diff --git a/po/es.po b/po/es.po index 631f70ef0..d574a329f 100644 --- a/po/es.po +++ b/po/es.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-11-25 18:48+0100\n" +"POT-Creation-Date: 2022-02-07 10:43+0200\n" "PO-Revision-Date: 2021-04-26 19:02+0000\n" "Last-Translator: Emilio Herrera \n" "Language-Team: Spanish \n" "Language-Team: French\n" @@ -6095,19 +6095,6 @@ msgstr "" "Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" "charge pour lire/écrire des jetons YubiKey directement.\n" -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Pour activer « binddn », exécuter la commande pour fixer le mot de passe :\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - msgid "" "\n" "To verify that no server is disconnected in the topology of the given " @@ -18049,6 +18036,20 @@ msgstr "{attr} : attribut introuvable" msgid "{role}: role not found" msgstr "{role} : rôle introuvable" +#~ msgid "" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ msgstr "" +#~ "\n" +#~ "Pour activer « binddn », exécuter la commande pour fixer le mot de " +#~ "passe :\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" + #~ msgid "Delete a CA." #~ msgstr "Supprimer une AC." diff --git a/po/ipa.pot b/po/ipa.pot index f07cee9f1..bd0987e20 100644 --- a/po/ipa.pot +++ b/po/ipa.pot @@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: freeipa 4.9.8.dev202111251748+gitf89d59b6e\n" +"Project-Id-Version: freeipa 4.9.9.dev202202070842+gitfd5b2a374\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-11-25 18:48+0100\n" +"POT-Creation-Date: 2022-02-07 10:43+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -157,6 +157,325 @@ msgstr "" msgid "krb5_kt_close %1$d: %2$s\n" msgstr "" +#: client/ipa-join.c:66 client/ipa-join.c:422 client/ipa-join.c:440 +#: client/ipa-join.c:540 client/ipa-join.c:1080 util/ipa_krb5.c:1024 +#: util/ipa_krb5.c:1058 +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#: client/ipa-join.c:81 client/ipa-join.c:823 +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#: client/ipa-join.c:111 client/ipa-join.c:123 +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#: client/ipa-join.c:128 +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#: client/ipa-join.c:152 client/ipa-join.c:181 client/ipa-join.c:232 +#, c-format +msgid "Out of memory!" +msgstr "" + +#: client/ipa-join.c:243 +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +#: client/ipa-join.c:261 client/ipa-getkeytab.c:391 +msgid "SASL Bind failed\n" +msgstr "" + +#: client/ipa-join.c:335 +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#: client/ipa-join.c:355 +#, c-format +msgid "No values for %s" +msgstr "" + +#: client/ipa-join.c:365 +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#: client/ipa-join.c:371 +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#: client/ipa-join.c:429 +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#: client/ipa-join.c:475 +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#: client/ipa-join.c:595 +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#: client/ipa-join.c:610 client/ipa-join.c:957 +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#: client/ipa-join.c:637 +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#: client/ipa-join.c:646 +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#: client/ipa-join.c:658 +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#: client/ipa-join.c:687 +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#: client/ipa-join.c:696 +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#: client/ipa-join.c:746 +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#: client/ipa-join.c:754 +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#: client/ipa-join.c:760 +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#: client/ipa-join.c:770 +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#: client/ipa-join.c:773 +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#: client/ipa-join.c:780 +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#: client/ipa-join.c:815 +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#: client/ipa-join.c:848 +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#: client/ipa-join.c:863 +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#: client/ipa-join.c:895 client/ipa-join.c:986 +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#: client/ipa-join.c:938 client/ipa-join.c:1016 +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#: client/ipa-join.c:1032 client/ipa-join.c:1111 +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#: client/ipa-join.c:1035 client/ipa-join.c:1114 +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#: client/ipa-join.c:1119 +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#: client/ipa-join.c:1161 client/ipa-join.c:1301 +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#: client/ipa-join.c:1173 client/ipa-join.c:1311 +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#: client/ipa-join.c:1180 +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#: client/ipa-join.c:1188 +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#: client/ipa-join.c:1207 +#, c-format +msgid "fork() failed\n" +msgstr "" + +#: client/ipa-join.c:1236 +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#: client/ipa-join.c:1239 +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#: client/ipa-join.c:1242 +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#: client/ipa-join.c:1254 +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#: client/ipa-join.c:1320 +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#: client/ipa-join.c:1329 +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#: client/ipa-join.c:1340 +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#: client/ipa-join.c:1359 +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#: client/ipa-join.c:1371 client/ipa-join.c:1379 +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#: client/ipa-join.c:1388 +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +#: client/ipa-join.c:1444 +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +#: client/ipa-join.c:1446 +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +#: client/ipa-join.c:1448 +msgid "Unenroll this host from IPA server" +msgstr "" + +#: client/ipa-join.c:1450 +msgid "Hostname of this server" +msgstr "" + +#: client/ipa-join.c:1450 client/ipa-join.c:1452 +msgid "hostname" +msgstr "" + +#: client/ipa-join.c:1452 +msgid "IPA Server to use" +msgstr "" + +#: client/ipa-join.c:1454 +msgid "Specifies where to store keytab information." +msgstr "" + +#: client/ipa-join.c:1454 +msgid "filename" +msgstr "" + +#: client/ipa-join.c:1456 +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +#: client/ipa-join.c:1458 +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#: client/ipa-join.c:1458 +msgid "password" +msgstr "" + +#: client/ipa-join.c:1460 +msgid "LDAP basedn" +msgstr "" + +#: client/ipa-join.c:1460 +msgid "basedn" +msgstr "" + +#: client/ipa-join.c:1494 +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#: client/ipa-join.c:1500 +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#: client/ipa-join.c:1506 +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + #: client/ipa-getkeytab.c:254 #, c-format msgid "Kerberos context initialization failed: %1$s (%2$d)\n" @@ -186,10 +505,6 @@ msgstr "" msgid "Simple bind failed\n" msgstr "" -#: client/ipa-getkeytab.c:391 client/ipa-join.c:261 -msgid "SASL Bind failed\n" -msgstr "" - #: client/ipa-getkeytab.c:422 #, c-format msgid "Operation failed: %s\n" @@ -544,944 +859,6 @@ msgstr "" msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "" -#: client/ipa-join.c:66 client/ipa-join.c:422 client/ipa-join.c:440 -#: client/ipa-join.c:540 client/ipa-join.c:1089 util/ipa_krb5.c:1024 -#: util/ipa_krb5.c:1058 -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#: client/ipa-join.c:81 client/ipa-join.c:826 -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#: client/ipa-join.c:111 client/ipa-join.c:123 -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#: client/ipa-join.c:128 -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#: client/ipa-join.c:152 client/ipa-join.c:181 client/ipa-join.c:232 -#, c-format -msgid "Out of memory!" -msgstr "" - -#: client/ipa-join.c:243 -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#: client/ipa-join.c:335 -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#: client/ipa-join.c:355 -#, c-format -msgid "No values for %s" -msgstr "" - -#: client/ipa-join.c:365 -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#: client/ipa-join.c:371 -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#: client/ipa-join.c:429 -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#: client/ipa-join.c:475 -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#: client/ipa-join.c:595 -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#: client/ipa-join.c:610 client/ipa-join.c:964 -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#: client/ipa-join.c:637 -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#: client/ipa-join.c:646 -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#: client/ipa-join.c:658 -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#: client/ipa-join.c:687 -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#: client/ipa-join.c:696 -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#: client/ipa-join.c:747 -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#: client/ipa-join.c:755 -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#: client/ipa-join.c:762 -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#: client/ipa-join.c:773 -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#: client/ipa-join.c:776 -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#: client/ipa-join.c:783 -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#: client/ipa-join.c:818 -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:852 -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:868 -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#: client/ipa-join.c:901 client/ipa-join.c:994 -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:945 client/ipa-join.c:1025 -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#: client/ipa-join.c:1041 client/ipa-join.c:1120 -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#: client/ipa-join.c:1044 client/ipa-join.c:1123 -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#: client/ipa-join.c:1128 -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#: client/ipa-join.c:1170 client/ipa-join.c:1310 -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#: client/ipa-join.c:1182 client/ipa-join.c:1320 -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#: client/ipa-join.c:1189 -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#: client/ipa-join.c:1197 -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#: client/ipa-join.c:1216 -#, c-format -msgid "fork() failed\n" -msgstr "" - -#: client/ipa-join.c:1245 -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#: client/ipa-join.c:1248 -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#: client/ipa-join.c:1251 -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#: client/ipa-join.c:1263 -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#: client/ipa-join.c:1329 -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#: client/ipa-join.c:1338 -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#: client/ipa-join.c:1349 -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#: client/ipa-join.c:1368 -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#: client/ipa-join.c:1380 client/ipa-join.c:1388 -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#: client/ipa-join.c:1397 -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -#: client/ipa-join.c:1453 -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -#: client/ipa-join.c:1455 -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -#: client/ipa-join.c:1457 -msgid "Unenroll this host from IPA server" -msgstr "" - -#: client/ipa-join.c:1459 -msgid "Hostname of this server" -msgstr "" - -#: client/ipa-join.c:1459 client/ipa-join.c:1461 -msgid "hostname" -msgstr "" - -#: client/ipa-join.c:1461 -msgid "IPA Server to use" -msgstr "" - -#: client/ipa-join.c:1463 -msgid "Specifies where to store keytab information." -msgstr "" - -#: client/ipa-join.c:1463 -msgid "filename" -msgstr "" - -#: client/ipa-join.c:1465 -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -#: client/ipa-join.c:1467 -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#: client/ipa-join.c:1467 -msgid "password" -msgstr "" - -#: client/ipa-join.c:1469 -msgid "LDAP basedn" -msgstr "" - -#: client/ipa-join.c:1469 -msgid "basedn" -msgstr "" - -#: client/ipa-join.c:1503 -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#: client/ipa-join.c:1509 -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#: client/ipa-join.c:1515 -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#: ipaclient/frontend.py:28 ipaclient/frontend.py:90 -#: ipaserver/plugins/baseldap.py:53 -msgid "Failed members" -msgstr "" - -#: ipaclient/frontend.py:32 ipaserver/plugins/baseldap.py:176 -msgid "Failed source hosts/hostgroups" -msgstr "" - -#: ipaclient/frontend.py:36 ipaserver/plugins/baseldap.py:179 -msgid "Failed hosts/hostgroups" -msgstr "" - -#: ipaclient/frontend.py:40 ipaserver/plugins/baseldap.py:182 -msgid "Failed users/groups" -msgstr "" - -#: ipaclient/frontend.py:44 ipaserver/plugins/baseldap.py:185 -msgid "Failed service/service groups" -msgstr "" - -#: ipaclient/frontend.py:48 ipaserver/plugins/baseldap.py:188 -msgid "Failed to remove" -msgstr "" - -#: ipaclient/frontend.py:53 ipaserver/plugins/baseldap.py:192 -msgid "Failed RunAs" -msgstr "" - -#: ipaclient/frontend.py:57 ipaserver/plugins/baseldap.py:195 -msgid "Failed RunAsGroup" -msgstr "" - -#: ipaclient/frontend.py:62 ipaserver/plugins/caacl.py:473 -msgid "Failed profiles" -msgstr "" - -#: ipaclient/frontend.py:66 ipaserver/plugins/caacl.py:476 -msgid "Failed CAs" -msgstr "" - -#: ipaclient/frontend.py:71 ipaserver/plugins/group.py:183 -#: ipaserver/plugins/hostgroup.py:95 -msgid "Failed member manager" -msgstr "" - -#: ipaclient/frontend.py:76 ipaserver/plugins/host.py:209 -msgid "Failed managedby" -msgstr "" - -#: ipaclient/frontend.py:81 ipaserver/plugins/host.py:236 -#: ipaserver/plugins/service.py:158 -msgid "Failed allowed to retrieve keytab" -msgstr "" - -#: ipaclient/frontend.py:85 ipaserver/plugins/host.py:239 -#: ipaserver/plugins/service.py:161 -msgid "Failed allowed to create keytab" -msgstr "" - -#: ipaclient/frontend.py:94 -msgid "Failed targets" -msgstr "" - -#: ipaclient/frontend.py:99 ipaclient/remote_plugins/2_156/vault.py:223 -#: ipaserver/plugins/vault.py:637 -msgid "Failed owners" -msgstr "" - -#: ipaclient/plugins/automember.py:33 ipaserver/plugins/automember.py:342 -msgid "Failed to add" -msgstr "" - -#: ipaclient/plugins/automount.py:101 -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -#: ipaclient/plugins/automount.py:120 -msgid "Import automount files for a specific location." -msgstr "" - -#: ipaclient/plugins/automount.py:124 -msgid "Master file" -msgstr "" - -#: ipaclient/plugins/automount.py:125 -msgid "Automount master file." -msgstr "" - -#: ipaclient/plugins/automount.py:132 -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#: ipaclient/plugins/automount.py:150 -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#: ipaclient/plugins/automount.py:200 -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#: ipaclient/plugins/automount.py:215 -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -#: ipaclient/plugins/automount.py:264 -msgid "Imported maps:" -msgstr "" - -#: ipaclient/plugins/automount.py:267 -#, python-format -msgid "Added %(map)s" -msgstr "" - -#: ipaclient/plugins/automount.py:271 -msgid "Imported keys:" -msgstr "" - -#: ipaclient/plugins/automount.py:274 -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -#: ipaclient/plugins/automount.py:281 -msgid "Ignored keys:" -msgstr "" - -#: ipaclient/plugins/automount.py:284 -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -#: ipaclient/plugins/automount.py:292 -msgid "Duplicate maps skipped:" -msgstr "" - -#: ipaclient/plugins/automount.py:295 -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -#: ipaclient/plugins/automount.py:301 -msgid "Duplicate keys skipped:" -msgstr "" - -#: ipaclient/plugins/automount.py:304 -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -#: ipaclient/plugins/ca.py:19 ipaclient/plugins/cert.py:39 -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -#: ipaclient/plugins/cert.py:107 -msgid "Unrevoked" -msgstr "" - -#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:293 -msgid "Error" -msgstr "" - -#: ipaclient/plugins/cert.py:120 -msgid "Input filename" -msgstr "" - -#: ipaclient/plugins/cert.py:121 -msgid "File to load the certificate from." -msgstr "" - -#: ipaclient/plugins/cert.py:130 ipaclient/plugins/certmap.py:41 -msgid "cannot specify both raw certificate and file" -msgstr "" - -#: ipaclient/plugins/certmap.py:19 -msgid "Input file" -msgstr "" - -#: ipaclient/plugins/certmap.py:20 -msgid "File to load the certificate from" -msgstr "" - -#: ipaclient/plugins/certprofile.py:25 -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -#: ipaclient/plugins/dns.py:137 ipaserver/plugins/dns.py:3576 -msgid "Split DNS record to parts" -msgstr "" - -#: ipaclient/plugins/dns.py:237 -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#: ipaclient/plugins/dns.py:238 -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -#: ipaclient/plugins/dns.py:243 -msgid "DNS resource record type" -msgstr "" - -#: ipaclient/plugins/dns.py:261 -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -#: ipaclient/plugins/dns.py:286 -msgid "No option to modify specific record provided." -msgstr "" - -#: ipaclient/plugins/dns.py:289 ipaclient/plugins/dns.py:355 -msgid "Current DNS record contents:\n" -msgstr "" - -#: ipaclient/plugins/dns.py:312 -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#: ipaclient/plugins/dns.py:321 -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -#: ipaclient/plugins/dns.py:329 ipaserver/plugins/dns.py:3876 -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -#: ipaclient/plugins/dns.py:347 -msgid "No option to delete specific record provided." -msgstr "" - -#: ipaclient/plugins/dns.py:348 -msgid "Delete all?" -msgstr "" - -#: ipaclient/plugins/dns.py:376 -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -#: ipaclient/plugins/dns.py:392 ipaclient/plugins/dns.py:409 -#: ipaclient/plugins/dns.py:421 -msgid "Server will check DNS forwarder(s)." -msgstr "" - -#: ipaclient/plugins/dns.py:394 ipaclient/plugins/dns.py:411 -#: ipaclient/plugins/dns.py:423 -msgid "This may take some time, please wait ..." -msgstr "" - -#: ipaclient/plugins/dns.py:403 -msgid "DNS forwarder" -msgstr "" - -#: ipaclient/plugins/dns.py:434 -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#: ipaclient/plugins/host.py:41 ipaclient/plugins/service.py:43 -#: ipaclient/plugins/user.py:74 -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -#: ipaclient/plugins/location.py:23 -msgid "Servers details:" -msgstr "" - -#: ipaclient/plugins/migration.py:37 -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -#: ipaclient/plugins/migration.py:41 -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#: ipaclient/plugins/otptoken.py:66 -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -#: ipaclient/plugins/otptoken.py:82 -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -#: ipaclient/plugins/otptoken.py:137 -msgid "Synchronize an OTP token." -msgstr "" - -#: ipaclient/plugins/otptoken.py:142 -msgid "User ID" -msgstr "" - -#: ipaclient/plugins/otptoken.py:143 ipaclient/remote_plugins/2_114/host.py:187 -#: ipaserver/plugins/baseuser.py:279 ipaserver/plugins/internal.py:190 -#: ipaserver/plugins/internal.py:408 ipaserver/plugins/internal.py:1714 -#: ipaserver/plugins/migration.py:534 -msgid "Password" -msgstr "" - -#: ipaclient/plugins/otptoken.py:144 -msgid "First Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:145 -msgid "Second Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:149 ipaserver/plugins/internal.py:1724 -msgid "Token ID" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:35 -msgid "python-yubico is not installed." -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:40 -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:42 -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:44 -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/automember.py:63 -#: ipaserver/plugins/ca.py:35 ipaserver/plugins/cert.py:99 -#: ipaserver/plugins/certmap.py:60 ipaserver/plugins/dnsserver.py:39 -#: ipaserver/plugins/host.py:104 ipaserver/plugins/location.py:37 -#: ipaserver/plugins/otptoken.py:49 ipaserver/plugins/permission.py:97 -#: ipaserver/plugins/radiusproxy.py:43 ipaserver/plugins/schema.py:28 -#: ipaserver/plugins/serverrole.py:19 ipaserver/plugins/vault.py:90 -#: ipaserver/plugins/server.py:40 ipaserver/plugins/sudorule.py:71 -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:49 -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:72 -msgid "Add a new YubiKey OTP token." -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:77 -msgid "YubiKey slot" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:146 -msgid "No free YubiKey slot!" -msgstr "" - -#: ipaclient/plugins/server.py:20 -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#: ipaclient/plugins/topology.py:25 -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#: ipaclient/plugins/topology.py:30 -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -#: ipaclient/plugins/topology.py:33 -msgid "Topology is disconnected" -msgstr "" - -#: ipaclient/plugins/topology.py:35 -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -#: ipaclient/plugins/topology.py:40 -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#: ipaclient/plugins/topology.py:43 -msgid "Maximum number of agreements per replica" -msgstr "" - -#: ipaclient/plugins/topology.py:47 -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -#: ipaclient/plugins/user.py:40 -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#: ipaclient/plugins/user.py:45 -msgid "Delete a user" -msgstr "" - -#: ipaclient/plugins/user.py:54 -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -#: ipaclient/plugins/vault.py:67 ipaclient/plugins/vault.py:833 -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#: ipaclient/plugins/vault.py:74 -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -#: ipaclient/plugins/vault.py:144 ipaclient/plugins/vault.py:163 -#: ipaserver/plugins/passwd.py:149 -msgid "Invalid credentials" -msgstr "" - -#: ipaclient/plugins/vault.py:181 -msgid "Create a new vault." -msgstr "" - -#: ipaclient/plugins/vault.py:187 ipaclient/plugins/vault.py:728 -#: ipaclient/plugins/vault.py:961 -msgid "Vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:192 ipaclient/plugins/vault.py:733 -#: ipaclient/plugins/vault.py:966 -msgid "File containing the vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:197 -msgid "File containing the vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:257 -msgid "Password can be specified only for symmetric vault" -msgstr "" - -#: ipaclient/plugins/vault.py:263 -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -#: ipaclient/plugins/vault.py:283 ipaclient/plugins/vault.py:866 -#: ipaclient/plugins/vault.py:1094 -msgid "Password specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:306 -msgid "Public key specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:322 -msgid "Missing vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:334 -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#: ipaclient/plugins/vault.py:368 ipaserver/plugins/vault.py:921 -msgid "Modify a vault." -msgstr "" - -#: ipaclient/plugins/vault.py:373 ipaserver/plugins/internal.py:1731 -msgid "Change password" -msgstr "" - -#: ipaclient/plugins/vault.py:378 -msgid "Old vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:383 -msgid "File containing the old vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:388 -msgid "New vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:393 -msgid "File containing the new vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:398 -msgid "Old vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:403 -msgid "File containing the old vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:408 -msgid "File containing the new vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:514 -msgid "New public key specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:527 -msgid "Missing new vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:714 ipaserver/plugins/vault.py:1017 -msgid "Archive data into a vault." -msgstr "" - -#: ipaclient/plugins/vault.py:719 -msgid "Binary data to archive" -msgstr "" - -#: ipaclient/plugins/vault.py:723 -msgid "File containing data to archive" -msgstr "" - -#: ipaclient/plugins/vault.py:737 -msgid "Override existing password" -msgstr "" - -#: ipaclient/plugins/vault.py:819 -msgid "Input data specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:824 ipaclient/plugins/vault.py:837 -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -#: ipaclient/plugins/vault.py:920 ipaclient/plugins/vault.py:1144 -msgid "Invalid vault type" -msgstr "" - -#: ipaclient/plugins/vault.py:951 -msgid "Retrieve a data from a vault." -msgstr "" - -#: ipaclient/plugins/vault.py:956 -msgid "File to store retrieved data" -msgstr "" - -#: ipaclient/plugins/vault.py:971 -msgid "Vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:976 -msgid "File containing the vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:983 ipaserver/plugins/internal.py:757 -msgid "Data" -msgstr "" - -#: ipaclient/plugins/vault.py:1120 -msgid "Private key specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:1133 -msgid "Missing vault private key" -msgstr "" - -#: ipaclient/plugins/sudorule.py:30 -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#: ipaclient/plugins/sudorule.py:36 -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#: ipaclient/plugins/sudorule.py:43 -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#: ipaclient/plugins/sudorule.py:54 -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - msgid "" "\n" "Directory Server Access Control Instructions (ACIs)\n" @@ -1606,24 +983,24 @@ msgstr "" msgid "ACI name" msgstr "" -#: ipaserver/plugins/permission.py:231 +#: ipaserver/plugins/aci.py:451 msgid "Permission" msgstr "" msgid "Permission ACI grants access to" msgstr "" -#: ipaserver/plugins/delegation.py:97 +#: ipaserver/plugins/delegation.py:97 ipaserver/plugins/aci.py:457 msgid "User group" msgstr "" -#: ipaserver/plugins/delegation.py:98 +#: ipaserver/plugins/delegation.py:98 ipaserver/plugins/aci.py:458 msgid "User group ACI grants access to" msgstr "" -#: ipaserver/plugins/aci.py:463 ipaserver/plugins/baseldap.py:74 -#: ipaserver/plugins/delegation.py:81 ipaserver/plugins/permission.py:230 -#: ipaserver/plugins/selfservice.py:84 +#: ipaserver/plugins/delegation.py:81 ipaserver/plugins/baseldap.py:74 +#: ipaserver/plugins/selfservice.py:84 ipaserver/plugins/permission.py:230 +#: ipaserver/plugins/aci.py:463 msgid "Permissions" msgstr "" @@ -1633,13 +1010,14 @@ msgstr "" msgid "Attributes to which the permission applies" msgstr "" -#: ipaserver/plugins/aci.py:472 ipaserver/plugins/delegation.py:86 -#: ipaserver/plugins/selfservice.py:89 +#: ipaserver/plugins/delegation.py:86 ipaserver/plugins/selfservice.py:89 +#: ipaserver/plugins/aci.py:472 msgid "Attributes" msgstr "" -#: ipaserver/plugins/otptoken.py:165 ipaserver/plugins/permission.py:346 -#: ipaserver/plugins/schema.py:448 ipaserver/plugins/vault.py:600 +#: ipaserver/plugins/otptoken.py:165 ipaserver/plugins/schema.py:448 +#: ipaserver/plugins/permission.py:346 ipaserver/plugins/vault.py:600 +#: ipaserver/plugins/aci.py:477 msgid "Type" msgstr "" @@ -1653,21 +1031,21 @@ msgid "Member of a group" msgstr "" #: ipaserver/plugins/internal.py:216 ipaserver/plugins/internal.py:1214 -#: ipaserver/plugins/internal.py:1743 +#: ipaserver/plugins/internal.py:1743 ipaserver/plugins/aci.py:490 msgid "Filter" msgstr "" msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" -#: ipaserver/plugins/permission.py:289 +#: ipaserver/plugins/permission.py:289 ipaserver/plugins/aci.py:496 msgid "Subtree" msgstr "" msgid "Subtree to apply ACI to" msgstr "" -#: ipaserver/plugins/permission.py:340 +#: ipaserver/plugins/permission.py:340 ipaserver/plugins/aci.py:502 msgid "Target group" msgstr "" @@ -1739,7 +1117,7 @@ msgstr "" msgid "A string searched in all relevant object attributes" msgstr "" -#: ipaserver/plugins/cert.py:1569 ipaserver/plugins/schema.py:121 +#: ipaserver/plugins/baseldap.py:1956 ipaserver/plugins/schema.py:121 msgid "Primary key only" msgstr "" @@ -1767,288 +1145,6 @@ msgstr "" msgid "Location of the ACI" msgstr "" -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/automember.py:257 ipaserver/plugins/automount.py:364 -#: ipaserver/plugins/ca.py:89 ipaserver/plugins/caacl.py:175 -#: ipaserver/plugins/certmap.py:279 ipaserver/plugins/group.py:342 -#: ipaserver/plugins/hbacrule.py:253 ipaserver/plugins/hbacsvc.py:108 -#: ipaserver/plugins/hbacsvcgroup.py:120 ipaserver/plugins/host.py:473 -#: ipaserver/plugins/hostgroup.py:193 ipaserver/plugins/idviews.py:142 -#: ipaserver/plugins/idviews.py:775 ipaserver/plugins/location.py:111 -#: ipaserver/plugins/netgroup.py:210 ipaserver/plugins/otptoken.py:174 -#: ipaserver/plugins/privilege.py:159 ipaserver/plugins/radiusproxy.py:117 -#: ipaserver/plugins/role.py:153 ipaserver/plugins/selinuxusermap.py:265 -#: ipaserver/plugins/subid.py:143 ipaserver/plugins/sudocmd.py:128 -#: ipaserver/plugins/sudocmdgroup.py:130 ipaserver/plugins/vault.py:594 -#: ipaserver/plugins/sudorule.py:238 -msgid "Description" -msgstr "" - -#: ipaserver/plugins/automember.py:258 -msgid "A description of this auto member rule" -msgstr "" - -#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 -msgid "Default (fallback) Group" -msgstr "" - -#: ipaserver/plugins/automember.py:263 -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#: ipaserver/plugins/automember.py:184 -msgid "Grouping Type" -msgstr "" - -#: ipaserver/plugins/automember.py:185 -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 -msgid "Inclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 -msgid "Exclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:176 -msgid "Attribute Key" -msgstr "" - -#: ipaserver/plugins/automember.py:177 -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -#: ipaserver/plugins/automember.py:357 -msgid "Conditions that could not be added" -msgstr "" - -#: ipaserver/plugins/automember.py:361 -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#: ipaserver/plugins/automember.py:586 -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -#: ipalib/output.py:204 -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1398 ipaserver/plugins/baseldap.py:1473 -msgid "Rights" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1399 ipaserver/plugins/baseldap.py:1474 -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -#: ipaserver/plugins/automember.py:683 -msgid "Rebuild auto membership." -msgstr "" - -#: ipaserver/plugins/automember.py:693 -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#: ipaserver/plugins/automember.py:697 ipaserver/plugins/baseuser.py:198 -#: ipaserver/plugins/caacl.py:220 ipaserver/plugins/hbacrule.py:260 -#: ipaserver/plugins/internal.py:1189 ipaserver/plugins/selinuxusermap.py:272 -#: ipaserver/plugins/user.py:161 ipaserver/plugins/sudorule.py:282 -msgid "Users" -msgstr "" - -#: ipaserver/plugins/automember.py:698 -msgid "Rebuild membership for specified users" -msgstr "" - -#: ipaserver/plugins/automember.py:702 ipaserver/plugins/caacl.py:228 -#: ipaserver/plugins/hbacrule.py:268 ipaserver/plugins/host.py:461 -#: ipaserver/plugins/internal.py:1163 ipaserver/plugins/selinuxusermap.py:280 -#: ipaserver/plugins/sudorule.py:295 -msgid "Hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:703 -msgid "Rebuild membership for specified hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:708 -msgid "No wait" -msgstr "" - -#: ipaserver/plugins/automember.py:709 -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:441 -msgid "Conditions that could not be removed" -msgstr "" - -#: ipaserver/plugins/automember.py:445 -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - #: ipaserver/plugins/automount.py:41 msgid "" "\n" @@ -2157,8 +1253,8 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" -#: ipaserver/plugins/automount.py:465 ipaserver/plugins/automount.py:712 -#: ipaserver/plugins/automount.py:819 ipaserver/plugins/otptoken.py:219 +#: ipaserver/plugins/otptoken.py:219 ipaserver/plugins/automount.py:465 +#: ipaserver/plugins/automount.py:712 ipaserver/plugins/automount.py:819 msgid "Key" msgstr "" @@ -2176,7 +1272,7 @@ msgstr "" msgid "description" msgstr "" -#: ipaserver/plugins/host.py:483 ipaserver/plugins/server.py:132 +#: ipaserver/plugins/automount.py:252 ipaserver/plugins/host.py:483 msgid "Location" msgstr "" @@ -2192,22 +1288,55 @@ msgstr "" msgid "Automount map name." msgstr "" +#: ipaserver/plugins/sudocmd.py:128 ipaserver/plugins/hbacsvcgroup.py:120 +#: ipaserver/plugins/role.py:153 ipaserver/plugins/radiusproxy.py:117 +#: ipaserver/plugins/ca.py:89 ipaserver/plugins/sudocmdgroup.py:130 +#: ipaserver/plugins/automember.py:257 ipaserver/plugins/hostgroup.py:193 +#: ipaserver/plugins/location.py:111 ipaserver/plugins/otptoken.py:174 +#: ipaserver/plugins/privilege.py:159 ipaserver/plugins/group.py:342 +#: ipaserver/plugins/hbacrule.py:253 ipaserver/plugins/selinuxusermap.py:265 +#: ipaserver/plugins/subid.py:143 ipaserver/plugins/automount.py:364 +#: ipaserver/plugins/idviews.py:142 ipaserver/plugins/idviews.py:775 +#: ipaserver/plugins/caacl.py:175 ipaserver/plugins/hbacsvc.py:108 +#: ipaserver/plugins/netgroup.py:210 ipaserver/plugins/certmap.py:279 +#: ipaserver/plugins/host.py:473 ipaserver/plugins/vault.py:594 +#: ipaserver/plugins/sudorule.py:238 +msgid "Description" +msgstr "" + #: ipaserver/plugins/automount.py:623 msgid "Create a new automount key." msgstr "" +#: ipaserver/plugins/baseldap.py:977 +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +#: ipaserver/plugins/baseldap.py:983 +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + #: ipaserver/plugins/automount.py:705 msgid "Delete an automount key." msgstr "" +#: ipaserver/plugins/baseldap.py:1377 msgid "Continuous mode: Don't stop on errors." msgstr "" +#: ipalib/output.py:204 +msgid "List of deletions that failed" +msgstr "" + #: ipaserver/plugins/automount.py:804 msgid "Search for an automount key." msgstr "" -#: ipaserver/plugins/cert.py:1574 ipaserver/plugins/pkinit.py:71 +#: ipaserver/plugins/cert.py:1574 