - -#: ipaserver/plugins/internal.py:1230 -msgid "Permission settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1231 -msgid "Attribute breakdown" -msgstr "" - -#: ipaserver/plugins/internal.py:1235 -msgid "Privilege Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1238 -msgid "Public key:" -msgstr "" - -#: ipaserver/plugins/internal.py:1239 -msgid "Set public key" -msgstr "" - -#: ipaserver/plugins/internal.py:1240 ipaserver/plugins/internal.py:1359 -msgid "Show/Set key" -msgstr "" - -#: ipaserver/plugins/internal.py:1241 ipaserver/plugins/internal.py:1360 -msgid "Modified: key not set" -msgstr "" - -#: ipaserver/plugins/internal.py:1242 ipaserver/plugins/internal.py:1361 -msgid "Modified" -msgstr "" - -#: ipaserver/plugins/internal.py:1243 ipaserver/plugins/internal.py:1362 -msgid "New: key not set" -msgstr "" - -#: ipaserver/plugins/internal.py:1244 ipaserver/plugins/internal.py:1363 -msgid "New: key set" -msgstr "" - -#: ipaserver/plugins/internal.py:1247 -msgid "Add password policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1249 -msgid "Remove password policies" -msgstr "" - -#: ipaserver/plugins/internal.py:1252 -msgid "Add ID range" -msgstr "" - -#: ipaserver/plugins/internal.py:1253 -msgid "Range Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1255 ipaserver/plugins/internal.py:1385 -msgid "Base ID" -msgstr "" - -#: ipaserver/plugins/internal.py:1256 -msgid "Primary RID base" -msgstr "" - -#: ipaserver/plugins/internal.py:1257 ipaserver/plugins/internal.py:1392 -msgid "Range size" -msgstr "" - -#: ipaserver/plugins/internal.py:1258 -msgid "Domain SID" -msgstr "" - -#: ipaserver/plugins/internal.py:1259 -msgid "Secondary RID base" -msgstr "" - -#: ipaserver/plugins/internal.py:1260 -msgid "Remove ID ranges" -msgstr "" - -#: ipaserver/plugins/internal.py:1263 -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -#: ipaserver/plugins/internal.py:1264 -msgid "Detect" -msgstr "" - -#: ipaserver/plugins/internal.py:1265 -msgid "Local domain" -msgstr "" - -#: ipaserver/plugins/internal.py:1266 -msgid "IPA trust" -msgstr "" - -#: ipaserver/plugins/internal.py:1267 -msgid "Active Directory winsync" -msgstr "" - -#: ipaserver/plugins/internal.py:1270 -msgid "Add RADIUS server" -msgstr "" - -#: ipaserver/plugins/internal.py:1271 -msgid "RADIUS Proxy Server Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1272 -msgid "Remove RADIUS servers" -msgstr "" - -#: ipaserver/plugins/internal.py:1276 -msgid "Check DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:1277 -msgid "Do you also want to perform DNS check?" -msgstr "" - -#: ipaserver/plugins/internal.py:1278 -msgid "Force Update" -msgstr "" - -#: ipaserver/plugins/internal.py:1283 -msgid "Add SELinux user map" -msgstr "" - -#: ipaserver/plugins/internal.py:1285 -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1288 -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1291 -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1294 -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1299 -msgid "Remove selinux user maps" -msgstr "" - -#: ipaserver/plugins/internal.py:1301 -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1304 -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1307 -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1310 -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1317 -msgid "Server Roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1318 -msgid "Server Role" -msgstr "" - -#: ipaserver/plugins/internal.py:1321 -msgid "Warning: Consider service replication" -msgstr "" - -#: ipaserver/plugins/internal.py:1322 -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#: ipaserver/plugins/internal.py:1323 -msgid "Delete Server" -msgstr "" - -#: ipaserver/plugins/internal.py:1324 -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#: ipaserver/plugins/internal.py:1327 -msgid "Add service" -msgstr "" - -#: ipaserver/plugins/internal.py:1329 -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1332 -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1334 -msgid "Service Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:1336 -msgid "Service Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1339 -msgid "Provisioning" -msgstr "" - -#: ipaserver/plugins/internal.py:1340 -msgid "Remove services" -msgstr "" - -#: ipaserver/plugins/internal.py:1342 -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1345 -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1350 -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -#: ipaserver/plugins/internal.py:1351 -msgid "Unprovisioning service" -msgstr "" - -#: ipaserver/plugins/internal.py:1352 -msgid "Service unprovisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1353 -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1356 -msgid "SSH public keys" -msgstr "" - -#: ipaserver/plugins/internal.py:1357 -msgid "SSH public key:" -msgstr "" - -#: ipaserver/plugins/internal.py:1358 -msgid "Set SSH key" -msgstr "" - -#: ipaserver/plugins/internal.py:1366 -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1367 -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1368 -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -#: ipaserver/plugins/internal.py:1369 -msgid "Add stage user" -msgstr "" - -#: ipaserver/plugins/internal.py:1370 -msgid "Stage users" -msgstr "" - -#: ipaserver/plugins/internal.py:1371 -msgid "Preserved users" -msgstr "" - -#: ipaserver/plugins/internal.py:1372 -msgid "Remove preserved users" -msgstr "" - -#: ipaserver/plugins/internal.py:1373 -msgid "Remove stage users" -msgstr "" - -#: ipaserver/plugins/internal.py:1374 -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1375 -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#: ipaserver/plugins/internal.py:1376 -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1377 -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1378 -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1379 -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#: ipaserver/plugins/internal.py:1380 -msgid "User categories" -msgstr "" - -#: ipaserver/plugins/internal.py:1383 -msgid "Add subid" -msgstr "" - -#: ipaserver/plugins/internal.py:1384 -msgid "Assigned subids" -msgstr "" - -#: ipaserver/plugins/internal.py:1386 -msgid "DNA remaining" -msgstr "" - -#: ipaserver/plugins/internal.py:1393 -msgid "Remaining subids" -msgstr "" - -#: ipaserver/plugins/internal.py:1394 -msgid "Subordinate ID Statistics" -msgstr "" - -#: ipaserver/plugins/internal.py:1397 -msgid "Add sudo command" -msgstr "" - -#: ipaserver/plugins/internal.py:1399 -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1403 -msgid "Remove sudo commands" -msgstr "" - -#: ipaserver/plugins/internal.py:1405 -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1410 -msgid "Add sudo command group" -msgstr "" - -#: ipaserver/plugins/internal.py:1412 -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1416 -msgid "Remove sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1418 -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1423 -msgid "Add sudo rule" -msgstr "" - -#: ipaserver/plugins/internal.py:1424 -msgid "Add sudo option" -msgstr "" - -#: ipaserver/plugins/internal.py:1426 -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1430 -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1434 -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1438 -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1442 -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1445 -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1448 -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1451 -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1454 -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1457 -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1460 -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1462 -msgid "Allow" -msgstr "" - -#: ipaserver/plugins/internal.py:1463 -msgid "Any Command" -msgstr "" - -#: ipaserver/plugins/internal.py:1464 -msgid "Any Group" -msgstr "" - -#: ipaserver/plugins/internal.py:1467 -msgid "Run Commands" -msgstr "" - -#: ipaserver/plugins/internal.py:1468 -msgid "Deny" -msgstr "" - -#: ipaserver/plugins/internal.py:1470 -msgid "Access this host" -msgstr "" - -#: ipaserver/plugins/internal.py:1472 -msgid "Option added" -msgstr "" - -#: ipaserver/plugins/internal.py:1473 -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -#: ipaserver/plugins/internal.py:1475 -msgid "Remove sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1477 -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1481 -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1485 -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1489 -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1493 -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1496 -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1499 -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1502 -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1505 -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1508 -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1511 -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1513 -msgid "As Whom" -msgstr "" - -#: ipaserver/plugins/internal.py:1514 -msgid "Specified Commands and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1515 -msgid "Specified Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1521 -msgid "Remove sudo options" -msgstr "" - -#: ipaserver/plugins/internal.py:1524 -msgid "Autogenerated" -msgstr "" - -#: ipaserver/plugins/internal.py:1525 -msgid "Segment details" -msgstr "" - -#: ipaserver/plugins/internal.py:1526 -msgid "Replication configuration" -msgstr "" - -#: ipaserver/plugins/internal.py:1527 -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#: ipaserver/plugins/internal.py:1530 -msgid "Add IPA location" -msgstr "" - -#: ipaserver/plugins/internal.py:1532 -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1534 -msgid "Remove IPA locations" -msgstr "" - -#: ipaserver/plugins/internal.py:1536 -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1540 -msgid "Add topology segment" -msgstr "" - -#: ipaserver/plugins/internal.py:1541 -msgid "Remove topology segments" -msgstr "" - -#: ipaserver/plugins/internal.py:1544 -msgid "Account" -msgstr "" - -#: ipaserver/plugins/internal.py:1545 -msgid "Add trust" -msgstr "" - -#: ipaserver/plugins/internal.py:1546 -msgid "Administrative account" -msgstr "" - -#: ipaserver/plugins/internal.py:1547 -msgid "SID blocklists" -msgstr "" - -#: ipaserver/plugins/internal.py:1548 -msgid "Trust Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1550 -msgid "Establish using" -msgstr "" - -#: ipaserver/plugins/internal.py:1551 -msgid "Fetch domains" -msgstr "" - -#: ipaserver/plugins/internal.py:1554 -msgid "Pre-shared password" -msgstr "" - -#: ipaserver/plugins/internal.py:1555 -msgid "Remove trusts" -msgstr "" - -#: ipaserver/plugins/internal.py:1556 -msgid "Remove domains" -msgstr "" - -#: ipaserver/plugins/internal.py:1557 ipaserver/plugins/trust.py:559 -msgid "Trust direction" -msgstr "" - -#: ipaserver/plugins/internal.py:1558 ipaserver/plugins/trust.py:567 -msgid "Trust status" -msgstr "" - -#: ipaserver/plugins/internal.py:1559 ipaserver/plugins/trust.py:563 -msgid "Trust type" -msgstr "" - -#: ipaserver/plugins/internal.py:1560 -msgid "Alternative UPN suffixes" -msgstr "" - -#: ipaserver/plugins/internal.py:1564 -msgid "User attributes for SMB services" -msgstr "" - -#: ipaserver/plugins/internal.py:1567 -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -#: ipaserver/plugins/internal.py:1570 -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -#: ipaserver/plugins/internal.py:1573 -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#: ipaserver/plugins/internal.py:1576 -msgid "Drive to mount a home directory" -msgstr "" - -#: ipaserver/plugins/internal.py:1583 -msgid "Account Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1584 -msgid "Account Status" -msgstr "" - -#: ipaserver/plugins/internal.py:1585 -msgid "Active users" -msgstr "" - -#: ipaserver/plugins/internal.py:1586 -msgid "Add user" -msgstr "" - -#: ipaserver/plugins/internal.py:1588 -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1591 -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1594 -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1597 -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1600 -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1602 -msgid "Auto assign subordinate ids" -msgstr "" - -#: ipaserver/plugins/internal.py:1604 -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1607 -msgid "Contact Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1608 -msgid "Delete mode" -msgstr "" - -#: ipaserver/plugins/internal.py:1609 -msgid "Employee Information" -msgstr "" - -#: ipaserver/plugins/internal.py:1610 -msgid "Error changing account status" -msgstr "" - -#: ipaserver/plugins/internal.py:1611 -msgid "Password expiration" -msgstr "" - -#: ipaserver/plugins/internal.py:1612 -msgid "Mailing Address" -msgstr "" - -#: ipaserver/plugins/internal.py:1613 -msgid "Misc. Information" -msgstr "" - -#: ipaserver/plugins/internal.py:1614 -msgid "delete" -msgstr "" - -#: ipaserver/plugins/internal.py:1615 -msgid "preserve" -msgstr "" - -#: ipaserver/plugins/internal.py:1616 -msgid "No private group" -msgstr "" - -#: ipaserver/plugins/internal.py:1617 -msgid "Remove users" -msgstr "" - -#: ipaserver/plugins/internal.py:1619 -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1622 -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1625 -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1628 -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1631 -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1633 -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#: ipaserver/plugins/internal.py:1634 -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -#: ipaserver/plugins/internal.py:1635 -msgid "Unlock" -msgstr "" - -#: ipaserver/plugins/internal.py:1636 -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1639 -msgid "Add vault" -msgstr "" - -#: ipaserver/plugins/internal.py:1641 -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1644 -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1647 -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1650 -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1653 -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1656 -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1659 -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -#: ipaserver/plugins/internal.py:1663 -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -#: ipaserver/plugins/internal.py:1666 -msgid "Asymmetric" -msgstr "" - -#: ipaserver/plugins/internal.py:1667 -msgid "Vaults Config" -msgstr "" - -#: ipaserver/plugins/internal.py:1669 -msgid "Members" -msgstr "" - -#: ipaserver/plugins/internal.py:1670 -msgid "My User Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1671 -msgid "Owners" -msgstr "" - -#: ipaserver/plugins/internal.py:1672 -msgid "Remove vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1674 -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1677 -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1680 -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1683 -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1686 -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1689 -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1692 -msgid "Service Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1693 -msgid "Shared" -msgstr "" - -#: ipaserver/plugins/internal.py:1694 -msgid "Shared Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1695 -msgid "Standard" -msgstr "" - -#: ipaserver/plugins/internal.py:1696 -msgid "Symmetric" -msgstr "" - -#: ipaserver/plugins/internal.py:1697 -msgid "Vault Type" -msgstr "" - -#: ipaserver/plugins/internal.py:1699 -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#: ipaserver/plugins/internal.py:1703 -msgid "User Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1708 -msgid "Current password is required" -msgstr "" - -#: ipaserver/plugins/internal.py:1709 -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#: ipaserver/plugins/internal.py:1710 -msgid "First OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1714 -msgid "New password is required" -msgstr "" - -#: ipaserver/plugins/internal.py:1717 -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -#: ipaserver/plugins/internal.py:1721 -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -#: ipaserver/plugins/internal.py:1726 -msgid "Token synchronization failed" -msgstr "" - -#: ipaserver/plugins/internal.py:1727 -msgid "The username, password or token codes are not correct" -msgstr "" - -#: ipaserver/plugins/internal.py:1728 -msgid "Token was synchronized" -msgstr "" - -#: ipaserver/plugins/internal.py:1731 -msgid "Password change complete" -msgstr "" - -#: ipaserver/plugins/internal.py:1733 -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#: ipaserver/plugins/internal.py:1734 -msgid "Passwords must match" -msgstr "" - -#: ipaserver/plugins/internal.py:1735 -msgid "Password reset was not successful." -msgstr "" - -#: ipaserver/plugins/internal.py:1737 -msgid "Reset your password." -msgstr "" - -#: ipaserver/plugins/internal.py:1738 -msgid "Second OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1740 -msgid "Verify Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1750 -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1751 -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -#: ipaserver/plugins/internal.py:1752 -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1753 -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:1754 -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1755 -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -#: ipaserver/plugins/internal.py:1756 -msgid "Some entries were not deleted" -msgstr "" - -#: ipaserver/plugins/internal.py:1759 -msgid "Quick Links" -msgstr "" - -#: ipaserver/plugins/internal.py:1760 -msgid "Select All" -msgstr "" - -#: ipaserver/plugins/internal.py:1761 -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -#: ipaserver/plugins/internal.py:1762 -msgid "Unselect All" -msgstr "" - -#: ipaserver/plugins/internal.py:1766 -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1770 -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1782 -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1818 -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1830 -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1859 -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1904 -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1915 -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1952 -msgid "Working" -msgstr "" - -#: ipaserver/plugins/internal.py:1955 -msgid "Audit" -msgstr "" - -#: ipaserver/plugins/internal.py:1956 -msgid "Authentication" -msgstr "" - -#: ipaserver/plugins/internal.py:1958 -msgid "Automount" -msgstr "" - -#: ipaserver/plugins/internal.py:1960 -msgid "DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:1961 -msgid "Host-Based Access Control" -msgstr "" - -#: ipaserver/plugins/internal.py:1962 -msgid "Identity" -msgstr "" - -#: ipaserver/plugins/internal.py:1964 -msgid "Network Services" -msgstr "" - -#: ipaserver/plugins/internal.py:1965 -msgid "Policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1966 -msgid "Role-Based Access Control" -msgstr "" - -#: ipaserver/plugins/internal.py:1967 -msgid "Subordinate IDs" -msgstr "" - -#: ipaserver/plugins/internal.py:1968 -msgid "Sudo" -msgstr "" - -#: ipaserver/plugins/internal.py:1969 -msgid "Topology" -msgstr "" - -#: ipaserver/plugins/internal.py:1970 ipaserver/plugins/trust.py:533 -msgid "Trusts" -msgstr "" - -#: ipaserver/plugins/internal.py:1972 -msgid "True" -msgstr "" - -#: ipaserver/plugins/internal.py:1974 -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1991 -msgid "API Browser" -msgstr "" - -#: ipaserver/plugins/internal.py:1992 -msgid "First" -msgstr "" - -#: ipaserver/plugins/internal.py:1993 -msgid "Last" -msgstr "" - -#: ipaserver/plugins/internal.py:1994 -msgid "Next" -msgstr "" - -#: ipaserver/plugins/internal.py:1995 -msgid "Page" -msgstr "" - -#: ipaserver/plugins/internal.py:1996 -msgid "Prev" -msgstr "" - -#: ipaserver/plugins/internal.py:1997 -msgid "Undo" -msgstr "" - -#: ipaserver/plugins/internal.py:1998 -msgid "Undo this change." -msgstr "" - -#: ipaserver/plugins/internal.py:1999 -msgid "Undo All" -msgstr "" - -#: ipaserver/plugins/internal.py:2000 -msgid "Undo all changes in this field." -msgstr "" - -#: ipaserver/plugins/internal.py:2002 -msgid "Text does not match field pattern" -msgstr "" - -#: ipaserver/plugins/internal.py:2003 -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#: ipaserver/plugins/internal.py:2004 -msgid "Must be a decimal number" -msgstr "" - -#: ipaserver/plugins/internal.py:2005 -msgid "Format error" -msgstr "" - -#: ipaserver/plugins/internal.py:2006 -msgid "Must be an integer" -msgstr "" - -#: ipaserver/plugins/internal.py:2007 -msgid "Not a valid IP address" -msgstr "" - -#: ipaserver/plugins/internal.py:2008 -msgid "Not a valid IPv4 address" -msgstr "" - -#: ipaserver/plugins/internal.py:2009 -msgid "Not a valid IPv6 address" -msgstr "" - -#: ipaserver/plugins/internal.py:2010 -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#: ipaserver/plugins/internal.py:2011 -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -#: ipaserver/plugins/internal.py:2012 -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#: ipaserver/plugins/internal.py:2013 -msgid "Parse error" -msgstr "" - -#: ipaserver/plugins/internal.py:2014 -msgid "Must be a positive number" -msgstr "" - -#: ipaserver/plugins/internal.py:2015 -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#: ipaserver/plugins/internal.py:2016 -msgid "Required field" -msgstr "" - -#: ipaserver/plugins/internal.py:2017 -msgid "Unsupported value" -msgstr "" - #: ipaserver/plugins/schema.py:24 msgid "" "\n" @@ -26582,6 +25892,244 @@ msgstr "" msgid "Fingerprint of schema cached by client" msgstr "" +#: ipaserver/plugins/server.py:36 +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +#: ipaserver/plugins/server.py:38 +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +#: ipaserver/plugins/server.py:42 +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +#: ipaserver/plugins/server.py:45 +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#: ipaserver/plugins/server.py:61 +msgid "server" +msgstr "" + +#: ipaserver/plugins/server.py:62 +msgid "servers" +msgstr "" + +#: ipaserver/plugins/server.py:70 +msgid "IPA Servers" +msgstr "" + +#: ipaserver/plugins/server.py:133 +msgid "Server DNS location" +msgstr "" + +#: ipaserver/plugins/server.py:140 +msgid "Service weight" +msgstr "" + +#: ipaserver/plugins/server.py:141 +msgid "Weight for server services" +msgstr "" + +#: ipaserver/plugins/server.py:148 +msgid "Service relative weight" +msgstr "" + +#: ipaserver/plugins/server.py:149 +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#: ipaserver/plugins/server.py:154 +msgid "Enabled server roles" +msgstr "" + +#: ipaserver/plugins/server.py:155 +msgid "List of enabled roles" +msgstr "" + +#: ipaserver/plugins/server.py:222 +msgid "Modify information about an IPA server." +msgstr "" + +#: ipaserver/plugins/server.py:224 +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/server.py:306 +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/server.py:444 +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/server.py:449 +msgid "Ignore topology errors" +msgstr "" + +#: ipaserver/plugins/server.py:450 +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +#: ipaserver/plugins/server.py:455 +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +#: ipaserver/plugins/server.py:456 +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +#: ipaserver/plugins/server.py:462 +msgid "Force server removal" +msgstr "" + +#: ipaserver/plugins/server.py:463 +msgid "Force server removal even if it does not exist" +msgstr "" + +#: ipaserver/plugins/server.py:500 +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +#: ipaserver/plugins/server.py:506 +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +#: ipaserver/plugins/server.py:520 +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +#: ipaserver/plugins/server.py:530 +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +#: ipaserver/plugins/server.py:545 +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#: ipaserver/plugins/server.py:595 +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:616 +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:637 +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:663 +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:701 +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:717 +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:722 +msgid "You may need to manually remove them from the tree" +msgstr "" + +#: ipaserver/plugins/server.py:737 +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +#: ipaserver/plugins/server.py:747 +msgid "Ignoring topology connectivity errors." +msgstr "" + +#: ipaserver/plugins/server.py:766 +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +#: ipaserver/plugins/server.py:793 +msgid "Server has already been deleted" +msgstr "" + +#: ipaserver/plugins/server.py:843 +msgid "Agreements deleted" +msgstr "" + +#: ipaserver/plugins/server.py:854 +msgid "Following segments were not deleted:" +msgstr "" + +#: ipaserver/plugins/server.py:927 ipaserver/plugins/trust.py:1869 +#, python-format +msgid "must be \"%s\"" +msgstr "" + +#: ipaserver/plugins/server.py:939 +msgid "not allowed to perform server connection check" +msgstr "" + +#: ipaserver/plugins/server.py:965 +msgid "Set enabled/hidden state of a server." +msgstr "" + +#: ipaserver/plugins/server.py:971 +msgid "State" +msgstr "" + +#: ipaserver/plugins/server.py:972 +msgid "Server state" +msgstr "" + +#: ipaserver/plugins/server.py:977 +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +#: ipaserver/plugins/server.py:986 +msgid "Cannot hide CA renewal master." +msgstr "" + +#: ipaserver/plugins/server.py:988 +msgid "Cannot hide DNSSec key master." +msgstr "" + +#: ipaserver/plugins/server.py:1000 +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + #: ipaserver/plugins/service.py:60 msgid "" "\n" @@ -26700,130 +26248,131 @@ msgid "" "authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " "'hardened' to allow brute-force hardened password authentication by SPAKE or " "FAST. Use 'idp' to allow authentication against an external Identity " -"Provider supporting OAuth 2.0 Device Authorization Flow (RFC 8628). With no " -"indicator specified, all authentication mechanisms are