ipaserver/plugins/baseldap.py:1975 #: ipaserver/plugins/serverrole.py:123 msgid "Time Limit" msgstr "" @@ -2216,7 +1345,7 @@ msgid "Time limit of search in seconds" msgstr "" #: ipaserver/plugins/cert.py:1579 ipaserver/plugins/hbactest.py:304 -#: ipaserver/plugins/pkinit.py:79 ipaserver/plugins/serverrole.py:131 +#: ipaserver/plugins/baseldap.py:1982 ipaserver/plugins/serverrole.py:131 msgid "Size Limit" msgstr "" @@ -2227,6 +1356,22 @@ msgstr "" msgid "Modify an automount key." msgstr "" +#: ipaserver/plugins/baseldap.py:989 +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +#: ipaserver/plugins/baseldap.py:1398 ipaserver/plugins/baseldap.py:1473 +msgid "Rights" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1399 ipaserver/plugins/baseldap.py:1474 +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + #: ipaserver/plugins/automount.py:755 msgid "New mount information" msgstr "" @@ -2338,184 +1483,6 @@ msgstr "" msgid "Nested Methods to execute" msgstr "" -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - msgid "" "\n" "Server configuration\n" @@ -3010,7 +1977,7 @@ msgid "" "standard format \"IP_ADDRESS port PORT\"" msgstr "" -#: ipaserver/plugins/dns.py:4124 ipaserver/plugins/dnsserver.py:136 +#: ipaserver/plugins/dns.py:2049 ipaserver/plugins/dns.py:4124 msgid "Forward policy" msgstr "" @@ -3167,8 +2134,8 @@ msgstr "" msgid "CERT Algorithm" msgstr "" -#: ipaserver/plugins/dns.py:1063 ipaserver/plugins/dns.py:1412 -#: ipaserver/plugins/otptoken.py:229 +#: ipaserver/plugins/dns.py:1020 ipaserver/plugins/dns.py:1063 +#: ipaserver/plugins/dns.py:1412 msgid "Algorithm" msgstr "" @@ -3229,7 +2196,7 @@ msgstr "" msgid "DNAME Target" msgstr "" -#: ipaserver/plugins/dns.py:1379 ipaserver/plugins/internal.py:1217 +#: ipaserver/plugins/dns.py:1048 ipaserver/plugins/dns.py:1379 msgid "Target" msgstr "" @@ -3417,6 +2384,7 @@ msgstr "" #: ipaserver/plugins/hbactest.py:285 ipaserver/plugins/internal.py:1332 #: ipaserver/plugins/internal.py:1676 ipaserver/plugins/service.py:494 +#: ipaserver/plugins/dns.py:1324 msgid "Service" msgstr "" @@ -3498,7 +2466,7 @@ msgstr "" msgid "SRV Priority" msgstr "" -#: ipaserver/plugins/certmap.py:304 ipaserver/plugins/pwpolicy.py:341 +#: ipaserver/plugins/pwpolicy.py:341 ipaserver/plugins/certmap.py:304 msgid "Priority" msgstr "" @@ -3736,9 +2704,9 @@ msgstr "" msgid "Add new DNS resource record." msgstr "" -#: ipaserver/plugins/dns.py:3597 ipaserver/plugins/host.py:672 -#: ipaserver/plugins/permission.py:1061 ipaserver/plugins/realmdomains.py:151 -#: ipaserver/plugins/service.py:655 +#: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/service.py:655 +#: ipaserver/plugins/dns.py:2898 ipaserver/plugins/dns.py:3597 +#: ipaserver/plugins/host.py:672 ipaserver/plugins/permission.py:1061 msgid "Force" msgstr "" @@ -3812,322 +2780,6 @@ msgstr "" msgid "Display information about a DNS zone (SOA record)." msgstr "" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#: ipaserver/plugins/idviews.py:1122 -msgid "Group name" -msgstr "" - -#: ipaserver/plugins/group.py:343 ipaserver/plugins/sudocmdgroup.py:131 -msgid "Group description" -msgstr "" - -#: ipaserver/plugins/group.py:347 ipaserver/plugins/idviews.py:1032 -#: ipaserver/plugins/idviews.py:1127 -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -#: ipaserver/plugins/role.py:142 -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1223 ipaserver/plugins/cert.py:1344 -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1766 ipaserver/plugins/baseldap.py:2253 -#: ipaserver/plugins/privilege.py:226 ipaserver/plugins/privilege.py:257 -#: ipaserver/plugins/role.py:231 ipaserver/plugins/role.py:255 -msgid "Members that could not be added" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1770 ipaserver/plugins/baseldap.py:2257 -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -#: ipaserver/plugins/user.py:163 ipaserver/plugins/sudorule.py:433 -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#: ipaserver/plugins/group.py:417 ipaserver/plugins/group.py:678 -#: ipaserver/plugins/user.py:151 -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -#: ipaserver/plugins/serverrole.py:185 -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1864 ipaserver/plugins/baseldap.py:2352 -msgid "Members that could not be removed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1868 ipaserver/plugins/baseldap.py:2356 -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - #: ipaserver/plugins/hbacrule.py:39 msgid "" "\n" @@ -4179,8 +2831,8 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" -#: ipaserver/plugins/certmap.py:273 ipaserver/plugins/hbacrule.py:207 -#: ipaserver/plugins/selinuxusermap.py:239 ipaserver/plugins/sudorule.py:233 +#: ipaserver/plugins/hbacrule.py:207 ipaserver/plugins/selinuxusermap.py:239 +#: ipaserver/plugins/certmap.py:273 ipaserver/plugins/sudorule.py:233 msgid "Rule name" msgstr "" @@ -4192,28 +2844,29 @@ msgstr "" msgid "Rule type (allow)" msgstr "" -#: ipaserver/plugins/hbacrule.py:223 ipaserver/plugins/netgroup.py:227 -#: ipaserver/plugins/selinuxusermap.py:253 ipaserver/plugins/sudorule.py:246 +#: ipaserver/plugins/hbacrule.py:223 ipaserver/plugins/selinuxusermap.py:253 +#: ipaserver/plugins/caacl.py:195 ipaserver/plugins/netgroup.py:227 +#: ipaserver/plugins/sudorule.py:246 msgid "User category" msgstr "" -#: ipaserver/plugins/hbacrule.py:224 ipaserver/plugins/netgroup.py:228 -#: ipaserver/plugins/selinuxusermap.py:254 ipaserver/plugins/sudorule.py:247 +#: ipaserver/plugins/hbacrule.py:224 ipaserver/plugins/selinuxusermap.py:254 +#: ipaserver/plugins/netgroup.py:228 ipaserver/plugins/sudorule.py:247 msgid "User category the rule applies to" msgstr "" -#: ipaserver/plugins/caacl.py:201 ipaserver/plugins/hbacrule.py:229 -#: ipaserver/plugins/netgroup.py:233 ipaserver/plugins/selinuxusermap.py:259 +#: ipaserver/plugins/hbacrule.py:229 ipaserver/plugins/selinuxusermap.py:259 +#: ipaserver/plugins/caacl.py:201 ipaserver/plugins/netgroup.py:233 #: ipaserver/plugins/sudorule.py:252 msgid "Host category" msgstr "" -#: ipaserver/plugins/hbacrule.py:230 ipaserver/plugins/netgroup.py:234 -#: ipaserver/plugins/selinuxusermap.py:260 ipaserver/plugins/sudorule.py:253 +#: ipaserver/plugins/hbacrule.py:230 ipaserver/plugins/selinuxusermap.py:260 +#: ipaserver/plugins/netgroup.py:234 ipaserver/plugins/sudorule.py:253 msgid "Host category the rule applies to" msgstr "" -#: ipaserver/plugins/hbacrule.py:243 +#: ipaserver/plugins/hbacrule.py:243 ipaserver/plugins/caacl.py:207 msgid "Service category" msgstr "" @@ -4221,25 +2874,42 @@ msgstr "" msgid "Service category the rule applies to" msgstr "" -#: ipaserver/plugins/certmap.py:310 ipaserver/plugins/hbacrule.py:256 -#: ipaserver/plugins/internal.py:1935 ipaserver/plugins/selinuxusermap.py:268 -#: ipaserver/plugins/sudorule.py:241 +#: ipaserver/plugins/internal.py:1935 ipaserver/plugins/hbacrule.py:256 +#: ipaserver/plugins/selinuxusermap.py:268 ipaserver/plugins/caacl.py:178 +#: ipaserver/plugins/certmap.py:310 ipaserver/plugins/sudorule.py:241 msgid "Enabled" msgstr "" -#: ipaserver/plugins/group.py:327 ipaserver/plugins/hbacrule.py:264 +#: ipaserver/plugins/automember.py:697 ipaserver/plugins/internal.py:1189 +#: ipaserver/plugins/hbacrule.py:260 ipaserver/plugins/selinuxusermap.py:272 +#: ipaserver/plugins/caacl.py:220 ipaserver/plugins/baseuser.py:198 +#: ipaserver/plugins/sudorule.py:282 ipaserver/plugins/user.py:161 +msgid "Users" +msgstr "" + #: ipaserver/plugins/internal.py:878 ipaserver/plugins/internal.py:1188 -#: ipaserver/plugins/selinuxusermap.py:276 ipaserver/plugins/sudorule.py:286 +#: ipaserver/plugins/group.py:327 ipaserver/plugins/hbacrule.py:264 +#: ipaserver/plugins/selinuxusermap.py:276 ipaserver/plugins/caacl.py:224 +#: ipaserver/plugins/sudorule.py:286 msgid "User Groups" msgstr "" -#: ipaserver/plugins/hbacrule.py:272 ipaserver/plugins/hostgroup.py:178 -#: ipaserver/plugins/internal.py:1072 ipaserver/plugins/internal.py:1162 -#: ipaserver/plugins/selinuxusermap.py:284 ipaserver/plugins/sudorule.py:299 +#: ipaserver/plugins/automember.py:702 ipaserver/plugins/internal.py:1163 +#: ipaserver/plugins/hbacrule.py:268 ipaserver/plugins/selinuxusermap.py:280 +#: ipaserver/plugins/caacl.py:228 ipaserver/plugins/host.py:461 +#: ipaserver/plugins/sudorule.py:295 +msgid "Hosts" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:178 ipaserver/plugins/internal.py:1072 +#: ipaserver/plugins/internal.py:1162 ipaserver/plugins/hbacrule.py:272 +#: ipaserver/plugins/selinuxusermap.py:284 ipaserver/plugins/caacl.py:232 +#: ipaserver/plugins/sudorule.py:299 msgid "Host Groups" msgstr "" -#: ipaserver/plugins/internal.py:955 ipaserver/plugins/service.py:493 +#: ipaserver/plugins/internal.py:955 ipaserver/plugins/caacl.py:236 +#: ipaserver/plugins/service.py:493 msgid "Services" msgstr "" @@ -4254,6 +2924,10 @@ msgstr "" msgid "Create a new HBAC rule." msgstr "" +#: ipaserver/plugins/cert.py:1344 ipaserver/plugins/baseldap.py:1223 +msgid "Suppress processing of membership attributes." +msgstr "" + #: ipaserver/plugins/hbacrule.py:534 msgid "Add target hosts and hostgroups to an HBAC rule." msgstr "" @@ -4270,6 +2944,16 @@ msgstr "" msgid "host groups to add" msgstr "" +#: ipaserver/plugins/role.py:255 ipaserver/plugins/baseldap.py:1766 +#: ipaserver/plugins/baseldap.py:2253 ipaserver/plugins/privilege.py:226 +#: ipaserver/plugins/privilege.py:257 +msgid "Members that could not be added" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1770 ipaserver/plugins/baseldap.py:2257 +msgid "Number of members added" +msgstr "" + #: ipaserver/plugins/hbacrule.py:591 msgid "Add services to an HBAC rule." msgstr "" @@ -4290,6 +2974,18 @@ msgstr "" msgid "Add users and groups to an HBAC rule." msgstr "" +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + #: ipaserver/plugins/hbacrule.py:314 msgid "Delete an HBAC rule." msgstr "" @@ -4320,6 +3016,14 @@ msgstr "" msgid "host groups to remove" msgstr "" +#: ipaserver/plugins/baseldap.py:1864 ipaserver/plugins/baseldap.py:2352 +msgid "Members that could not be removed" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1868 ipaserver/plugins/baseldap.py:2356 +msgid "Number of members removed" +msgstr "" + #: ipaserver/plugins/hbacrule.py:613 msgid "Remove service and service groups from an HBAC rule." msgstr "" @@ -4334,6 +3038,12 @@ msgstr "" msgid "Remove users and groups from an HBAC rule." msgstr "" +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + #: ipaserver/plugins/hbacrule.py:375 msgid "Display the properties of an HBAC rule." msgstr "" @@ -4461,255 +3171,6 @@ msgstr "" msgid "Display information about an HBAC service group." msgstr "" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:256 -msgid "Simulate use of Host-based access controls" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:134 ipaserver/plugins/passwd.py:94 -msgid "User name" -msgstr "" - -#: ipaserver/plugins/hbactest.py:281 -msgid "Target host" -msgstr "" - -#: ipaserver/plugins/hbactest.py:289 -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -#: ipaserver/plugins/hbactest.py:293 -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -#: ipaserver/plugins/hbactest.py:297 -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -#: ipaserver/plugins/hbactest.py:301 -msgid "Include all disabled IPA rules into test" -msgstr "" - -#: ipaserver/plugins/hbactest.py:305 -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -#: ipaserver/plugins/hbactest.py:260 -msgid "Warning" -msgstr "" - -#: ipaserver/plugins/hbactest.py:261 -msgid "Matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:262 -msgid "Not matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:263 -msgid "Non-existent or invalid rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:264 -msgid "Result of simulation" -msgstr "" - msgid "" "\n" "Hosts/Machines\n" @@ -4774,7 +3235,7 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" -#: ipaserver/plugins/service.py:725 +#: ipaserver/plugins/host.py:467 msgid "Host name" msgstr "" @@ -4815,18 +3276,18 @@ msgstr "" msgid "Random password" msgstr "" -#: ipaserver/plugins/baseuser.py:400 ipaserver/plugins/baseuser.py:845 -#: ipaserver/plugins/ca.py:112 ipaserver/plugins/cert.py:353 -#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/host.py:513 -#: ipaserver/plugins/idviews.py:1055 ipaserver/plugins/internal.py:638 -#: ipaserver/plugins/internal.py:722 ipaserver/plugins/service.py:519 +#: ipaserver/plugins/cert.py:353 ipaserver/plugins/internal.py:638 +#: ipaserver/plugins/internal.py:722 ipaserver/plugins/idviews.py:1055 +#: ipaserver/plugins/service.py:519 ipaserver/plugins/baseuser.py:400 +#: ipaserver/plugins/baseuser.py:845 ipaserver/plugins/certmap.py:605 +#: ipaserver/plugins/host.py:513 msgid "Certificate" msgstr "" msgid "Base-64 encoded server certificate" msgstr "" -#: ipaserver/plugins/host.py:555 ipaserver/plugins/service.py:501 +#: ipaserver/plugins/baseuser.py:251 ipaserver/plugins/host.py:555 msgid "Principal name" msgstr "" @@ -4836,7 +3297,7 @@ msgstr "" msgid "Hardware MAC address(es) on this host" msgstr "" -#: ipaserver/plugins/host.py:576 ipaserver/plugins/idviews.py:1049 +#: ipaserver/plugins/baseuser.py:350 ipaserver/plugins/host.py:576 msgid "SSH public key" msgstr "" @@ -4849,7 +3310,7 @@ msgid "" "interpretation)" msgstr "" -#: ipaserver/plugins/internal.py:1120 +#: ipaserver/plugins/internal.py:1120 ipaserver/plugins/host.py:591 msgid "Assigned ID View" msgstr "" @@ -4869,14 +3330,45 @@ msgstr "" msgid "Client credentials may be delegated to the service" msgstr "" +#: ipaserver/plugins/internal.py:190 ipaserver/plugins/internal.py:408 +#: ipaserver/plugins/internal.py:1714 ipaserver/plugins/baseldap.py:50 +#: ipaserver/plugins/migration.py:534 ipaserver/plugins/baseuser.py:279 +msgid "Password" +msgstr "" + #: ipaserver/plugins/baseldap.py:71 msgid "Member of host-groups" msgstr "" +#: ipaserver/plugins/baseldap.py:80 +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + msgid "Indirect Member of host-group" msgstr "" -#: ipaserver/plugins/service.py:128 +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +#: ipaserver/plugins/host.py:200 msgid "Keytab" msgstr "" @@ -4886,35 +3378,35 @@ msgstr "" msgid "Managing" msgstr "" -#: ipaserver/plugins/service.py:134 +#: ipaserver/plugins/service.py:134 ipaserver/plugins/host.py:212 msgid "Users allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:137 +#: ipaserver/plugins/service.py:137 ipaserver/plugins/host.py:215 msgid "Groups allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:140 +#: ipaserver/plugins/service.py:140 ipaserver/plugins/host.py:218 msgid "Hosts allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:143 +#: ipaserver/plugins/service.py:143 ipaserver/plugins/host.py:221 msgid "Host Groups allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:146 +#: ipaserver/plugins/service.py:146 ipaserver/plugins/host.py:224 msgid "Users allowed to create keytab" msgstr "" -#: ipaserver/plugins/service.py:149 +#: ipaserver/plugins/service.py:149 ipaserver/plugins/host.py:227 msgid "Groups allowed to create keytab" msgstr "" -#: ipaserver/plugins/service.py:152 +#: ipaserver/plugins/service.py:152 ipaserver/plugins/host.py:230 msgid "Hosts allowed to create keytab" msgstr "" -#: ipaserver/plugins/service.py:155 +#: ipaserver/plugins/service.py:155 ipaserver/plugins/host.py:233 msgid "Host Groups allowed to create keytab" msgstr "" @@ -4975,30 +3467,47 @@ msgstr "" msgid "Search for hosts without these member of host groups." msgstr "" +msgid "netgroup" +msgstr "" + msgid "Search for hosts with these member of netgroups." msgstr "" msgid "Search for hosts without these member of netgroups." msgstr "" +#: ipaserver/plugins/serverrole.py:185 +msgid "role" +msgstr "" + msgid "Search for hosts with these member of roles." msgstr "" msgid "Search for hosts without these member of roles." msgstr "" +msgid "HBAC rule" +msgstr "" + msgid "Search for hosts with these member of HBAC rules." msgstr "" msgid "Search for hosts without these member of HBAC rules." msgstr "" +msgid "sudo rule" +msgstr "" + msgid "Search for hosts with these member of sudo rules." msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" +#: ipaserver/plugins/sudorule.py:433 ipaserver/plugins/user.py:163 +msgid "user" +msgstr "" + msgid "Search for hosts with these enrolled by users." msgstr "" @@ -5036,7 +3545,8 @@ msgstr "" msgid "Display information about a host." msgstr "" -#: ipaserver/plugins/service.py:987 ipaserver/plugins/user.py:928 +#: ipaserver/plugins/service.py:987 ipaserver/plugins/host.py:1137 +#: ipaserver/plugins/user.py:928 msgid "file to store certificate in" msgstr "" @@ -5164,243 +3674,6 @@ msgstr "" msgid "Display information about a hostgroup." msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:219 -msgid "Range name" -msgstr "" - -#: ipaserver/plugins/idrange.py:224 -msgid "First Posix ID of the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:230 -msgid "Number of IDs in the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:236 -msgid "First RID of the corresponding RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:240 -msgid "First RID of the secondary RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:245 ipaserver/plugins/idrange.py:655 -msgid "Domain SID of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:250 ipaserver/plugins/idrange.py:663 -msgid "Name of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:253 ipaserver/plugins/internal.py:1246 -#: ipaserver/plugins/trust.py:710 -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#: ipaserver/plugins/idrange.py:556 -msgid "Delete an ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:604 -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:627 -msgid "Display information about a range." -msgstr "" - msgid "" "\n" "ID Views\n" @@ -5418,15 +3691,24 @@ msgstr "" msgid "Anchor to override" msgstr "" -#: ipaserver/plugins/idviews.py:1033 ipaserver/plugins/idviews.py:1128 +#: ipaserver/plugins/idviews.py:1122 +msgid "Group name" +msgstr "" + +#: ipaserver/plugins/idviews.py:1032 ipaserver/plugins/idviews.py:1127 +#: ipaserver/plugins/baseuser.py:301 +msgid "GID" +msgstr "" + +#: ipaserver/plugins/idviews.py:1128 ipaserver/plugins/baseuser.py:302 msgid "Group ID Number" msgstr "" -#: ipaserver/plugins/idviews.py:1019 +#: ipaserver/plugins/baseuser.py:207 msgid "User login" msgstr "" -#: ipaserver/plugins/idviews.py:1024 +#: ipaserver/plugins/baseuser.py:296 msgid "UID" msgstr "" @@ -5434,15 +3716,15 @@ msgstr "" msgid "User ID Number" msgstr "" -#: ipaserver/plugins/baseuser.py:240 ipaserver/plugins/idviews.py:1029 +#: ipaserver/plugins/idviews.py:1029 ipaserver/plugins/baseuser.py:240 msgid "GECOS" msgstr "" -#: ipaserver/plugins/idviews.py:1038 +#: ipaserver/plugins/baseuser.py:237 msgid "Home directory" msgstr "" -#: ipaserver/plugins/idviews.py:1042 +#: ipaserver/plugins/baseuser.py:246 msgid "Login shell" msgstr "" @@ -5509,7 +3791,7 @@ msgid "" msgstr "" #: ipaserver/plugins/idviews.py:453 ipaserver/plugins/idviews.py:496 -#: ipaserver/plugins/sudorule.py:438 +#: ipaserver/plugins/host.py:285 ipaserver/plugins/sudorule.py:438 msgid "hosts" msgstr "" @@ -5690,6 +3972,10 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" +#: ipaserver/plugins/krbtpolicy.py:134 ipaserver/plugins/passwd.py:94 +msgid "User name" +msgstr "" + #: ipaserver/plugins/krbtpolicy.py:135 msgid "Manage ticket policy for specific user" msgstr "" @@ -5991,6 +4277,9 @@ msgid "" "retrieve and print all attributes from the server. Affects command output." msgstr "" +msgid "Dictionary mapping variable name to value" +msgstr "" + msgid "Total number of variables env (>= count)" msgstr "" @@ -6107,6 +4396,11 @@ msgstr "" msgid "Search for netgroups without these member users." msgstr "" +#: ipaserver/plugins/group.py:417 ipaserver/plugins/group.py:678 +#: ipaserver/plugins/user.py:151 +msgid "group" +msgstr "" + msgid "Search for netgroups with these member groups." msgstr "" @@ -6214,186 +4508,6 @@ msgstr "" msgid "Show the current OTP configuration." msgstr "" -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:160 ipaserver/plugins/subid.py:136 -msgid "Unique ID" -msgstr "" - -#: ipaserver/plugins/otptoken.py:166 -msgid "Type of the token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:175 -msgid "Token description (informational only)" -msgstr "" - -#: ipaserver/plugins/internal.py:1372 ipaserver/plugins/otptoken.py:179 -#: ipaserver/plugins/subid.py:149 ipaserver/plugins/subid.py:467 -msgid "Owner" -msgstr "" - -#: ipaserver/plugins/otptoken.py:180 -msgid "Assigned user of the token (default: self)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:183 -msgid "Manager" -msgstr "" - -#: ipaserver/plugins/otptoken.py:184 -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#: ipaserver/plugins/internal.py:1933 ipaserver/plugins/otptoken.py:189 -msgid "Disabled" -msgstr "" - -#: ipaserver/plugins/otptoken.py:190 -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:194 -msgid "Validity start" -msgstr "" - -#: ipaserver/plugins/otptoken.py:195 -msgid "First date/time the token can be used" -msgstr "" - -#: ipaserver/plugins/otptoken.py:199 -msgid "Validity end" -msgstr "" - -#: ipaserver/plugins/otptoken.py:200 -msgid "Last date/time the token can be used" -msgstr "" - -#: ipaserver/plugins/otptoken.py:204 -msgid "Vendor" -msgstr "" - -#: ipaserver/plugins/otptoken.py:205 -msgid "Token vendor name (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:209 -msgid "Model" -msgstr "" - -#: ipaserver/plugins/otptoken.py:210 -msgid "Token model (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:214 -msgid "Serial" -msgstr "" - -#: ipaserver/plugins/otptoken.py:215 -msgid "Token serial (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:220 -msgid "Token secret (Base32; default: random)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:230 -msgid "Token hash algorithm" -msgstr "" - -#: ipaserver/plugins/otptoken.py:238 -msgid "Digits" -msgstr "" - -#: ipaserver/plugins/otptoken.py:239 -msgid "Number of digits each token code will have" -msgstr "" - -#: ipaserver/plugins/otptoken.py:247 -msgid "Clock offset" -msgstr "" - -#: ipaserver/plugins/otptoken.py:248 -msgid "TOTP token / IPA server time difference" -msgstr "" - -#: ipaserver/plugins/otptoken.py:255 -msgid "Clock interval" -msgstr "" - -#: ipaserver/plugins/otptoken.py:256 -msgid "Length of TOTP token code validity" -msgstr "" - -#: ipaserver/plugins/otptoken.py:264 -msgid "Counter" -msgstr "" - -#: ipaserver/plugins/otptoken.py:265 -msgid "Initial counter for the HOTP token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:280 -msgid "Add a new OTP token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:284 -msgid "(deprecated)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:285 -msgid "Do not display QR code" -msgstr "" - -#: ipaserver/plugins/otptoken.py:463 -msgid "Add users that can manage this token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:366 -msgid "Delete an OTP token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:421 -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#: ipaserver/plugins/otptoken.py:372 -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#: ipaserver/plugins/otptoken.py:450 -msgid "Display information about an OTP token." -msgstr "" - msgid "" "\n" "YubiKey Tokens\n" @@ -6879,7 +4993,7 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" -#: ipaserver/plugins/internal.py:1653 ipaserver/plugins/pwpolicy.py:303 +#: ipaserver/plugins/pwpolicy.py:303 ipaserver/plugins/internal.py:1653 msgid "Group" msgstr "" @@ -6981,9 +5095,9 @@ msgstr "" msgid "Display information about password policy." msgstr "" -#: ipaserver/plugins/baseuser.py:199 ipaserver/plugins/internal.py:1187 +#: ipaserver/plugins/pwpolicy.py:624 ipaserver/plugins/internal.py:1187 #: ipaserver/plugins/internal.py:1299 ipaserver/plugins/internal.py:1687 -#: ipaserver/plugins/user.py:162 ipaserver/plugins/pwpolicy.py:624 +#: ipaserver/plugins/baseuser.py:199 ipaserver/plugins/user.py:162 msgid "User" msgstr "" @@ -7112,8 +5226,8 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" -#: ipaserver/plugins/internal.py:714 ipaserver/plugins/internal.py:1534 -#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/trust.py:1245 +#: ipaserver/plugins/internal.py:1534 ipaserver/plugins/realmdomains.py:115 +#: ipaserver/plugins/trust.py:1245 ipaserver/plugins/certmap.py:566 msgid "Domain" msgstr "" @@ -7181,6 +5295,12 @@ msgstr "" msgid "A description of this role-group" msgstr "" +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + msgid "Privileges" msgstr "" @@ -7471,6 +5591,9 @@ msgid "" "httpd.keytab\n" msgstr "" +msgid "Principal" +msgstr "" + #: ipaserver/plugins/service.py:502 msgid "Service principal" msgstr "" @@ -8172,8 +6295,8 @@ msgstr "" msgid "A description of this command" msgstr "" -#: ipaserver/plugins/baseldap.py:83 ipaserver/plugins/sudocmdgroup.py:118 -#: ipaserver/plugins/sudocmdgroup.py:138 +#: ipaserver/plugins/sudocmdgroup.py:118 ipaserver/plugins/sudocmdgroup.py:138 +#: ipaserver/plugins/baseldap.py:83 msgid "Sudo Command Groups" msgstr "" @@ -8228,7 +6351,11 @@ msgstr "" msgid "Sudo Command Group" msgstr "" -#: ipaserver/plugins/internal.py:1400 ipaserver/plugins/sudocmdgroup.py:134 +#: ipaserver/plugins/sudocmdgroup.py:131 ipaserver/plugins/group.py:343 +msgid "Group description" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:134 ipaserver/plugins/internal.py:1400 msgid "Commands" msgstr "" @@ -8276,6 +6403,1784 @@ msgstr "" msgid "Display Sudo Command Group." msgstr "" +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +#: ipaserver/plugins/baseuser.py:221 +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +#: ipaserver/plugins/baseuser.py:267 +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +#: ipaserver/plugins/baseuser.py:343 +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +#: ipaserver/plugins/baseuser.py:361 +msgid "User authentication types" +msgstr "" + +#: ipaserver/plugins/baseuser.py:362 +msgid "Types of supported user authentication" +msgstr "" + +#: ipaserver/plugins/baseuser.py:368 +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#: ipaserver/plugins/baseuser.py:373 +msgid "RADIUS proxy configuration" +msgstr "" + +#: ipaserver/plugins/baseuser.py:377 +msgid "RADIUS proxy username" +msgstr "" + +#: ipaserver/plugins/baseuser.py:380 +msgid "Department Number" +msgstr "" + +#: ipaserver/plugins/baseuser.py:383 +msgid "Employee Number" +msgstr "" + +#: ipaserver/plugins/baseuser.py:386 +msgid "Employee Type" +msgstr "" + +#: ipaserver/plugins/baseuser.py:389 +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#: ipaserver/plugins/automember.py:258 +msgid "A description of this auto member rule" +msgstr "" + +#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 +msgid "Default (fallback) Group" +msgstr "" + +#: ipaserver/plugins/automember.py:263 +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 +msgid "Automember Rule" +msgstr "" + +#: ipaserver/plugins/automember.py:184 +msgid "Grouping Type" +msgstr "" + +#: ipaserver/plugins/automember.py:185 +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 +msgid "Inclusive Regex" +msgstr "" + +#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 +msgid "Exclusive Regex" +msgstr "" + +#: ipaserver/plugins/automember.py:176 +msgid "Attribute Key" +msgstr "" + +#: ipaserver/plugins/automember.py:177 +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +#: ipaserver/plugins/automember.py:357 +msgid "Conditions that could not be added" +msgstr "" + +#: ipaserver/plugins/automember.py:361 +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#: ipaserver/plugins/automember.py:586 +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:683 +msgid "Rebuild auto membership." +msgstr "" + +#: ipaserver/plugins/automember.py:693 +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +#: ipaserver/plugins/automember.py:698 +msgid "Rebuild membership for specified users" +msgstr "" + +#: ipaserver/plugins/automember.py:703 +msgid "Rebuild membership for specified hosts" +msgstr "" + +#: ipaserver/plugins/automember.py:708 +msgid "No wait" +msgstr "" + +#: ipaserver/plugins/automember.py:709 +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:441 +msgid "Conditions that could not be removed" +msgstr "" + +#: ipaserver/plugins/automember.py:445 +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +#: ipaserver/plugins/hbactest.py:256 +msgid "Simulate use of Host-based access controls" +msgstr "" + +#: ipaserver/plugins/hbactest.py:281 +msgid "Target host" +msgstr "" + +#: ipaserver/plugins/hbactest.py:289 +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +#: ipaserver/plugins/hbactest.py:293 +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +#: ipaserver/plugins/hbactest.py:297 +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +#: ipaserver/plugins/hbactest.py:301 +msgid "Include all disabled IPA rules into test" +msgstr "" + +#: ipaserver/plugins/hbactest.py:305 +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +#: ipaserver/plugins/hbactest.py:260 +msgid "Warning" +msgstr "" + +#: ipaserver/plugins/hbactest.py:261 +msgid "Matched rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:262 +msgid "Not matched rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:263 +msgid "Non-existent or invalid rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:264 +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1537 ipaserver/plugins/trust.py:541 +#: ipaserver/plugins/trust.py:1585 +msgid "Domain NetBIOS name" +msgstr "" + +#: ipaserver/plugins/internal.py:1538 ipaserver/plugins/trust.py:545 +#: ipaserver/plugins/trust.py:1588 +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#: ipaserver/plugins/certmap.py:298 +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#: ipaserver/plugins/trust.py:1798 +msgid "Active Directory domain administrator" +msgstr "" + +#: ipaserver/plugins/trust.py:1802 +msgid "Active Directory domain administrator's password" +msgstr "" + +#: ipaserver/plugins/trust.py:1807 +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:253 ipaserver/plugins/internal.py:1246 +#: ipaserver/plugins/trust.py:710 +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:219 +msgid "Range name" +msgstr "" + +#: ipaserver/plugins/idrange.py:224 +msgid "First Posix ID of the range" +msgstr "" + +#: ipaserver/plugins/idrange.py:230 +msgid "Number of IDs in the range" +msgstr "" + +#: ipaserver/plugins/idrange.py:236 +msgid "First RID of the corresponding RID range" +msgstr "" + +#: ipaserver/plugins/idrange.py:240 +msgid "First RID of the secondary RID range" +msgstr "" + +#: ipaserver/plugins/idrange.py:245 ipaserver/plugins/idrange.py:655 +msgid "Domain SID of the trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:250 ipaserver/plugins/idrange.py:663 +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#: ipaserver/plugins/idrange.py:556 +msgid "Delete an ID range." +msgstr "" + +#: ipaserver/plugins/idrange.py:604 +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +#: ipaserver/plugins/idrange.py:627 +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:160 ipaserver/plugins/subid.py:136 +msgid "Unique ID" +msgstr "" + +#: ipaserver/plugins/otptoken.py:166 +msgid "Type of the token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:175 +msgid "Token description (informational only)" +msgstr "" + +#: ipaserver/plugins/internal.py:1372 ipaserver/plugins/otptoken.py:179 +#: ipaserver/plugins/subid.py:149 ipaserver/plugins/subid.py:467 +msgid "Owner" +msgstr "" + +#: ipaserver/plugins/otptoken.py:180 +msgid "Assigned user of the token (default: self)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:184 +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#: ipaserver/plugins/internal.py:1933 ipaserver/plugins/otptoken.py:189 +msgid "Disabled" +msgstr "" + +#: ipaserver/plugins/otptoken.py:190 +msgid "Mark the token as disabled (default: false)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:194 +msgid "Validity start" +msgstr "" + +#: ipaserver/plugins/otptoken.py:195 +msgid "First date/time the token can be used" +msgstr "" + +#: ipaserver/plugins/otptoken.py:199 +msgid "Validity end" +msgstr "" + +#: ipaserver/plugins/otptoken.py:200 +msgid "Last date/time the token can be used" +msgstr "" + +#: ipaserver/plugins/otptoken.py:204 +msgid "Vendor" +msgstr "" + +#: ipaserver/plugins/otptoken.py:205 +msgid "Token vendor name (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:209 +msgid "Model" +msgstr "" + +#: ipaserver/plugins/otptoken.py:210 +msgid "Token model (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:214 +msgid "Serial" +msgstr "" + +#: ipaserver/plugins/otptoken.py:215 +msgid "Token serial (informational only)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:220 +msgid "Token secret (Base32; default: random)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:230 +msgid "Token hash algorithm" +msgstr "" + +#: ipaserver/plugins/otptoken.py:238 +msgid "Digits" +msgstr "" + +#: ipaserver/plugins/otptoken.py:239 +msgid "Number of digits each token code will have" +msgstr "" + +#: ipaserver/plugins/otptoken.py:247 +msgid "Clock offset" +msgstr "" + +#: ipaserver/plugins/otptoken.py:248 +msgid "TOTP token / IPA server time difference" +msgstr "" + +#: ipaserver/plugins/otptoken.py:255 +msgid "Clock interval" +msgstr "" + +#: ipaserver/plugins/otptoken.py:256 +msgid "Length of TOTP token code validity" +msgstr "" + +#: ipaserver/plugins/otptoken.py:264 +msgid "Counter" +msgstr "" + +#: ipaserver/plugins/otptoken.py:265 +msgid "Initial counter for the HOTP token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:280 +msgid "Add a new OTP token." +msgstr "" + +#: ipaserver/plugins/otptoken.py:284 +msgid "(deprecated)" +msgstr "" + +#: ipaserver/plugins/otptoken.py:285 +msgid "Do not display QR code" +msgstr "" + +#: ipaserver/plugins/otptoken.py:463 +msgid "Add users that can manage this token." +msgstr "" + +#: ipaserver/plugins/otptoken.py:366 +msgid "Delete an OTP token." +msgstr "" + +#: ipaserver/plugins/otptoken.py:421 +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#: ipaserver/plugins/otptoken.py:372 +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +#: ipaserver/plugins/otptoken.py:450 +msgid "Display information about an OTP token." +msgstr "" + msgid "" "\n" "Sudo Rules\n" @@ -8304,9 +8209,9 @@ msgid "" "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" "To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" +" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" +" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" "EXAMPLES:\n" "\n" @@ -8535,524 +8440,13 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1537 ipaserver/plugins/trust.py:541 -#: ipaserver/plugins/trust.py:1585 -msgid "Domain NetBIOS name" -msgstr "" - -#: ipaserver/plugins/internal.py:1538 