allowed." +"Provider supporting OAuth 2.0 Device Authorization Flow (RFC 8628). Use " +"'passkey' to allow passkey-based 2FA authentications. With no indicator " +"specified, all authentication mechanisms are allowed." msgstr "" -#: ipaserver/plugins/service.py:636 +#: ipaserver/plugins/service.py:638 msgid "NONE value cannot be combined with other PAC types" msgstr "" -#: ipaserver/plugins/service.py:688 +#: ipaserver/plugins/service.py:690 msgid "Add a new IPA service." msgstr "" -#: ipaserver/plugins/service.py:690 ipaserver/plugins/service.py:759 +#: ipaserver/plugins/service.py:692 ipaserver/plugins/service.py:761 #, python-format msgid "Added service \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:696 +#: ipaserver/plugins/service.py:698 msgid "force principal name even if host not in DNS" msgstr "" -#: ipaserver/plugins/service.py:699 +#: ipaserver/plugins/service.py:701 msgid "Skip host check" msgstr "" -#: ipaserver/plugins/service.py:700 +#: ipaserver/plugins/service.py:702 msgid "" "force service to be created even when host object does not exist to manage it" msgstr "" -#: ipaserver/plugins/service.py:718 ipaserver/plugins/service.py:827 +#: ipaserver/plugins/service.py:720 ipaserver/plugins/service.py:829 #, python-format msgid "The host '%s' does not exist to add a service to." msgstr "" -#: ipaserver/plugins/service.py:757 +#: ipaserver/plugins/service.py:759 msgid "Add a new SMB service." msgstr "" -#: ipaserver/plugins/service.py:773 +#: ipaserver/plugins/service.py:775 msgid "SMB service NetBIOS name" msgstr "" -#: ipaserver/plugins/service.py:887 +#: ipaserver/plugins/service.py:889 #, python-format msgid "Deleted service \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:907 +#: ipaserver/plugins/service.py:909 #, python-format msgid "Modified service \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:958 +#: ipaserver/plugins/service.py:960 #, python-format msgid "%(count)d service matched" msgid_plural "%(count)d services matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/service.py:1157 +#: ipaserver/plugins/service.py:1159 #, python-format msgid "Disabled service \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1198 +#: ipaserver/plugins/service.py:1200 #, python-format msgid "Added certificates to service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1205 +#: ipaserver/plugins/service.py:1207 #, python-format msgid "Removed certificates from service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1221 +#: ipaserver/plugins/service.py:1223 msgid "Add new principal alias to a service" msgstr "" -#: ipaserver/plugins/service.py:1222 +#: ipaserver/plugins/service.py:1224 #, python-format msgid "Added new aliases to the service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1233 +#: ipaserver/plugins/service.py:1235 msgid "Remove principal alias from a service" msgstr "" -#: ipaserver/plugins/service.py:1234 +#: ipaserver/plugins/service.py:1236 #, python-format msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1244 +#: ipaserver/plugins/service.py:1246 msgid "Add new resource delegation to a service" msgstr "" -#: ipaserver/plugins/service.py:1245 +#: ipaserver/plugins/service.py:1247 #, python-format msgid "Added new resource delegation to the service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1259 +#: ipaserver/plugins/service.py:1261 msgid "Remove resource delegation from a service" msgstr "" -#: ipaserver/plugins/service.py:1260 +#: ipaserver/plugins/service.py:1262 #, python-format msgid "Removed resource delegation from the service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/service.py:1267 +#: ipaserver/plugins/service.py:1269 msgid "" "Allow users, groups, hosts or host groups to handle a resource delegation of " "this service." msgstr "" -#: ipaserver/plugins/service.py:1287 +#: ipaserver/plugins/service.py:1289 msgid "" "Disallow users, groups, hosts or host groups to handle a resource delegation " "of this service." msgstr "" -#: ipaserver/plugins/stageuser.py:65 +#: ipaserver/plugins/stageuser.py:67 msgid "" "\n" "Stageusers\n" @@ -26862,6 +26411,12 @@ msgid "" "may cause problems for some UNIX systems.\n" "Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" "\n" +"The user name must follow these rules:\n" +"- cannot contain only numbers\n" +"- must start with a letter, a number, _ or .\n" +"- may contain letters, numbers, _, ., or -\n" +"- may end with a letter, a number, _, ., - or $\n" +"\n" "\n" "EXAMPLES:\n" "\n" @@ -26873,113 +26428,128 @@ msgid "" "\n" msgstr "" -#: ipaserver/plugins/stageuser.py:128 +#: ipaserver/plugins/stageuser.py:136 msgid "Stage Users" msgstr "" -#: ipaserver/plugins/stageuser.py:129 +#: ipaserver/plugins/stageuser.py:137 msgid "Stage User" msgstr "" -#: ipaserver/plugins/stageuser.py:130 +#: ipaserver/plugins/stageuser.py:138 msgid "stage user" msgstr "" -#: ipaserver/plugins/stageuser.py:131 +#: ipaserver/plugins/stageuser.py:139 msgid "stage users" msgstr "" -#: ipaserver/plugins/stageuser.py:278 +#: ipaserver/plugins/stageuser.py:286 #, python-format msgid "Added stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/stageuser.py:297 +#: ipaserver/plugins/stageuser.py:305 msgid "givenname is required" msgstr "" -#: ipaserver/plugins/stageuser.py:300 +#: ipaserver/plugins/stageuser.py:308 msgid "sn is required" msgstr "" -#: ipaserver/plugins/stageuser.py:431 +#: ipaserver/plugins/stageuser.py:443 #, python-format msgid "Deleted stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/stageuser.py:437 +#: ipaserver/plugins/stageuser.py:449 #, python-format msgid "Modified stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/stageuser.py:508 +#: ipaserver/plugins/stageuser.py:496 ipaserver/plugins/user.py:919 +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/stageuser.py:520 #, python-format msgid "Activate a stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/stageuser.py:521 +#: ipaserver/plugins/stageuser.py:533 msgid "Entry RDN is not 'uid'" msgstr "" -#: ipaserver/plugins/stageuser.py:527 +#: ipaserver/plugins/stageuser.py:539 #, python-format msgid "Entry has no '%(attribute)s'" msgstr "" -#: ipaserver/plugins/stageuser.py:703 +#: ipaserver/plugins/stageuser.py:715 #, python-format msgid "active user with name \"%(user)s\" already exists" msgstr "" -#: ipaserver/plugins/stageuser.py:767 +#: ipaserver/plugins/stageuser.py:779 #, python-format msgid "Stage user %s activated" msgstr "" -#: ipaserver/plugins/stageuser.py:784 -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:785 -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:790 -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:791 -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - #: ipaserver/plugins/stageuser.py:796 -msgid "Add new principal alias to the stageuser entry" +msgid "Add one or more certificates to the stageuser entry" msgstr "" #: ipaserver/plugins/stageuser.py:797 #, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" msgstr "" #: ipaserver/plugins/stageuser.py:802 -msgid "Remove principal alias from the stageuser entry" +msgid "Remove one or more certificates to the stageuser entry" msgstr "" #: ipaserver/plugins/stageuser.py:803 #, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" msgstr "" #: ipaserver/plugins/stageuser.py:808 -msgid "Add one or more certificate mappings to the stage user entry." +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:809 +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" msgstr "" #: ipaserver/plugins/stageuser.py:814 +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:815 +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:820 +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +#: ipaserver/plugins/stageuser.py:826 msgid "Remove one or more certificate mappings from the stage user entry." msgstr "" +#: ipaserver/plugins/stageuser.py:832 +msgid "Add one or more passkey mappings to the stage user entry." +msgstr "" + +#: ipaserver/plugins/stageuser.py:838 +msgid "Remove one or more passkey mappings from the stage user entry." +msgstr "" + #: ipaserver/plugins/sudorule.py:43 msgid "" "\n" @@ -27146,6 +26716,10 @@ msgid "" "%(type)s category cannot be set to 'all' while there are allowed %(objects)s" msgstr "" +#: ipaserver/plugins/sudorule.py:442 ipaserver/plugins/user.py:182 +msgid "users" +msgstr "" + #: ipaserver/plugins/sudorule.py:452 msgid "command" msgstr "" @@ -27673,40 +27247,633 @@ msgid "" "itself" msgstr "" -#: ipaserver/servroles.py:296 -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#: ipaserver/servroles.py:401 -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -#: ipaserver/servroles.py:443 -msgid "must be enabled only on a single master" -msgstr "" - -#: ipaserver/topology.py:14 -#, python-format +#: ipaserver/plugins/user.py:82 msgid "" "\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"The user name must follow these rules:\n" +"- cannot contain only numbers\n" +"- must start with a letter, a number, _ or .\n" +"- may contain letters, numbers, _, ., or -\n" +"- may end with a letter, a number, _, ., - or $\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" msgstr "" -#: ipaserver/topology.py:18 +#: ipaserver/plugins/user.py:157 ipaserver/plugins/user.py:895 +msgid "privileged user" +msgstr "" + +#: ipaserver/plugins/user.py:523 #, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:622 +msgid "Default group for new users is not POSIX" +msgstr "" + +#: ipaserver/plugins/user.py:734 +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:735 +#, python-format +msgid "Preserved user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:753 +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#: ipaserver/plugins/user.py:877 +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:997 +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1011 +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#: ipaserver/plugins/user.py:1042 +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1145 +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1167 +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1184 msgid "" "\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." msgstr "" -#: ipaserver/topology.py:120 +#: ipaserver/plugins/user.py:1193 #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1225 +msgid "Failed logins" +msgstr "" + +#: ipaserver/plugins/user.py:1229 +msgid "Last successful authentication" +msgstr "" + +#: ipaserver/plugins/user.py:1233 +msgid "Last failed authentication" +msgstr "" + +#: ipaserver/plugins/user.py:1237 +msgid "Time now" +msgstr "" + +#: ipaserver/plugins/user.py:1241 +msgid "Password grace count" +msgstr "" + +#: ipaserver/plugins/user.py:1248 +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#: ipaserver/plugins/user.py:1304 +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#: ipaserver/plugins/user.py:1344 +#, python-format +msgid "%(host)s failed" +msgstr "" + +#: ipaserver/plugins/user.py:1354 +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#: ipaserver/plugins/user.py:1362 +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1368 +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1393 +msgid "Add new principal alias to the user entry" +msgstr "" + +#: ipaserver/plugins/user.py:1394 +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1399 +msgid "Remove principal alias from the user entry" +msgstr "" + +#: ipaserver/plugins/user.py:1400 +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:52 +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#: ipaserver/plugins/vault.py:54 +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:56 +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:60 +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +#: ipaserver/plugins/vault.py:65 +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:70 +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +#: ipaserver/plugins/vault.py:76 +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:80 +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:84 +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:90 +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:94 +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +#: ipaserver/plugins/vault.py:99 +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +#: ipaserver/plugins/vault.py:104 +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +#: ipaserver/plugins/vault.py:109 +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:113 +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +#: ipaserver/plugins/vault.py:118 +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:125 +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +#: ipaserver/plugins/vault.py:138 +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +#: ipaserver/plugins/vault.py:144 +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:148 +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +#: ipaserver/plugins/vault.py:151 +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +#: ipaserver/plugins/vault.py:156 +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +#: ipaserver/plugins/vault.py:162 +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +#: ipaserver/plugins/vault.py:167 +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +#: ipaserver/plugins/vault.py:172 +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +#: ipaserver/plugins/vault.py:178 +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +#: ipaserver/plugins/vault.py:183 +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:188 +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:193 +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:198 +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:250 +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#: ipaserver/plugins/vault.py:256 +msgid "vaultcontainer" +msgstr "" + +#: ipaserver/plugins/vault.py:257 +msgid "vaultcontainers" +msgstr "" + +#: ipaserver/plugins/vault.py:265 +msgid "Vault Containers" +msgstr "" + +#: ipaserver/plugins/vault.py:266 +msgid "Vault Container" +msgstr "" + +#: ipaserver/plugins/vault.py:355 +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#: ipaserver/plugins/vault.py:365 ipaserver/plugins/vault.py:695 +msgid "Host is not supported" +msgstr "" + +#: ipaserver/plugins/vault.py:407 ipaserver/plugins/vault.py:431 +#: ipaserver/plugins/vault.py:798 ipaserver/plugins/vault.py:836 +#: ipaserver/plugins/vault.py:892 ipaserver/plugins/vault.py:948 +#: ipaserver/plugins/vault.py:970 ipaserver/plugins/vault.py:1011 +#: ipaserver/plugins/vault.py:1067 ipaserver/plugins/vault.py:1146 +msgid "KRA service is not enabled" +msgstr "" + +#: ipaserver/plugins/vault.py:422 +msgid "Deleted vault container" +msgstr "" + +#: ipaserver/plugins/vault.py:447 ipaserver/plugins/vault.py:472 +#: ipaserver/plugins/vault.py:1203 ipaserver/plugins/vault.py:1228 +#, python-format +msgid "owner %s" +msgstr "" + +#: ipaserver/plugins/vault.py:492 +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +#: ipaserver/plugins/vault.py:498 +msgid "vault" +msgstr "" + +#: ipaserver/plugins/vault.py:499 +msgid "vaults" +msgstr "" + +#: ipaserver/plugins/vault.py:522 +msgid "Vaults" +msgstr "" + +#: ipaserver/plugins/vault.py:523 +msgid "Vault" +msgstr "" + +#: ipaserver/plugins/vault.py:680 +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#: ipaserver/plugins/vault.py:784 +msgid "Add a vault." +msgstr "" + +#: ipaserver/plugins/vault.py:790 +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:829 +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:881 +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/vault.py:899 +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#: ipaserver/plugins/vault.py:939 +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:981 +msgid "Vault configuration" +msgstr "" + +#: ipaserver/plugins/vault.py:991 +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#: ipaserver/plugins/vault.py:1052 ipaserver/plugins/vault.py:1131 +msgid "Key wrapping algorithm" +msgstr "" + +#: ipaserver/plugins/vault.py:1061 +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:1120 +msgid "Retrieve data from a vault." +msgstr "" + +#: ipaserver/plugins/vault.py:1140 +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:1169 +msgid "No archived data." +msgstr "" + +#: ipaserver/plugins/vault.py:1262 +msgid "Checks if any of the servers has the KRA service enabled" msgstr "" #: ipaserver/dcerpc.py:87 @@ -27889,6 +28056,79 @@ msgid "" "instead" msgstr "" +#: ipaserver/dcerpc_common.py:20 +msgid "Trusting forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:21 +msgid "Trusted forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:26 +msgid "Established and verified" +msgstr "" + +#: ipaserver/dcerpc_common.py:27 +msgid "Waiting for confirmation by remote side" +msgstr "" + +#: ipaserver/dcerpc_common.py:30 +msgid "Unknown" +msgstr "" + +#: ipaserver/dcerpc_common.py:36 +msgid "Non-Active Directory domain" +msgstr "" + +#: ipaserver/dcerpc_common.py:38 +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +#: ipaserver/dcerpc_common.py:39 +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:41 +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#: ipaserver/servroles.py:296 +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#: ipaserver/servroles.py:401 +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +#: ipaserver/servroles.py:443 +msgid "must be enabled only on a single master" +msgstr "" + +#: ipaserver/topology.py:14 +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#: ipaserver/topology.py:18 +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#: ipaserver/topology.py:120 +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #: ipaserver/rpcserver.py:556 msgid "Request must be a dict" msgstr "" diff --git a/po/ru.po b/po/ru.po index 5512f2512..55fd47ff5 100644 --- a/po/ru.po +++ b/po/ru.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2023-05-19 09:57+0200\n" +"POT-Creation-Date: 2023-08-21 14:51+0200\n" "PO-Revision-Date: 2019-11-12 12:31+0000\n" "Last-Translator: Olesya Gerasimenko \n" "Language-Team: Russian\n" @@ -13458,103 +13458,6 @@ msgstr "" " Добавить неподтверждённого пользователя из контейнера Delete:\n" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Неподтверждённые пользователи\n" -"\n" -"Управление записями неподтверждённых пользователей.\n" -"\n" -"Записи неподтверждённых пользователей находятся непосредственно в " -"контейнере: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " -"аутентификацию с помощью этих записей (даже если они содержат учётные " -"данные). Эти записи только являются кандидатами на преобразование в активные " -"записи. \n" -"\n" -"Активные записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователи могут " -"проходить аутентификацию с помощью активных записей, если они содержат " -"учётные данные.\n" -"\n" -"Удалённые записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " -"cn=provisioning, SUFFIX\". Пользователи не могут проходить аутентификацию с " -"помощью этих записей, даже если они содержат учётные данные.\n" -"\n" -"Контейнер неподтверждённых пользователей содержит записи:\n" -" - созданные с помощью команд \"stageuser-add\", которые являются " -"пользователями Posix\n" -" - созданные с помощью внешней системы подготовки \n" -"\n" -"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " -"требованиям:\n" -" - RDN записи имеет значение \"uid\"\n" -" - ipaUniqueID имеет значение \"autogenerate\"\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового неподтверждённого пользователя:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Добавить неподтверждённого пользователя из контейнера удалённых " -"пользователей:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - msgid "" "\n" "Standard vault uses a secure mechanism to transport and\n" @@ -26178,9 +26081,6 @@ msgstr "Сервер уже удалён" msgid "Server has no information about domain '%(domain)s'" msgstr "На сервере нет сведений о домене \"%(domain)s\"" -msgid "Server location" -msgstr "Расположение сервера" - msgid "Server name" msgstr "Имя сервера" @@ -29763,6 +29663,106 @@ msgstr "{role}: роль не найдена" #~ "Процедуры по созданию запросов на подпись сертификатов с помощью данных " #~ "IPA и сохранённых шаблонов.\n" +#~ msgid "" +#~ "\n" +#~ "Stageusers\n" +#~ "\n" +#~ "Manage stage user entries.\n" +#~ "\n" +#~ "Stage user entries are directly under the container: \"cn=stage users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Users can not authenticate with those entries (even if the entries\n" +#~ "contain credentials). Those entries are only candidate to become Active " +#~ "entries.\n" +#~ "\n" +#~ "Active user entries are Posix users directly under the container: " +#~ "\"cn=accounts, SUFFIX\".\n" +#~ "Users can authenticate with Active entries, at the condition they have\n" +#~ "credentials.\n" +#~ "\n" +#~ "Deleted user entries are Posix users directly under the container: " +#~ "\"cn=deleted users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Users can not authenticate with those entries, even if the entries " +#~ "contain credentials.\n" +#~ "\n" +#~ "The stage user container contains entries:\n" +#~ " - created by 'stageuser-add' commands that are Posix users,\n" +#~ " - created by external provisioning system.\n" +#~ "\n" +#~ "A valid stage user entry MUST have:\n" +#~ " - entry RDN is 'uid',\n" +#~ " - ipaUniqueID is 'autogenerate'.\n" +#~ "\n" +#~ "IPA supports a wide range of username formats, but you need to be aware " +#~ "of any\n" +#~ "restrictions that may apply to your particular environment. For example,\n" +#~ "usernames that start with a digit or usernames that exceed a certain " +#~ "length\n" +#~ "may cause problems for some UNIX systems.\n" +#~ "Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +#~ "\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Add a new stageuser:\n" +#~ " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#~ "\n" +#~ " Add a stageuser from the deleted users container:\n" +#~ " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +#~ "\n" +#~ msgstr "" +#~ "\n" +#~ "Неподтверждённые пользователи\n" +#~ "\n" +#~ "Управление записями неподтверждённых пользователей.\n" +#~ "\n" +#~ "Записи неподтверждённых пользователей находятся непосредственно в " +#~ "контейнере: \"cn=stage users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " +#~ "аутентификацию с помощью этих записей (даже если они содержат учётные " +#~ "данные). Эти записи только являются кандидатами на преобразование в " +#~ "активные записи. \n" +#~ "\n" +#~ "Активные записи пользователей являются пользователями Posix, находящимися " +#~ "непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователи " +#~ "могут проходить аутентификацию с помощью активных записей, если они " +#~ "содержат учётные данные.\n" +#~ "\n" +#~ "Удалённые записи пользователей являются пользователями Posix, " +#~ "находящимися непосредственно в контейнере: \"cn=deleted users, " +#~ "cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " +#~ "аутентификацию с помощью этих записей, даже если они содержат учётные " +#~ "данные.\n" +#~ "\n" +#~ "Контейнер неподтверждённых пользователей содержит записи:\n" +#~ " - созданные с помощью команд \"stageuser-add\", которые являются " +#~ "пользователями Posix\n" +#~ " - созданные с помощью внешней системы подготовки \n" +#~ "\n" +#~ "Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать " +#~ "следующим требованиям:\n" +#~ " - RDN записи имеет значение \"uid\"\n" +#~ " - ipaUniqueID имеет значение \"autogenerate\"\n" +#~ "\n" +#~ "IPA поддерживает широкий спектр форматов имён пользователей, но следует " +#~ "учитывать те ограничения, которые могут существовать в конкретной среде. " +#~ "Например, имена пользователей, которые начинаются с цифры или превышают " +#~ "определённую длину, могут привести к проблемам в некоторых системах " +#~ "UNIX.\n" +#~ "Используйте команду \"ipa config-mod\" для изменения формата имени " +#~ "пользователя, разрешённого средствами IPA.\n" +#~ "\n" +#~ "\n" +#~ "ПРИМЕРЫ:\n" +#~ "\n" +#~ " Добавить нового неподтверждённого пользователя:\n" +#~ " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#~ "\n" +#~ " Добавить неподтверждённого пользователя из контейнера удалённых " +#~ "пользователей:\n" +#~ " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + #~ msgid "" #~ "\n" #~ "Sudo Rules\n" @@ -30255,6 +30255,9 @@ msgstr "{role}: роль не найдена" #~ "Обратная зона для записи PTR должна быть дочерней зоной одного из " #~ "следующих полноформатных доменов: %s" +#~ msgid "Server location" +#~ msgstr "Расположение сервера" + #~ msgid "Subject Public Key Info" #~ msgstr "Данные открытого ключа субъекта" diff --git a/po/uk.po b/po/uk.po index c708b07ab..27a556e0c 100644 --- a/po/uk.po +++ b/po/uk.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2023-05-19 09:57+0200\n" +"POT-Creation-Date: 2023-08-21 14:51+0200\n" "PO-Revision-Date: 2022-07-02 20:19+0000\n" "Last-Translator: Yuri Chornoivan \n" "Language-Team: Ukrainian to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів, групами або службами. Типово нові групи є " -"групами POSIX. Ви можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"\n" -"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" -"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " -"але\n" -"для керування у межах IPA може бути використано вкладені групи і групи\n" -"служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Додавання служб Kerberos до групи «printer admins»:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Керівниками учасників груп є користувачі або групи, які можуть додавати " -"учасників\n" -"до групи або вилучати учасників з групи.\n" -"\n" -" Дозволити користувачу «test2» додавати або вилучати учасників з групи " -"«localadmins»:\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Відкликати права керування учасниками для користувача «test2» з " -"«localadmins»:\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" - msgid "" "\n" "Groups of users\n" @@ -15461,103 +15241,6 @@ msgstr "" " Додати користувача етапу з контейнера Delete\n" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" -"\n" -"Користувачі етапу\n" -"\n" -"Керування записами користувачів етапу.\n" -"\n" -"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" -"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувач не може пройти розпізнавання за допомогою цих записів\n" -"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" -"перетворення на активні записи.\n" -"\n" -"Записи активних користувачів є користувачами Posix, що перебувають\n" -"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" -"Користувач може пройти розпізнавання за допомогою активних записів,\n" -"якщо для них передбачено реєстраційні дані\n" -"\n" -"Вилучені записи користувачів є записами користувачів Posix, що\n" -"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувачі не можуть проходити розпізнавання за допомогою цих\n" -"записів (навіть якщо записи містять реєстраційні дані)\n" -"\n" -"Контейнер користувачів етапу містить записи\n" -" - створені командами 'stageuser-add', які є користувачами Posix\n" -" - створені зовнішньою системою забезпечення\n" -"\n" -"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" -" - RDN запису має значення 'uid'\n" -" - ipaUniqueID має значення 'autogenerate'\n" -"\n" -"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" -"але слід зважати на різноманітні обмеження, які можуть стосуватися " -"середовища,\n" -"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" -"або імена користувачів, довжина яких перевищує певну довжину, можуть\n" -"призвести до проблем у деяких системах UNIX.\n" -"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" -"'ipa config-mod'.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нового користувача етапу:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Додати користувача етапу з контейнера вилучених користувачів\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" - msgid "" "\n" "Standard vault uses a secure mechanism to transport and\n" @@ -21243,24 +20926,6 @@ msgstr "" msgid "Default users group" msgstr "Типова група користувачів" -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" -"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " -"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " -"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " -"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " -"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " -"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " -"Скористайтеся значенням «idp», щоб уможливити розпізнавання за допомогою " -"зовнішнього надавача профілів. Якщо індикатор не буде вказано, буде " -"дозволено усі механізми." - msgid "Degrees Latitude" msgstr "Градуси широти" @@ -29079,9 +28744,6 @@ msgstr "Запис сервера вже вилучено" msgid "Server has no information about domain '%(domain)s'" msgstr "На сервері немає інформації щодо домену «%(domain)s»" -msgid "Server location" -msgstr "Місце сервера" - msgid "Server name" msgstr "Назва сервера" @@ -32904,6 +32566,238 @@ msgstr "{} потрібен основному серверу IPA" #~ "\n" #~ "Сервери надавача зовнішніх профілів\n" +#~ msgid "" +#~ "\n" +#~ "Groups of users\n" +#~ "\n" +#~ "Manage groups of users, groups, or services. By default, new groups are " +#~ "POSIX\n" +#~ "groups. You can add the --nonposix option to the group-add command to " +#~ "mark a\n" +#~ "new group as non-POSIX. You can use the --posix argument with the group-" +#~ "mod\n" +#~ "command to convert a non-POSIX group into a POSIX group. POSIX groups " +#~ "cannot be\n" +#~ "converted to non-POSIX groups.\n" +#~ "\n" +#~ "Every group must have a description.\n" +#~ "\n" +#~ "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#~ "supported but can have an impact on your file permissions. It is not " +#~ "necessary\n" +#~ "to supply a GID when creating a group. IPA will generate one " +#~ "automatically\n" +#~ "if it is not provided.\n" +#~ "\n" +#~ "Groups members can be users, other groups, and Kerberos services. In " +#~ "POSIX\n" +#~ "environments only users will be visible as group members, but nested " +#~ "groups and\n" +#~ "groups of services can be used for IPA management purposes.\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Add a new group:\n" +#~ " ipa group-add --desc='local administrators' localadmins\n" +#~ "\n" +#~ " Add a new non-POSIX group:\n" +#~ " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#~ "\n" +#~ " Convert a non-POSIX group to posix:\n" +#~ " ipa group-mod --posix remoteadmins\n" +#~ "\n" +#~ " Add a new POSIX group with a specific Group ID number:\n" +#~ " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#~ "\n" +#~ " Add a new POSIX group and let IPA assign a Group ID number:\n" +#~ " ipa group-add --desc='printer admins' printeradmins\n" +#~ "\n" +#~ " Remove a group:\n" +#~ " ipa group-del unixadmins\n" +#~ "\n" +#~ " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#~ " ipa group-add-member --groups=remoteadmins localadmins\n" +#~ "\n" +#~ " Add multiple users to the \"localadmins\" group:\n" +#~ " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#~ "\n" +#~ " To add Kerberos services to the \"printer admins\" group:\n" +#~ " ipa group-add-member --services=CUPS/some.host printeradmins\n" +#~ "\n" +#~ " Remove a user from the \"localadmins\" group:\n" +#~ " ipa group-remove-member --users=test2 localadmins\n" +#~ "\n" +#~ " Display information about a named group.\n" +#~ " ipa group-show localadmins\n" +#~ "\n" +#~ "Group membership managers are users or groups that can add members to a\n" +#~ "group or remove members from a group.\n" +#~ "\n" +#~ " Allow user \"test2\" to add or remove members from group " +#~ "\"localadmins\":\n" +#~ " ipa group-add-member-manager --users=test2 localadmins\n" +#~ "\n" +#~ " Revoke membership management rights for user \"test2\" from " +#~ "\"localadmins\":\n" +#~ " ipa group-remove-member-manager --users=test2 localadmins\n" +#~ "\n" +#~ "External group membership is designed to allow users from trusted " +#~ "domains\n" +#~ "to be mapped to local POSIX groups in order to actually use IPA " +#~ "resources.\n" +#~ "External members should be added to groups that specifically created as\n" +#~ "external and non-POSIX. Such group later should be included into one of " +#~ "POSIX\n" +#~ "groups.\n" +#~ "\n" +#~ "An external group member is currently a Security Identifier (SID) as " +#~ "defined by\n" +#~ "the trusted domain. When adding external group members, it is possible " +#~ "to\n" +#~ "specify them in either SID, or DOM\\name, or name@domain format. IPA will " +#~ "attempt\n" +#~ "to resolve passed name to SID with the use of Global Catalog of the " +#~ "trusted domain.\n" +#~ "\n" +#~ "Example:\n" +#~ "\n" +#~ "1. Create group for the trusted domain admins' mapping and their local " +#~ "POSIX group:\n" +#~ "\n" +#~ " ipa group-add --desc=' admins external map' " +#~ "ad_admins_external --external\n" +#~ " ipa group-add --desc=' admins' ad_admins\n" +#~ "\n" +#~ "2. Add security identifier of Domain Admins of the to the " +#~ "ad_admins_external\n" +#~ " group:\n" +#~ "\n" +#~ " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#~ "Admins'\n" +#~ "\n" +#~ "3. Allow members of ad_admins_external group to be associated with " +#~ "ad_admins POSIX group:\n" +#~ "\n" +#~ " ipa group-add-member ad_admins --groups ad_admins_external\n" +#~ "\n" +#~ "4. List members of external members of ad_admins_external group to see " +#~ "their SIDs:\n" +#~ "\n" +#~ " ipa group-show ad_admins_external\n" +#~ msgstr "" +#~ "\n" +#~ "Групи користувачів\n" +#~ "\n" +#~ "Керування групами користувачів, групами або службами. Типово нові групи є " +#~ "групами POSIX. Ви можете\n" +#~ "додати параметр --nonposix до команди group-add з метою позначення нової\n" +#~ "групи як групи не-POSIX. Ви можете скористатися аргументом --posix " +#~ "команди group-mod\n" +#~ "для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +#~ "перетворювати на групи не-POSIX.\n" +#~ "\n" +#~ "Кожна група повинна мати опис.\n" +#~ "\n" +#~ "Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +#~ "підтримку\n" +#~ "зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. " +#~ "Для\n" +#~ "створення групи слід вказати GID. IPA створить одну групу автоматично, " +#~ "якщо\n" +#~ "таку не вказано.\n" +#~ "\n" +#~ "\n" +#~ "Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" +#~ "середовищах POSIX як учасників груп можна бути бачити лише користувачів, " +#~ "але\n" +#~ "для керування у межах IPA може бути використано вкладені групи і групи\n" +#~ "служб.\n" +#~ "\n" +#~ "ПРИКЛАДИ:\n" +#~ "\n" +#~ " Додавання нової групи:\n" +#~ " ipa group-add --desc='local administrators' localadmins\n" +#~ "\n" +#~ " Додавання нової групи не-POSIX:\n" +#~ " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#~ "\n" +#~ " Перетворити групу не-POSIX на групу posix:\n" +#~ " ipa group-mod --posix remoteadmins\n" +#~ "\n" +#~ " Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +#~ " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#~ "\n" +#~ " Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +#~ " ipa group-add --desc='printer admins' printeradmins\n" +#~ "\n" +#~ " Вилучення групи:\n" +#~ " ipa group-del unixadmins\n" +#~ "\n" +#~ " Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +#~ " ipa group-add-member --groups=remoteadmins localadmins\n" +#~ "\n" +#~ " Додати список користувачів до групи \"localadmins\":\n" +#~ " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#~ "\n" +#~ " Додавання служб Kerberos до групи «printer admins»:\n" +#~ " ipa group-add-member --services=CUPS/some.host printeradmins\n" +#~ "\n" +#~ " Вилучення користувача з групи \"localadmins\":\n" +#~ " ipa group-remove-member --users=test2 localadmins\n" +#~ "\n" +#~ " Показати інформацію щодо іменованої групи.\n" +#~ " ipa group-show localadmins\n" +#~ "\n" +#~ "Керівниками учасників груп є користувачі або групи, які можуть додавати " +#~ "учасників\n" +#~ "до групи або вилучати учасників з групи.\n" +#~ "\n" +#~ " Дозволити користувачу «test2» додавати або вилучати учасників з групи " +#~ "«localadmins»:\n" +#~ " ipa group-add-member-manager --users=test2 localadmins\n" +#~ "\n" +#~ " Відкликати права керування учасниками для користувача «test2» з " +#~ "«localadmins»:\n" +#~ " ipa group-remove-member-manager --users=test2 localadmins\n" +#~ "\n" +#~ "Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +#~ "користувачів з довірених доменів до локальних груп POSIX з метою\n" +#~ "використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +#~ "які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +#~ "слід пізніше включити до одної з груп POSIX.\n" +#~ "\n" +#~ "У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +#~ "(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +#~ "учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +#~ "ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +#~ "допомогою використання Загального каталогу довіреного домену.\n" +#~ "\n" +#~ "Приклад:\n" +#~ "\n" +#~ "1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +#~ "відповідної локальної групи POSIX:\n" +#~ "\n" +#~ " ipa group-add --desc='<домен.ad> admins external map' " +#~ "ad_admins_external --external\n" +#~ " ipa group-add --desc='<домен.ad> admins' ad_admins\n" +#~ "\n" +#~ "2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +#~ "групи ad_admins_external:\n" +#~ "\n" +#~ " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#~ "Admins'\n" +#~ "\n" +#~ "3. Дозволити прив’язку групи ad_admins_external до групи POSIX " +#~ "ad_admins:\n" +#~ "\n" +#~ " ipa group-add-member ad_admins --groups ad_admins_external\n" +#~ "\n" +#~ "4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +#~ "визначити\n" +#~ "їхні SIDs:\n" +#~ "\n" +#~ " ipa group-show ad_admins_external\n" + #~ msgid "" #~ "\n" #~ "ID ranges\n" @@ -33223,6 +33117,107 @@ msgstr "{} потрібен основному серверу IPA" #~ "допомогою даних IPA та\n" #~ "збережених шаблонів.\n" +#~ msgid "" +#~ "\n" +#~ "Stageusers\n" +#~ "\n" +#~ "Manage stage user entries.\n" +#~ "\n" +#~ "Stage user entries are directly under the container: \"cn=stage users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Users can not authenticate with those entries (even if the entries\n" +#~ "contain credentials). Those entries are only candidate to become Active " +#~ "entries.\n" +#~ "\n" +#~ "Active user entries are Posix users directly under the container: " +#~ "\"cn=accounts, SUFFIX\".\n" +#~ "Users can authenticate with Active entries, at the condition they have\n" +#~ "credentials.\n" +#~ "\n" +#~ "Deleted user entries are Posix users directly under the container: " +#~ "\"cn=deleted users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Users can not authenticate with those entries, even if the entries " +#~ "contain credentials.\n" +#~ "\n" +#~ "The stage user container contains entries:\n" +#~ " - created by 'stageuser-add' commands that are Posix users,\n" +#~ " - created by external provisioning system.\n" +#~ "\n" +#~ "A valid stage user entry MUST have:\n" +#~ " - entry RDN is 'uid',\n" +#~ " - ipaUniqueID is 'autogenerate'.\n" +#~ "\n" +#~ "IPA supports a wide range of username formats, but you need to be aware " +#~ "of any\n" +#~ "restrictions that may apply to your particular environment. For example,\n" +#~ "usernames that start with a digit or usernames that exceed a certain " +#~ "length\n" +#~ "may cause problems for some UNIX systems.\n" +#~ "Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +#~ "\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Add a new stageuser:\n" +#~ " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#~ "\n" +#~ " Add a stageuser from the deleted users container:\n" +#~ " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +#~ "\n" +#~ msgstr "" +#~ "\n" +#~ "Користувачі етапу\n" +#~ "\n" +#~ "Керування записами користувачів етапу.\n" +#~ "\n" +#~ "Записи користувачів етапу перебувають безпосередньо у контейнері:\n" +#~ "\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Користувач не може пройти розпізнавання за допомогою цих записів\n" +#~ "(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" +#~ "перетворення на активні записи.\n" +#~ "\n" +#~ "Записи активних користувачів є користувачами Posix, що перебувають\n" +#~ "безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" +#~ "Користувач може пройти розпізнавання за допомогою активних записів,\n" +#~ "якщо для них передбачено реєстраційні дані\n" +#~ "\n" +#~ "Вилучені записи користувачів є записами користувачів Posix, що\n" +#~ "перебувають безпосередньо у контейнері: \"cn=deleted users,\n" +#~ "cn=accounts, cn=provisioning, SUFFIX\".\n" +#~ "Користувачі не можуть проходити розпізнавання за допомогою цих\n" +#~ "записів (навіть якщо записи містять реєстраційні дані)\n" +#~ "\n" +#~ "Контейнер користувачів етапу містить записи\n" +#~ " - створені командами 'stageuser-add', які є користувачами Posix\n" +#~ " - створені зовнішньою системою забезпечення\n" +#~ "\n" +#~ "Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" +#~ " - RDN запису має значення 'uid'\n" +#~ " - ipaUniqueID має значення 'autogenerate'\n" +#~ "\n" +#~ "У IPA передбачено підтримку широкого діапазону форматів імен " +#~ "користувачів,\n" +#~ "але слід зважати на різноманітні обмеження, які можуть стосуватися " +#~ "середовища,\n" +#~ "у якому ви працюєте. Наприклад, імена користувачів, що починаються з " +#~ "цифри,\n" +#~ "або імена користувачів, довжина яких перевищує певну довжину, можуть\n" +#~ "призвести до проблем у деяких системах UNIX.\n" +#~ "Для зміни формату, який дозволено інструментами IPA, скористайтеся " +#~ "командою\n" +#~ "'ipa config-mod'.\n" +#~ "\n" +#~ "\n" +#~ "ПРИКЛАДИ:\n" +#~ "\n" +#~ " Додати нового користувача етапу:\n" +#~ " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#~ "\n" +#~ " Додати користувача етапу з контейнера вилучених користувачів\n" +#~ " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +#~ "\n" + #~ msgid "" #~ "\n" #~ "Sudo Rules\n" @@ -33668,6 +33663,25 @@ msgstr "{} потрібен основному серверу IPA" #~ msgid "DER-encoded SubjectPublicKeyInfo structure" #~ msgstr "Структура SubjectPublicKeyInfo у кодуванні DER" +#~ msgid "" +#~ "Defines an allow list for Authentication Indicators. Use 'otp' to allow " +#~ "OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +#~ "authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. " +#~ "Use 'hardened' to allow brute-force hardened password authentication by " +#~ "SPAKE or FAST. Use 'idp' to allow External Identity Provider " +#~ "authentications. With no indicator specified, all authentication " +#~ "mechanisms are allowed." +#~ msgstr "" +#~ "Визначає список дозволених індикаторів розпізнавання. Скористайтеся " +#~ "значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " +#~ "Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на " +#~ "основі RADIUS. Скористайтеся значенням «pkinit», щоб дозволити " +#~ "розпізнавання 2FA на основі PKINIT. Скористайтеся значенням «hardened», " +#~ "щоб дозволити захищене від простого перебирання розпізнавання за паролем " +#~ "на основі SPAKE або FAST. Скористайтеся значенням «idp», щоб уможливити " +#~ "розпізнавання за допомогою зовнішнього надавача профілів. Якщо індикатор " +#~ "не буде вказано, буде дозволено усі механізми." + #~ msgid "" #~ "Defines an allow list for Authentication Indicators. Use 'otp' to allow " #~ "OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " @@ -33768,6 +33782,9 @@ msgstr "{} потрібен основному серверу IPA" #~ msgid "Search for Identity Provider servers." #~ msgstr "Шукати сервери надавачів профілів." +#~ msgid "Server location" +#~ msgstr "Місце сервера" + #~ msgid "Subject Public Key Info" #~ msgstr "Дані щодо відкритого ключа суб’єкта" diff --git a/po/zh_CN.po b/po/zh_CN.po index bd1c00005..c18fa3ad4 100644 --- a/po/zh_CN.po +++ b/po/zh_CN.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2023-05-19 09:57+0200\n" +"POT-Creation-Date: 2023-08-21 14:51+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Chinese (China)\n" @@ -9372,9 +9372,6 @@ msgstr "服务器角色" msgid "Server has already been deleted" msgstr "服务器已被删除" -msgid "Server location" -msgstr "服务器位置" - msgid "Server name" msgstr "服务名称" @@ -12227,3 +12224,6 @@ msgstr "{role}：角色没有找到" #~ "Reverse zone for PTR record should be a sub-zone of one the following " #~ "fully qualified domains: %s" #~ msgstr "反向区域的PTR记录应该是下面完全其中一个限制域：%s的子区域" + +#~ msgid "Server location" +#~ msgstr "服务器位置"