ipaserver/plugins/trust.py:545 -#: ipaserver/plugins/trust.py:1588 -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#: ipaserver/plugins/certmap.py:298 ipaserver/plugins/trust.py:1580 -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#: ipaserver/plugins/trust.py:1798 -msgid "Active Directory domain administrator" -msgstr "" - -#: ipaserver/plugins/trust.py:1802 -msgid "Active Directory domain administrator's password" -msgstr "" - -#: ipaserver/plugins/trust.py:1807 -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -#: ipaserver/plugins/schema.py:152 -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -#: ipaserver/plugins/baseuser.py:267 -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -#: ipaserver/plugins/baseuser.py:361 -msgid "User authentication types" -msgstr "" - -#: ipaserver/plugins/baseuser.py:362 -msgid "Types of supported user authentication" -msgstr "" - -#: ipaserver/plugins/baseuser.py:368 -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#: ipaserver/plugins/baseuser.py:373 -msgid "RADIUS proxy configuration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:377 -msgid "RADIUS proxy username" -msgstr "" - -#: ipaserver/plugins/baseuser.py:380 -msgid "Department Number" -msgstr "" - -#: ipaserver/plugins/baseuser.py:383 -msgid "Employee Number" -msgstr "" - -#: ipaserver/plugins/baseuser.py:386 -msgid "Employee Type" -msgstr "" - -#: ipaserver/plugins/baseuser.py:389 -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -#: ipaserver/plugins/baseldap.py:1976 ipaserver/plugins/cert.py:1575 -#: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/serverrole.py:124 +#: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/cert.py:1575 +#: ipaserver/plugins/baseldap.py:1976 ipaserver/plugins/serverrole.py:124 msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" -#: ipaserver/plugins/baseldap.py:1983 ipaserver/plugins/cert.py:1580 -#: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/serverrole.py:132 +#: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/cert.py:1580 +#: ipaserver/plugins/baseldap.py:1983 ipaserver/plugins/serverrole.py:132 msgid "Maximum number of entries returned (0 is unlimited)" msgstr "" @@ -9109,7 +8503,7 @@ msgstr "" msgid "Service category the ACL applies to" msgstr "" -#: ipaserver/plugins/internal.py:598 +#: ipaserver/plugins/internal.py:598 ipaserver/plugins/caacl.py:216 msgid "Profiles" msgstr "" @@ -9167,124 +8561,6 @@ msgstr "" msgid "Display the properties of a CA ACL." msgstr "" -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -#: ipaserver/plugins/cert.py:578 ipaserver/plugins/certprofile.py:122 -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:123 -msgid "Profile ID for referring to this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:132 -msgid "Profile description" -msgstr "" - -#: ipaserver/plugins/certprofile.py:133 -msgid "Brief description of this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:138 -msgid "Store issued certificates" -msgstr "" - -#: ipaserver/plugins/certprofile.py:139 -msgid "Whether to store certs issued using this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:281 -msgid "Delete a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:188 -msgid "Search for Certificate Profiles." -msgstr "" - -#: ipaserver/plugins/certprofile.py:221 -msgid "Import a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:226 -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#: ipaserver/plugins/certprofile.py:304 -msgid "Modify Certificate Profile configuration." -msgstr "" - -#: ipaserver/plugins/certprofile.py:310 -msgid "File containing profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:200 -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:204 -msgid "Write profile configuration to file" -msgstr "" - msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" msgstr "" @@ -9309,8 +8585,8 @@ msgstr "" msgid "Change current Domain Level." msgstr "" -#: ipaserver/plugins/domainlevel.py:124 ipaserver/plugins/internal.py:791 -#: ipaserver/plugins/internal.py:792 +#: ipaserver/plugins/internal.py:791 ipaserver/plugins/internal.py:792 +#: ipaserver/plugins/domainlevel.py:124 msgid "Domain Level" msgstr "" @@ -9320,218 +8596,6 @@ msgstr "" msgid "Remove certificates from host entry" msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - #: ipaserver/plugins/idviews.py:80 msgid "Fallback to AD DC LDAP" msgstr "" @@ -9566,10 +8630,6 @@ msgid "" "to onelevel" msgstr "" -#: ipaserver/plugins/otptoken.py:469 -msgid "Remove users that can manage this token." -msgstr "" - #: ipaserver/plugins/permission.py:321 msgid "Target DN subtree" msgstr "" @@ -9605,12 +8665,12 @@ msgid "" " ipa server-show ipa.example.com\n" msgstr "" -#: ipaserver/plugins/dnsserver.py:112 ipaserver/plugins/pkinit.py:47 -#: ipaserver/plugins/serverrole.py:58 ipaserver/plugins/server.py:103 +#: ipaserver/plugins/pkinit.py:47 ipaserver/plugins/dnsserver.py:112 +#: ipaserver/plugins/serverrole.py:58 msgid "Server name" msgstr "" -#: ipaserver/plugins/serverrole.py:59 ipaserver/plugins/server.py:104 +#: ipaserver/plugins/pkinit.py:48 ipaserver/plugins/serverrole.py:59 msgid "IPA server hostname" msgstr "" @@ -10062,14 +9122,6 @@ msgid "" " " msgstr "" -#: ipaserver/plugins/trust.py:717 -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - #: ipaserver/plugins/user.py:1161 msgid "Preserved user" msgstr "" @@ -10271,6 +9323,10 @@ msgstr "" msgid "Owner services" msgstr "" +#: ipaserver/plugins/vault.py:327 ipaserver/plugins/vault.py:637 +msgid "Failed owners" +msgstr "" + #: ipaserver/plugins/vault.py:642 msgid "Vault service" msgstr "" @@ -10372,6 +9428,348 @@ msgstr "" msgid "Display information about a vault container." msgstr "" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +#: ipaserver/plugins/cert.py:578 ipaserver/plugins/certprofile.py:122 +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +#: ipaserver/dcerpc_common.py:22 +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +#: ipaserver/plugins/certprofile.py:123 +msgid "Profile ID for referring to this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:132 +msgid "Profile description" +msgstr "" + +#: ipaserver/plugins/certprofile.py:133 +msgid "Brief description of this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:138 +msgid "Store issued certificates" +msgstr "" + +#: ipaserver/plugins/certprofile.py:139 +msgid "Whether to store certs issued using this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:281 +msgid "Delete a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:188 +msgid "Search for Certificate Profiles." +msgstr "" + +#: ipaserver/plugins/certprofile.py:221 +msgid "Import a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:226 +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#: ipaserver/plugins/certprofile.py:304 +msgid "Modify Certificate Profile configuration." +msgstr "" + +#: ipaserver/plugins/certprofile.py:310 +msgid "File containing profile configuration" +msgstr "" + +#: ipaserver/plugins/certprofile.py:200 +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:204 +msgid "Write profile configuration to file" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +#: ipaserver/plugins/otptoken.py:469 +msgid "Remove users that can manage this token." +msgstr "" + msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10681,11 +10079,11 @@ msgstr "" msgid "Check connection to remote IPA server." msgstr "" -#: ipaserver/plugins/server.py:916 +#: ipaserver/plugins/trust.py:1848 msgid "Remote server name" msgstr "" -#: ipaserver/plugins/server.py:917 +#: ipaserver/plugins/trust.py:1849 msgid "Remote IPA server hostname" msgstr "" @@ -12064,192 +11462,6 @@ msgid "" " ipa hostgroup-del baltimore\n" msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - msgid "" "Comma-separated list of objectclasses used to search for user entries in DS" msgstr "" @@ -12556,6 +11768,198 @@ msgstr "" msgid "comma-separated list of sudo commands to remove" msgstr "" +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + msgid "" "\n" "Sudo Rules\n" @@ -12584,9 +11988,9 @@ msgid "" "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" "To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" +" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" +" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" "\n" "For more information, see the IPA Documentation to Sudo.\n" msgstr "" @@ -12597,12 +12001,664 @@ msgstr "" msgid "comma-separated list of sudo command groups to remove" msgstr "" -msgid "Active directory domain administrator's password" +#: ipaclient/frontend.py:28 ipaclient/frontend.py:90 +#: ipaserver/plugins/baseldap.py:53 +msgid "Failed members" msgstr "" -msgid "GECOS field" +#: ipaclient/frontend.py:32 ipaserver/plugins/baseldap.py:176 +msgid "Failed source hosts/hostgroups" msgstr "" +#: ipaclient/frontend.py:36 ipaserver/plugins/baseldap.py:179 +msgid "Failed hosts/hostgroups" +msgstr "" + +#: ipaclient/frontend.py:40 ipaserver/plugins/baseldap.py:182 +msgid "Failed users/groups" +msgstr "" + +#: ipaclient/frontend.py:44 ipaserver/plugins/baseldap.py:185 +msgid "Failed service/service groups" +msgstr "" + +#: ipaclient/frontend.py:48 ipaserver/plugins/baseldap.py:188 +msgid "Failed to remove" +msgstr "" + +#: ipaclient/frontend.py:53 ipaserver/plugins/baseldap.py:192 +msgid "Failed RunAs" +msgstr "" + +#: ipaclient/frontend.py:57 ipaserver/plugins/baseldap.py:195 +msgid "Failed RunAsGroup" +msgstr "" + +#: ipaclient/frontend.py:62 ipaserver/plugins/caacl.py:473 +msgid "Failed profiles" +msgstr "" + +#: ipaclient/frontend.py:66 ipaserver/plugins/caacl.py:476 +msgid "Failed CAs" +msgstr "" + +#: ipaclient/frontend.py:71 ipaserver/plugins/hostgroup.py:95 +#: ipaserver/plugins/group.py:183 +msgid "Failed member manager" +msgstr "" + +#: ipaclient/frontend.py:76 ipaserver/plugins/host.py:209 +msgid "Failed managedby" +msgstr "" + +#: ipaclient/frontend.py:81 ipaserver/plugins/service.py:158 +#: ipaserver/plugins/host.py:236 +msgid "Failed allowed to retrieve keytab" +msgstr "" + +#: ipaclient/frontend.py:85 ipaserver/plugins/service.py:161 +#: ipaserver/plugins/host.py:239 +msgid "Failed allowed to create keytab" +msgstr "" + +#: ipaclient/frontend.py:94 +msgid "Failed targets" +msgstr "" + +#: ipaclient/plugins/automember.py:33 ipaserver/plugins/automember.py:342 +msgid "Failed to add" +msgstr "" + +#: ipaclient/plugins/ca.py:19 ipaclient/plugins/cert.py:39 +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +#: ipaclient/plugins/certmap.py:19 +msgid "Input file" +msgstr "" + +#: ipaclient/plugins/certmap.py:20 +msgid "File to load the certificate from" +msgstr "" + +#: ipaclient/plugins/certmap.py:41 ipaclient/plugins/cert.py:130 +msgid "cannot specify both raw certificate and file" +msgstr "" + +#: ipaclient/plugins/certprofile.py:25 +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#: ipaclient/plugins/host.py:41 ipaclient/plugins/service.py:43 +#: ipaclient/plugins/user.py:74 +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +#: ipaclient/plugins/location.py:23 +msgid "Servers details:" +msgstr "" + +#: ipaclient/plugins/migration.py:37 +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +#: ipaclient/plugins/migration.py:41 +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:35 +msgid "python-yubico is not installed." +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:40 +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:42 +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:44 +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/server.py:40 +#: ipaserver/plugins/radiusproxy.py:43 ipaserver/plugins/ca.py:35 +#: ipaserver/plugins/cert.py:99 ipaserver/plugins/automember.py:63 +#: ipaserver/plugins/location.py:37 ipaserver/plugins/otptoken.py:49 +#: ipaserver/plugins/schema.py:28 ipaserver/plugins/dnsserver.py:39 +#: ipaserver/plugins/certmap.py:60 ipaserver/plugins/host.py:104 +#: ipaserver/plugins/permission.py:97 ipaserver/plugins/vault.py:90 +#: ipaserver/plugins/sudorule.py:71 ipaserver/plugins/serverrole.py:19 +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:49 +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:72 +msgid "Add a new YubiKey OTP token." +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:77 +msgid "YubiKey slot" +msgstr "" + +#: ipaclient/plugins/otptoken_yubikey.py:146 +msgid "No free YubiKey slot!" +msgstr "" + +#: ipaclient/plugins/server.py:20 +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#: ipaclient/plugins/topology.py:25 +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#: ipaclient/plugins/topology.py:30 +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +#: ipaclient/plugins/topology.py:33 +msgid "Topology is disconnected" +msgstr "" + +#: ipaclient/plugins/topology.py:35 +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +#: ipaclient/plugins/topology.py:40 +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#: ipaclient/plugins/topology.py:43 +msgid "Maximum number of agreements per replica" +msgstr "" + +#: ipaclient/plugins/topology.py:47 +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +#: ipaclient/plugins/user.py:40 +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#: ipaclient/plugins/user.py:45 +msgid "Delete a user" +msgstr "" + +#: ipaclient/plugins/user.py:54 +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +#: ipaclient/plugins/dns.py:137 ipaserver/plugins/dns.py:3576 +msgid "Split DNS record to parts" +msgstr "" + +#: ipaclient/plugins/dns.py:237 +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#: ipaclient/plugins/dns.py:238 +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +#: ipaclient/plugins/dns.py:243 +msgid "DNS resource record type" +msgstr "" + +#: ipaclient/plugins/dns.py:261 +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +#: ipaclient/plugins/dns.py:286 +msgid "No option to modify specific record provided." +msgstr "" + +#: ipaclient/plugins/dns.py:289 ipaclient/plugins/dns.py:355 +msgid "Current DNS record contents:\n" +msgstr "" + +#: ipaclient/plugins/dns.py:312 +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#: ipaclient/plugins/dns.py:321 +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +#: ipaclient/plugins/dns.py:329 ipaserver/plugins/dns.py:3876 +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +#: ipaclient/plugins/dns.py:347 +msgid "No option to delete specific record provided." +msgstr "" + +#: ipaclient/plugins/dns.py:348 +msgid "Delete all?" +msgstr "" + +#: ipaclient/plugins/dns.py:376 +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +#: ipaclient/plugins/dns.py:392 ipaclient/plugins/dns.py:409 +#: ipaclient/plugins/dns.py:421 +msgid "Server will check DNS forwarder(s)." +msgstr "" + +#: ipaclient/plugins/dns.py:394 ipaclient/plugins/dns.py:411 +#: ipaclient/plugins/dns.py:423 +msgid "This may take some time, please wait ..." +msgstr "" + +#: ipaclient/plugins/dns.py:403 +msgid "DNS forwarder" +msgstr "" + +#: ipaclient/plugins/dns.py:434 +msgid "file to store DNS records in nsupdate format" +msgstr "" + +#: ipaclient/plugins/otptoken.py:66 +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +#: ipaclient/plugins/otptoken.py:82 +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +#: ipaclient/plugins/otptoken.py:137 +msgid "Synchronize an OTP token." +msgstr "" + +#: ipaclient/plugins/otptoken.py:142 +msgid "User ID" +msgstr "" + +#: ipaclient/plugins/otptoken.py:144 +msgid "First Code" +msgstr "" + +#: ipaclient/plugins/otptoken.py:145 +msgid "Second Code" +msgstr "" + +#: ipaclient/plugins/otptoken.py:149 ipaserver/plugins/internal.py:1724 +msgid "Token ID" +msgstr "" + +#: ipaclient/plugins/vault.py:67 ipaclient/plugins/vault.py:833 +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#: ipaclient/plugins/vault.py:74 +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +#: ipaclient/plugins/vault.py:144 ipaclient/plugins/vault.py:163 +#: ipaserver/plugins/passwd.py:149 +msgid "Invalid credentials" +msgstr "" + +#: ipaclient/plugins/vault.py:181 +msgid "Create a new vault." +msgstr "" + +#: ipaclient/plugins/vault.py:187 ipaclient/plugins/vault.py:728 +#: ipaclient/plugins/vault.py:961 +msgid "Vault password" +msgstr "" + +#: ipaclient/plugins/vault.py:192 ipaclient/plugins/vault.py:733 +#: ipaclient/plugins/vault.py:966 +msgid "File containing the vault password" +msgstr "" + +#: ipaclient/plugins/vault.py:197 +msgid "File containing the vault public key" +msgstr "" + +#: ipaclient/plugins/vault.py:257 +msgid "Password can be specified only for symmetric vault" +msgstr "" + +#: ipaclient/plugins/vault.py:263 +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +#: ipaclient/plugins/vault.py:283 ipaclient/plugins/vault.py:866 +#: ipaclient/plugins/vault.py:1094 +msgid "Password specified multiple times" +msgstr "" + +#: ipaclient/plugins/vault.py:306 +msgid "Public key specified multiple times" +msgstr "" + +#: ipaclient/plugins/vault.py:322 +msgid "Missing vault public key" +msgstr "" + +#: ipaclient/plugins/vault.py:334 +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +#: ipaclient/plugins/vault.py:368 ipaserver/plugins/vault.py:921 +msgid "Modify a vault." +msgstr "" + +#: ipaclient/plugins/vault.py:373 ipaserver/plugins/internal.py:1731 +msgid "Change password" +msgstr "" + +#: ipaclient/plugins/vault.py:378 +msgid "Old vault password" +msgstr "" + +#: ipaclient/plugins/vault.py:383 +msgid "File containing the old vault password" +msgstr "" + +#: ipaclient/plugins/vault.py:388 +msgid "New vault password" +msgstr "" + +#: ipaclient/plugins/vault.py:393 +msgid "File containing the new vault password" +msgstr "" + +#: ipaclient/plugins/vault.py:398 +msgid "Old vault private key" +msgstr "" + +#: ipaclient/plugins/vault.py:403 +msgid "File containing the old vault private key" +msgstr "" + +#: ipaclient/plugins/vault.py:408 +msgid "File containing the new vault public key" +msgstr "" + +#: ipaclient/plugins/vault.py:514 +msgid "New public key specified multiple times" +msgstr "" + +#: ipaclient/plugins/vault.py:527 +msgid "Missing new vault public key" +msgstr "" + +#: ipaclient/plugins/vault.py:714 ipaserver/plugins/vault.py:1017 +msgid "Archive data into a vault." +msgstr "" + +#: ipaclient/plugins/vault.py:719 +msgid "Binary data to archive" +msgstr "" + +#: ipaclient/plugins/vault.py:723 +msgid "File containing data to archive" +msgstr "" + +#: ipaclient/plugins/vault.py:737 +msgid "Override existing password" +msgstr "" + +#: ipaclient/plugins/vault.py:819 +msgid "Input data specified multiple times" +msgstr "" + +#: ipaclient/plugins/vault.py:824 ipaclient/plugins/vault.py:837 +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +#: ipaclient/plugins/vault.py:920 ipaclient/plugins/vault.py:1144 +msgid "Invalid vault type" +msgstr "" + +#: ipaclient/plugins/vault.py:951 +msgid "Retrieve a data from a vault." +msgstr "" + +#: ipaclient/plugins/vault.py:956 +msgid "File to store retrieved data" +msgstr "" + +#: ipaclient/plugins/vault.py:971 +msgid "Vault private key" +msgstr "" + +#: ipaclient/plugins/vault.py:976 +msgid "File containing the vault private key" +msgstr "" + +#: ipaclient/plugins/vault.py:983 ipaserver/plugins/internal.py:757 +msgid "Data" +msgstr "" + +#: ipaclient/plugins/vault.py:1120 +msgid "Private key specified multiple times" +msgstr "" + +#: ipaclient/plugins/vault.py:1133 +msgid "Missing vault private key" +msgstr "" + +#: ipaclient/plugins/automount.py:101 +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +#: ipaclient/plugins/automount.py:120 +msgid "Import automount files for a specific location." +msgstr "" + +#: ipaclient/plugins/automount.py:124 +msgid "Master file" +msgstr "" + +#: ipaclient/plugins/automount.py:125 +msgid "Automount master file." +msgstr "" + +#: ipaclient/plugins/automount.py:132 +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#: ipaclient/plugins/automount.py:150 +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#: ipaclient/plugins/automount.py:200 +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#: ipaclient/plugins/automount.py:215 +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +#: ipaclient/plugins/automount.py:264 +msgid "Imported maps:" +msgstr "" + +#: ipaclient/plugins/automount.py:267 +#, python-format +msgid "Added %(map)s" +msgstr "" + +#: ipaclient/plugins/automount.py:271 +msgid "Imported keys:" +msgstr "" + +#: ipaclient/plugins/automount.py:274 +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +#: ipaclient/plugins/automount.py:281 +msgid "Ignored keys:" +msgstr "" + +#: ipaclient/plugins/automount.py:284 +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +#: ipaclient/plugins/automount.py:292 +msgid "Duplicate maps skipped:" +msgstr "" + +#: ipaclient/plugins/automount.py:295 +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +#: ipaclient/plugins/automount.py:301 +msgid "Duplicate keys skipped:" +msgstr "" + +#: ipaclient/plugins/automount.py:304 +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +#: ipaclient/plugins/cert.py:107 +msgid "Unrevoked" +msgstr "" + +#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:293 +msgid "Error" +msgstr "" + +#: ipaclient/plugins/cert.py:120 +msgid "Input filename" +msgstr "" + +#: ipaclient/plugins/cert.py:121 +msgid "File to load the certificate from." +msgstr "" + +#: ipaclient/plugins/sudorule.py:30 +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#: ipaclient/plugins/sudorule.py:36 +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#: ipaclient/plugins/sudorule.py:43 +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#: ipaclient/plugins/sudorule.py:54 +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#: ipalib/frontend.py:425 +msgid "Results are truncated, try a more specific search" +msgstr "" + +#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +#: ipalib/frontend.py:986 ipaserver/plugins/batch.py:83 +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#: ipalib/output.py:110 +msgid "A dictionary representing an LDAP entry" +msgstr "" + +#: ipalib/output.py:118 +msgid "A list of LDAP entries" +msgstr "" + +#: ipalib/output.py:170 +msgid "All commands should at least have a result" +msgstr "" + +#: ipalib/plugable.py:540 +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#: ipalib/plugable.py:613 +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#: ipalib/misc.py:22 +#, python-format +msgid "%(count)d variables" +msgstr "" + +#: ipalib/misc.py:96 +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + #: ipalib/cli.py:630 #, python-format msgid "Enter %(label)s again to verify: " @@ -12657,6 +12713,181 @@ msgstr "" msgid "No file to read" msgstr "" +#: ipalib/parameters.py:415 +msgid "incorrect type" +msgstr "" + +#: ipalib/parameters.py:418 +msgid "Only one value is allowed" +msgstr "" + +#: ipalib/parameters.py:885 +msgid "this option is deprecated" +msgstr "" + +#: ipalib/parameters.py:1003 +msgid "must be True or False" +msgstr "" + +#: ipalib/parameters.py:1101 +msgid "must be an integer" +msgstr "" + +#: ipalib/parameters.py:1167 +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#: ipalib/parameters.py:1179 +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +#: ipalib/parameters.py:1197 +msgid "must be a decimal number" +msgstr "" + +#: ipalib/parameters.py:1243 +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#: ipalib/parameters.py:1255 +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#: ipalib/parameters.py:1265 +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#: ipalib/parameters.py:1388 +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +#: ipalib/parameters.py:1408 +msgid "must be binary data" +msgstr "" + +#: ipalib/parameters.py:1427 +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#: ipalib/parameters.py:1439 +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#: ipalib/parameters.py:1451 +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#: ipalib/parameters.py:1468 +msgid "must be a certificate" +msgstr "" + +#: ipalib/parameters.py:1504 +msgid "must be a certificate signing request" +msgstr "" + +#: ipalib/parameters.py:1550 +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +#: ipalib/parameters.py:1574 +msgid "must be Unicode text" +msgstr "" + +#: ipalib/parameters.py:1605 +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#: ipalib/parameters.py:1615 +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#: ipalib/parameters.py:1627 +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#: ipalib/parameters.py:1639 +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#: ipalib/parameters.py:1661 +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#: ipalib/parameters.py:1714 +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#: ipalib/parameters.py:1717 +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +#: ipalib/parameters.py:1834 +msgid "must be datetime value" +msgstr "" + +#: ipalib/parameters.py:1852 +msgid "does not match any of accepted formats: " +msgstr "" + +#: ipalib/parameters.py:2035 +msgid "incomplete time value" +msgstr "" + +#: ipalib/parameters.py:2112 +msgid "must be DNS name" +msgstr "" + +#: ipalib/parameters.py:2140 +msgid "must be absolute" +msgstr "" + +#: ipalib/parameters.py:2146 +msgid "must be relative" +msgstr "" + +#: ipalib/parameters.py:2157 +msgid "must be dictionary" +msgstr "" + +#: ipalib/parameters.py:2166 +msgid "must be Kerberos principal" +msgstr "" + +#: ipalib/parameters.py:2182 +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +#: ipalib/parameters.py:2191 +msgid "Service principal is required" +msgstr "" + +#: ipalib/rpc.py:1114 +msgid "any of the configured servers" +msgstr "" + +#: ipalib/rpc.py:1197 +msgid "Exceeded number of tries to forward a request." +msgstr "" + #: ipalib/errors.py:296 #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" @@ -13110,19 +13341,6 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -#: ipalib/frontend.py:425 -msgid "Results are truncated, try a more specific search" -msgstr "" - -#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -#: ipalib/frontend.py:986 ipaserver/plugins/batch.py:83 -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #: ipalib/messages.py:84 msgid "Additional instructions:" msgstr "" @@ -13309,215 +13527,6 @@ msgstr "" msgid "The certificate for %(ca)s is not available on this server." msgstr "" -#: ipalib/misc.py:22 -#, python-format -msgid "%(count)d variables" -msgstr "" - -#: ipalib/misc.py:96 -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -#: ipalib/output.py:110 -msgid "A dictionary representing an LDAP entry" -msgstr "" - -#: ipalib/output.py:118 -msgid "A list of LDAP entries" -msgstr "" - -#: ipalib/output.py:170 -msgid "All commands should at least have a result" -msgstr "" - -#: ipalib/parameters.py:415 -msgid "incorrect type" -msgstr "" - -#: ipalib/parameters.py:418 -msgid "Only one value is allowed" -msgstr "" - -#: ipalib/parameters.py:885 -msgid "this option is deprecated" -msgstr "" - -#: ipalib/parameters.py:1003 -msgid "must be True or False" -msgstr "" - -#: ipalib/parameters.py:1101 -msgid "must be an integer" -msgstr "" - -#: ipalib/parameters.py:1167 -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#: ipalib/parameters.py:1179 -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -#: ipalib/parameters.py:1197 -msgid "must be a decimal number" -msgstr "" - -#: ipalib/parameters.py:1243 -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#: ipalib/parameters.py:1255 -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#: ipalib/parameters.py:1265 -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#: ipalib/parameters.py:1388 -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -#: ipalib/parameters.py:1408 -msgid "must be binary data" -msgstr "" - -#: ipalib/parameters.py:1427 -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#: ipalib/parameters.py:1439 -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#: ipalib/parameters.py:1451 -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#: ipalib/parameters.py:1468 -msgid "must be a certificate" -msgstr "" - -#: ipalib/parameters.py:1504 -msgid "must be a certificate signing request" -msgstr "" - -#: ipalib/parameters.py:1550 -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -#: ipalib/parameters.py:1574 -msgid "must be Unicode text" -msgstr "" - -#: ipalib/parameters.py:1605 -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#: ipalib/parameters.py:1615 -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#: ipalib/parameters.py:1627 -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#: ipalib/parameters.py:1639 -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#: ipalib/parameters.py:1661 -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#: ipalib/parameters.py:1714 -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#: ipalib/parameters.py:1717 -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -#: ipalib/parameters.py:1834 -msgid "must be datetime value" -msgstr "" - -#: ipalib/parameters.py:1852 -msgid "does not match any of accepted formats: " -msgstr "" - -#: ipalib/parameters.py:2035 -msgid "incomplete time value" -msgstr "" - -#: ipalib/parameters.py:2112 -msgid "must be DNS name" -msgstr "" - -#: ipalib/parameters.py:2140 -msgid "must be absolute" -msgstr "" - -#: ipalib/parameters.py:2146 -msgid "must be relative" -msgstr "" - -#: ipalib/parameters.py:2157 -msgid "must be dictionary" -msgstr "" - -#: ipalib/parameters.py:2166 -msgid "must be Kerberos principal" -msgstr "" - -#: ipalib/parameters.py:2182 -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -#: ipalib/parameters.py:2191 -msgid "Service principal is required" -msgstr "" - -#: ipalib/plugable.py:540 -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#: ipalib/plugable.py:613 -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -#: ipalib/rpc.py:1114 -msgid "any of the configured servers" -msgstr "" - -#: ipalib/rpc.py:1197 -msgid "Exceeded number of tries to forward a request." -msgstr "" - #: ipalib/util.py:214 msgid "Filename is empty" msgstr "" @@ -13670,45 +13679,8 @@ msgstr "" msgid "objectclass %s not found" msgstr "" -#: ipaserver/dcerpc_common.py:20 -msgid "Trusting forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:21 -msgid "Trusted forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:26 -msgid "Established and verified" -msgstr "" - -#: ipaserver/dcerpc_common.py:27 -msgid "Waiting for confirmation by remote side" -msgstr "" - -#: ipaserver/dcerpc_common.py:30 -msgid "Unknown" -msgstr "" - -#: ipaserver/dcerpc_common.py:36 -msgid "Non-Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:37 ipaserver/plugins/internal.py:1247 -msgid "Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:38 -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/dcerpc_common.py:39 -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:41 -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1211 +msgid "Failed to authenticate to CA REST API" msgstr "" #: ipaserver/install/certs.py:480 @@ -13716,109 +13688,2174 @@ msgstr "" msgid "Unable to communicate with CMS (status %d)" msgstr "" -#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1211 -msgid "Failed to authenticate to CA REST API" -msgstr "" - #: ipaserver/install/replication.py:1786 ipaserver/install/replication.py:1805 #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" -#: ipaserver/plugins/aci.py:165 -msgid "A list of ACI values" +#: ipaserver/plugins/delegation.py:67 +msgid "delegation" msgstr "" -#: ipaserver/plugins/aci.py:229 -msgid "type, filter, subtree and targetgroup are mutually exclusive" +#: ipaserver/plugins/delegation.py:68 +msgid "delegations" msgstr "" -#: ipaserver/plugins/aci.py:232 -msgid "ACI prefix is required" +#: ipaserver/plugins/delegation.py:69 +msgid "Delegations" msgstr "" -#: ipaserver/plugins/aci.py:235 -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" +#: ipaserver/plugins/delegation.py:70 +msgid "Delegation" msgstr "" -#: ipaserver/plugins/aci.py:238 -msgid "filter and memberof are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:244 -msgid "group, permission and self are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:246 -msgid "One of group, permission or self is required" -msgstr "" - -#: ipaserver/plugins/aci.py:269 -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -#: ipaserver/plugins/aci.py:295 -msgid "empty filter" -msgstr "" - -#: ipaserver/plugins/aci.py:316 -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#: ipaserver/plugins/aci.py:361 -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#: ipaserver/plugins/aci.py:408 -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -#: ipaserver/plugins/aci.py:437 -msgid "ACI object." -msgstr "" - -#: ipaserver/plugins/aci.py:440 -msgid "ACIs" -msgstr "" - -#: ipaserver/plugins/aci.py:514 ipaserver/plugins/delegation.py:101 -#: ipaserver/plugins/permission.py:359 ipaserver/plugins/selfservice.py:94 +#: ipaserver/plugins/delegation.py:101 ipaserver/plugins/selfservice.py:94 +#: ipaserver/plugins/permission.py:359 ipaserver/plugins/aci.py:514 msgid "ACI" msgstr "" -#: ipaserver/plugins/aci.py:524 +#: ipaserver/plugins/delegation.py:132 #, python-format -msgid "Created ACI \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" msgstr "" -#: ipaserver/plugins/aci.py:577 +#: ipaserver/plugins/delegation.py:153 #, python-format -msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" msgstr "" -#: ipaserver/plugins/aci.py:620 +#: ipaserver/plugins/delegation.py:170 #, python-format -msgid "Modified ACI \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" msgstr "" -#: ipaserver/plugins/aci.py:694 +#: ipaserver/plugins/delegation.py:189 #, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/aci.py:929 -#, python-format -msgid "Renamed ACI to \"%(value)s\"" +#: ipaserver/plugins/sudocmd.py:33 +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgstr "" +#: ipaserver/plugins/sudocmd.py:55 +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:64 +msgid "sudo command" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:65 +msgid "sudo commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:117 +msgid "Sudo Commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:154 +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:160 +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:193 +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:201 +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/hbac.py:7 +msgid "Host-based access control commands" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:64 +msgid "HBAC service group" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:65 +msgid "HBAC service groups" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:108 ipaserver/plugins/hbacrule.py:290 +msgid "HBAC Service Groups" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:109 +msgid "HBAC Service Group" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:131 +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:139 +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:147 +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:156 +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/role.py:82 ipaserver/plugins/serverrole.py:186 +msgid "roles" +msgstr "" + +#: ipaserver/plugins/role.py:143 +msgid "Role" +msgstr "" + +#: ipaserver/plugins/role.py:164 +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:172 +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:180 +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:189 +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/server.py:36 +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +#: ipaserver/plugins/server.py:38 +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +#: ipaserver/plugins/server.py:42 +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +#: ipaserver/plugins/server.py:45 +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#: ipaserver/plugins/server.py:61 +msgid "server" +msgstr "" + +#: ipaserver/plugins/server.py:62 +msgid "servers" +msgstr "" + +#: ipaserver/plugins/server.py:70 +msgid "IPA Servers" +msgstr "" + +#: ipaserver/plugins/server.py:71 ipaserver/plugins/internal.py:1948 +#: ipaserver/plugins/location.py:157 +msgid "IPA Server" +msgstr "" + +#: ipaserver/plugins/server.py:133 +msgid "Server location" +msgstr "" + +#: ipaserver/plugins/server.py:140 +msgid "Service weight" +msgstr "" + +#: ipaserver/plugins/server.py:141 +msgid "Weight for server services" +msgstr "" + +#: ipaserver/plugins/server.py:148 +msgid "Service relative weight" +msgstr "" + +#: ipaserver/plugins/server.py:149 +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#: ipaserver/plugins/server.py:154 +msgid "Enabled server roles" +msgstr "" + +#: ipaserver/plugins/server.py:155 +msgid "List of enabled roles" +msgstr "" + +#: ipaserver/plugins/server.py:222 +msgid "Modify information about an IPA server." +msgstr "" + +#: ipaserver/plugins/server.py:224 +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/server.py:306 +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/server.py:444 +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/server.py:449 +msgid "Ignore topology errors" +msgstr "" + +#: ipaserver/plugins/server.py:450 +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +#: ipaserver/plugins/server.py:455 +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +#: ipaserver/plugins/server.py:456 +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +#: ipaserver/plugins/server.py:462 +msgid "Force server removal" +msgstr "" + +#: ipaserver/plugins/server.py:463 +msgid "Force server removal even if it does not exist" +msgstr "" + +#: ipaserver/plugins/server.py:500 +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +#: ipaserver/plugins/server.py:506 +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +#: ipaserver/plugins/server.py:520 +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +#: ipaserver/plugins/server.py:530 +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +#: ipaserver/plugins/server.py:545 +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#: ipaserver/plugins/server.py:595 +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:616 +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:637 +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:663 +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:701 +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:717 +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:722 +msgid "You may need to manually remove them from the tree" +msgstr "" + +#: ipaserver/plugins/server.py:737 +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +#: ipaserver/plugins/server.py:747 +msgid "Ignoring topology connectivity errors." +msgstr "" + +#: ipaserver/plugins/server.py:766 +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "" + +#: ipaserver/plugins/server.py:793 +msgid "Server has already been deleted" +msgstr "" + +#: ipaserver/plugins/server.py:843 +msgid "Agreements deleted" +msgstr "" + +#: ipaserver/plugins/server.py:854 +msgid "Following segments were not deleted:" +msgstr "" + +#: ipaserver/plugins/server.py:927 ipaserver/plugins/trust.py:1865 +#, python-format +msgid "must be \"%s\"" +msgstr "" + +#: ipaserver/plugins/server.py:939 +msgid "not allowed to perform server connection check" +msgstr "" + +#: ipaserver/plugins/server.py:965 +msgid "Set enabled/hidden state of a server." +msgstr "" + +#: ipaserver/plugins/server.py:971 +msgid "State" +msgstr "" + +#: ipaserver/plugins/server.py:972 +msgid "Server state" +msgstr "" + +#: ipaserver/plugins/server.py:977 +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +#: ipaserver/plugins/server.py:986 +msgid "Cannot hide CA renewal master." +msgstr "" + +#: ipaserver/plugins/server.py:988 +msgid "Cannot hide DNSSec key master." +msgstr "" + +#: ipaserver/plugins/server.py:1000 +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:26 +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:172 +msgid "Allowed to Impersonate" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:177 +msgid "Member principals" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:189 +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:199 +msgid "Add target to a named service delegation." +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:213 +#: ipaserver/plugins/servicedelegation.py:303 +#: ipaserver/plugins/baseldap.py:1716 +#, python-format +msgid "member %s" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:287 +msgid "Remove member from a named service delegation." +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:378 +#: ipaserver/plugins/servicedelegation.py:411 +msgid "service delegation rule" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:379 +msgid "service delegation rules" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:390 +msgid "Service delegation rules" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:391 +msgid "Service delegation rule" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:398 +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:405 +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:413 +msgid "privileged service delegation rule" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:423 +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/servicedelegation.py:471 +#: ipaserver/plugins/servicedelegation.py:500 +msgid "service delegation target" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:472 +msgid "service delegation targets" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:479 +msgid "Service delegation targets" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:480 +msgid "Service delegation target" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:487 +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:494 +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:502 +msgid "privileged service delegation target" +msgstr "" + +#: ipaserver/plugins/servicedelegation.py:512 +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/otp.py:7 +msgid "One time password commands" +msgstr "" + +#: ipaserver/plugins/otpconfig.py:57 +msgid "OTP configuration options" +msgstr "" + +#: ipaserver/plugins/otpconfig.py:80 ipaserver/plugins/otpconfig.py:81 +msgid "OTP Configuration" +msgstr "" + +#: ipaserver/plugins/pkinit.py:13 +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +#: ipaserver/plugins/pkinit.py:39 +msgid "pkinit" +msgstr "" + +#: ipaserver/plugins/pkinit.py:41 ipaserver/plugins/internal.py:192 +msgid "PKINIT" +msgstr "" + +#: ipaserver/plugins/pkinit.py:53 +msgid "PKINIT status" +msgstr "" + +#: ipaserver/plugins/pkinit.py:54 +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +#: ipaserver/plugins/pkinit.py:63 +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#: ipaserver/plugins/pkinit.py:65 +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/radiusproxy.py:35 +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:37 +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:39 +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:45 +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:48 +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:51 +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:54 +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:57 +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:68 +msgid "invalid attribute name" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:80 +msgid "invalid port number" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:98 +msgid "RADIUS proxy server" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:99 +msgid "RADIUS proxy servers" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:106 +msgid "RADIUS Servers" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:107 +msgid "RADIUS Server" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:172 +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:177 +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:182 +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:188 +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/stageuser.py:65 +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#: ipaserver/plugins/stageuser.py:128 +msgid "Stage Users" +msgstr "" + +#: ipaserver/plugins/stageuser.py:129 +msgid "Stage User" +msgstr "" + +#: ipaserver/plugins/stageuser.py:130 +msgid "stage user" +msgstr "" + +#: ipaserver/plugins/stageuser.py:131 +msgid "stage users" +msgstr "" + +#: ipaserver/plugins/stageuser.py:278 +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:297 +msgid "givenname is required" +msgstr "" + +#: ipaserver/plugins/stageuser.py:300 +msgid "sn is required" +msgstr "" + +#: ipaserver/plugins/stageuser.py:329 ipaserver/plugins/stageuser.py:533 +#: ipaserver/plugins/baseuser.py:574 ipaserver/plugins/host.py:692 +#: ipaserver/plugins/user.py:562 +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#: ipaserver/plugins/stageuser.py:418 +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:424 +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:471 ipaserver/plugins/user.py:871 +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/stageuser.py:495 +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:508 +msgid "Entry RDN is not 'uid'" +msgstr "" + +#: ipaserver/plugins/stageuser.py:514 +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#: ipaserver/plugins/stageuser.py:690 +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#: ipaserver/plugins/stageuser.py:754 +#, python-format +msgid "Stage user %s activated" +msgstr "" + +#: ipaserver/plugins/stageuser.py:771 +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:772 +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:777 +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:778 +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:783 +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:784 +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:789 +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:790 +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:795 +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +#: ipaserver/plugins/stageuser.py:801 +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:92 +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:143 +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:171 +msgid "Add Class of Service entry" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:194 +msgid "Delete Class of Service entry" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:200 +msgid "Modify Class of Service entry" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:218 +msgid "Display Class of Service entry" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:224 +msgid "Search for Class of Service entry" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:237 +msgid "password policy" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:238 +msgid "password policies" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:297 +msgid "Password Policies" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:298 ipaserver/plugins/internal.py:1233 +msgid "Password Policy" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:370 +msgid "Max repeat" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:371 +msgid "Maximum number of same consecutive characters" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:379 +msgid "Max sequence" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:380 +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:388 +msgid "Dictionary check" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:389 +msgid "Check if the password is a dictionary word" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:395 +msgid "User check" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:396 +msgid "Check if the password contains the username" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:469 +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:495 +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:554 +msgid "cannot delete global password policy" +msgstr "" + +#: ipaserver/plugins/pwpolicy.py:588 +msgid "priority cannot be set on global policy" +msgstr "" + +#: ipaserver/plugins/ca.py:20 +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +#: ipaserver/plugins/ca.py:22 +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:25 +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:28 +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:32 +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:37 +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +#: ipaserver/plugins/ca.py:43 +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:47 +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:51 +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:68 ipaserver/plugins/ca.py:78 +msgid "Certificate Authority" +msgstr "" + +#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:77 +msgid "Certificate Authorities" +msgstr "" + +#: ipaserver/plugins/ca.py:84 ipaserver/plugins/schema.py:48 +#: ipaserver/plugins/trust.py:1418 +msgid "Name" +msgstr "" + +#: ipaserver/plugins/ca.py:85 +msgid "Name for referencing the CA" +msgstr "" + +#: ipaserver/plugins/ca.py:90 +msgid "Description of the purpose of the CA" +msgstr "" + +#: ipaserver/plugins/ca.py:94 +msgid "Authority ID" +msgstr "" + +#: ipaserver/plugins/ca.py:95 +msgid "Dogtag Authority ID" +msgstr "" + +#: ipaserver/plugins/ca.py:100 ipaserver/plugins/ca.py:286 +msgid "Subject DN" +msgstr "" + +#: ipaserver/plugins/ca.py:101 +msgid "Subject Distinguished Name" +msgstr "" + +#: ipaserver/plugins/ca.py:106 ipaserver/plugins/cert.py:426 +msgid "Issuer DN" +msgstr "" + +#: ipaserver/plugins/ca.py:107 +msgid "Issuer Distinguished Name" +msgstr "" + +#: ipaserver/plugins/ca.py:113 ipaserver/plugins/cert.py:354 +msgid "Base-64 encoded certificate." +msgstr "" + +#: ipaserver/plugins/ca.py:118 ipaserver/plugins/cert.py:359 +msgid "Certificate chain" +msgstr "" + +#: ipaserver/plugins/ca.py:119 ipaserver/plugins/cert.py:360 +msgid "X.509 certificate chain" +msgstr "" + +#: ipaserver/plugins/ca.py:218 +msgid "Search for CAs." +msgstr "" + +#: ipaserver/plugins/ca.py:220 +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/ca.py:237 ipaserver/plugins/cert.py:599 +msgid "Include certificate chain in output" +msgstr "" + +#: ipaserver/plugins/ca.py:243 +msgid "Display the properties of a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:260 +msgid "Create a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:261 +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:271 +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#: ipaserver/plugins/ca.py:287 +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#: ipaserver/plugins/ca.py:302 +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +#: ipaserver/plugins/ca.py:326 +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#: ipaserver/plugins/ca.py:328 +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:337 +msgid "Insufficient privilege to delete a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:341 ipaserver/plugins/ca.py:350 +#: ipaserver/plugins/ca.py:369 ipaserver/plugins/ca.py:409 +#: ipaserver/plugins/internal.py:636 +msgid "CA" +msgstr "" + +#: ipaserver/plugins/ca.py:343 +msgid "IPA CA cannot be deleted" +msgstr "" + +#: ipaserver/plugins/ca.py:352 +msgid "Must be disabled first" +msgstr "" + +#: ipaserver/plugins/ca.py:360 +msgid "Modify CA configuration." +msgstr "" + +#: ipaserver/plugins/ca.py:361 +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:387 +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:403 +msgid "Disable a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:404 +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:411 +msgid "IPA CA cannot be disabled" +msgstr "" + +#: ipaserver/plugins/ca.py:421 +msgid "Enable a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:422 +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/cert.py:64 ipaserver/plugins/hbactest.py:39 +msgid "pyhbac is not installed." +msgstr "" + +#: ipaserver/plugins/cert.py:69 +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +#: ipaserver/plugins/cert.py:71 +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:73 +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:76 +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:79 +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:82 +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:84 +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +#: ipaserver/plugins/cert.py:87 +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:89 +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:92 +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:95 +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:97 +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:101 +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#: ipaserver/plugins/cert.py:104 +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:107 +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:110 +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:113 +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +#: ipaserver/plugins/cert.py:116 +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#: ipaserver/plugins/cert.py:119 +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +#: ipaserver/plugins/cert.py:122 +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +#: ipaserver/plugins/cert.py:125 +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +#: ipaserver/plugins/cert.py:128 +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +#: ipaserver/plugins/cert.py:131 +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +#: ipaserver/plugins/cert.py:134 +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:138 +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#: ipaserver/plugins/cert.py:141 +msgid " * 0 - unspecified\n" +msgstr "" + +#: ipaserver/plugins/cert.py:142 +msgid " * 1 - keyCompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:143 +msgid " * 2 - cACompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:144 +msgid " * 3 - affiliationChanged\n" +msgstr "" + +#: ipaserver/plugins/cert.py:145 +msgid " * 4 - superseded\n" +msgstr "" + +#: ipaserver/plugins/cert.py:146 +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#: ipaserver/plugins/cert.py:147 +msgid " * 6 - certificateHold\n" +msgstr "" + +#: ipaserver/plugins/cert.py:148 +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#: ipaserver/plugins/cert.py:149 +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +#: ipaserver/plugins/cert.py:150 +msgid " * 10 - aACompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:151 +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:153 +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#: ipaserver/plugins/cert.py:283 ipaserver/plugins/certprofile.py:86 +msgid "CA is not configured" +msgstr "" + +#: ipaserver/plugins/cert.py:289 +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +#: ipaserver/plugins/cert.py:309 +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#: ipaserver/plugins/cert.py:313 +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +#: ipaserver/plugins/cert.py:347 +msgid "Issuing CA" +msgstr "" + +#: ipaserver/plugins/cert.py:348 +msgid "Name of issuing CA" +msgstr "" + +#: ipaserver/plugins/cert.py:365 ipaserver/plugins/cert.py:1502 +#: ipaserver/plugins/internal.py:653 ipaserver/plugins/internal.py:729 +#: ipaserver/plugins/service.py:524 ipaserver/plugins/baseuser.py:838 +#: ipaserver/plugins/host.py:517 +msgid "Subject" +msgstr "" + +#: ipaserver/plugins/cert.py:370 +msgid "Subject email address" +msgstr "" + +#: ipaserver/plugins/cert.py:375 +msgid "Subject DNS name" +msgstr "" + +#: ipaserver/plugins/cert.py:380 +msgid "Subject X.400 address" +msgstr "" + +#: ipaserver/plugins/cert.py:385 +msgid "Subject directory name" +msgstr "" + +#: ipaserver/plugins/cert.py:390 +msgid "Subject EDI Party name" +msgstr "" + +#: ipaserver/plugins/cert.py:395 +msgid "Subject URI" +msgstr "" + +#: ipaserver/plugins/cert.py:400 +msgid "Subject IP Address" +msgstr "" + +#: ipaserver/plugins/cert.py:405 +msgid "Subject OID" +msgstr "" + +#: ipaserver/plugins/cert.py:410 +msgid "Subject UPN" +msgstr "" + +#: ipaserver/plugins/cert.py:415 +msgid "Subject Kerberos principal name" +msgstr "" + +#: ipaserver/plugins/cert.py:420 +msgid "Subject Other Name" +msgstr "" + +#: ipaserver/plugins/cert.py:425 ipaserver/plugins/internal.py:726 +#: ipaserver/plugins/service.py:536 ipaserver/plugins/baseuser.py:831 +#: ipaserver/plugins/host.py:529 +msgid "Issuer" +msgstr "" + +#: ipaserver/plugins/cert.py:431 ipaserver/plugins/service.py:540 +#: ipaserver/plugins/host.py:533 +msgid "Not Before" +msgstr "" + +#: ipaserver/plugins/cert.py:436 ipaserver/plugins/service.py:544 +#: ipaserver/plugins/host.py:537 +msgid "Not After" +msgstr "" + +#: ipaserver/plugins/cert.py:441 ipaserver/plugins/service.py:548 +#: ipaserver/plugins/host.py:541 +msgid "Fingerprint (SHA1)" +msgstr "" + +#: ipaserver/plugins/cert.py:446 ipaserver/plugins/service.py:552 +#: ipaserver/plugins/host.py:545 +msgid "Fingerprint (SHA256)" +msgstr "" + +#: ipaserver/plugins/cert.py:458 +msgid "Serial number (hex)" +msgstr "" + +#: ipaserver/plugins/cert.py:584 +msgid "Request status" +msgstr "" + +#: ipaserver/plugins/cert.py:630 +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#: ipaserver/plugins/cert.py:679 +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +#: ipaserver/plugins/cert.py:731 +msgid "No Common Name was found in subject of request." +msgstr "" + +#: ipaserver/plugins/cert.py:739 +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#: ipaserver/plugins/cert.py:745 +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +#: ipaserver/plugins/cert.py:754 +msgid "DN commonName does not match user's login" +msgstr "" + +#: ipaserver/plugins/cert.py:768 +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#: ipaserver/plugins/cert.py:777 +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#: ipaserver/plugins/cert.py:798 ipaserver/plugins/cert.py:916 +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#: ipaserver/plugins/cert.py:843 +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#: ipaserver/plugins/cert.py:874 +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#: ipaserver/plugins/cert.py:892 +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +#: ipaserver/plugins/cert.py:901 +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#: ipaserver/plugins/cert.py:908 +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#: ipaserver/plugins/cert.py:925 +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#: ipaserver/plugins/cert.py:943 +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#: ipaserver/plugins/cert.py:1030 +msgid "'add' option" +msgstr "" + +#: ipaserver/plugins/cert.py:1034 +msgid "The principal for this request doesn't exist." +msgstr "" + +#: ipaserver/plugins/cert.py:1150 +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#: ipaserver/plugins/cert.py:1167 +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#: ipaserver/plugins/cert.py:1179 +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +#: ipaserver/plugins/cert.py:1273 ipaserver/plugins/internal.py:700 +#: ipaserver/plugins/internal.py:1030 ipaserver/plugins/internal.py:1333 +#: ipaserver/plugins/internal.py:1936 +msgid "Status" +msgstr "" + +#: ipaserver/plugins/cert.py:1278 +msgid "Revoked" +msgstr "" + +#: ipaserver/plugins/cert.py:1283 ipaserver/plugins/internal.py:650 +#: ipaserver/plugins/internal.py:691 ipaserver/plugins/service.py:556 +#: ipaserver/plugins/host.py:549 +msgid "Revocation reason" +msgstr "" + +#: ipaserver/plugins/cert.py:1284 +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#: ipaserver/plugins/cert.py:1306 +#, python-format +msgid "Owner %s" +msgstr "" + +#: ipaserver/plugins/cert.py:1393 +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#: ipaserver/plugins/cert.py:1462 +msgid "7 is not a valid revocation reason" +msgstr "" + +#: ipaserver/plugins/cert.py:1564 +msgid "Status of the certificate" +msgstr "" + +#: ipaserver/plugins/cert.py:1570 +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#: ipaserver/plugins/cert.py:1586 +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/cert.py:1608 +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#: ipaserver/plugins/cert.py:1619 +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +#: ipaserver/plugins/idrange.py:43 +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:57 +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:202 +msgid "ID Ranges" +msgstr "" + +#: ipaserver/plugins/idrange.py:203 +msgid "ID Range" +msgstr "" + +#: ipaserver/plugins/idrange.py:207 +msgid "local domain range" +msgstr "" + +#: ipaserver/plugins/idrange.py:210 ipaserver/plugins/trust.py:674 +msgid "Active Directory domain range" +msgstr "" + +#: ipaserver/plugins/idrange.py:211 ipaserver/plugins/trust.py:675 +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +#: ipaserver/plugins/idrange.py:255 +msgid "ID range type, one of allowed values" +msgstr "" + +#: ipaserver/plugins/idrange.py:260 ipaserver/plugins/internal.py:1239 +msgid "Auto private groups" +msgstr "" + +#: ipaserver/plugins/idrange.py:262 +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +#: ipaserver/plugins/idrange.py:336 +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +#: ipaserver/plugins/idrange.py:341 +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +#: ipaserver/plugins/idrange.py:348 +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/idrange.py:360 +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:397 +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:423 +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:435 ipaserver/plugins/idrange.py:698 +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:446 +msgid "Specified trusted domain name could not be found." +msgstr "" + +#: ipaserver/plugins/idrange.py:461 +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:468 ipaserver/plugins/idrange.py:733 +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +#: ipaserver/plugins/idrange.py:475 +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +#: ipaserver/plugins/idrange.py:481 +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:500 +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +#: ipaserver/plugins/idrange.py:510 +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +#: ipaserver/plugins/idrange.py:517 ipaserver/plugins/idrange.py:752 +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:527 ipaserver/plugins/idrange.py:775 +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +#: ipaserver/plugins/idrange.py:539 +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#: ipaserver/plugins/idrange.py:558 +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:607 +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idrange.py:643 +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:647 +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:682 +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +#: ipaserver/plugins/idrange.py:710 +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +#: ipaserver/plugins/idrange.py:717 +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:724 +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:34 +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:67 +msgid "sudo command group" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:68 +msgid "sudo command groups" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:149 +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:157 +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:165 +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:174 +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + #: ipaserver/plugins/automember.py:43 msgid "" "\n" @@ -14238,3582 +16275,85 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -#: ipaserver/plugins/automount.py:218 -msgid "automount location" -msgstr "" - -#: ipaserver/plugins/automount.py:219 -msgid "automount locations" -msgstr "" - -#: ipaserver/plugins/automount.py:222 -msgid "Automount Locations" -msgstr "" - -#: ipaserver/plugins/automount.py:223 -msgid "Automount Location" -msgstr "" - -#: ipaserver/plugins/automount.py:263 -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:283 -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:296 -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automount.py:349 -msgid "automount map" -msgstr "" - -#: ipaserver/plugins/automount.py:350 -msgid "automount maps" -msgstr "" - -#: ipaserver/plugins/automount.py:393 -msgid "Automount Maps" -msgstr "" - -#: ipaserver/plugins/automount.py:394 -msgid "Automount Map" -msgstr "" - -#: ipaserver/plugins/automount.py:401 -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:408 -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:428 -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:436 -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automount.py:448 -msgid "Automount key object." -msgstr "" - -#: ipaserver/plugins/automount.py:452 -msgid "automount key" -msgstr "" - -#: ipaserver/plugins/automount.py:453 -msgid "automount keys" -msgstr "" - -#: ipaserver/plugins/automount.py:512 -msgid "Automount Keys" -msgstr "" - -#: ipaserver/plugins/automount.py:513 -msgid "Automount Key" -msgstr "" - -#: ipaserver/plugins/automount.py:514 -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#: ipaserver/plugins/automount.py:515 -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#: ipaserver/plugins/automount.py:516 -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#: ipaserver/plugins/automount.py:566 -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#: ipaserver/plugins/automount.py:625 -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:654 -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:678 -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#: ipaserver/plugins/automount.py:707 -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:748 -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:807 -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/baseldap.py:101 -msgid "Member service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:110 -msgid "Member HBAC service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:127 -msgid "Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:129 -msgid "Indirect Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:146 -msgid "Indirect Member permissions" -msgstr "" - -#: ipaserver/plugins/baseldap.py:149 -msgid "Indirect Member HBAC service" -msgstr "" - -#: ipaserver/plugins/baseldap.py:152 -msgid "Indirect Member HBAC service group" -msgstr "" - -#: ipaserver/plugins/baseldap.py:213 -msgid "Invalid format. Should be name=value" -msgstr "" - -#: ipaserver/plugins/baseldap.py:584 -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -#: ipaserver/plugins/baseldap.py:615 -msgid "entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:616 -msgid "entries" -msgstr "" - -#: ipaserver/plugins/baseldap.py:654 ipaserver/plugins/baseldap.py:655 -msgid "Entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:658 -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:659 -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:660 ipaserver/plugins/schema.py:257 -#: ipaserver/plugins/schema.py:333 ipaserver/plugins/schema.py:424 -#: ipaserver/plugins/schema.py:661 ipaserver/plugins/schema.py:754 -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:661 -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#: ipaserver/plugins/baseldap.py:954 ipaserver/plugins/baseldap.py:962 -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:967 -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1025 -msgid "attribute is not configurable" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1128 -msgid "No such attribute on this entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1484 -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1582 ipaserver/plugins/baseldap.py:2490 -msgid "the entry was deleted while being modified" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1715 ipaserver/plugins/baseldap.py:2217 -#, python-format -msgid "%s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1716 -#: ipaserver/plugins/servicedelegation.py:213 -#: ipaserver/plugins/servicedelegation.py:303 -#, python-format -msgid "member %s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1758 ipaserver/plugins/baseldap.py:2241 -#, python-format -msgid "%s to add" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1857 ipaserver/plugins/baseldap.py:2340 -#, python-format -msgid "%s to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1957 ipaserver/plugins/schema.py:122 -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1965 -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1966 -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:2521 -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2535 -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2544 -msgid "one or more values to remove" -msgstr "" - -#: ipaserver/plugins/baseuser.py:57 +#: ipaserver/plugins/whoami.py:15 msgid "" "\n" -"Baseuser\n" +"Return information about currently authenticated identity\n" "\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#: ipaserver/plugins/baseuser.py:88 -msgid "must be TRUE or FALSE" -msgstr "" - -#: ipaserver/plugins/baseuser.py:145 -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#: ipaserver/plugins/baseuser.py:259 ipaserver/plugins/host.py:562 -#: ipaserver/plugins/service.py:511 -msgid "Principal alias" -msgstr "" - -#: ipaserver/plugins/baseuser.py:271 -msgid "User password expiration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:355 ipaserver/plugins/host.py:581 -msgid "SSH public key fingerprint" -msgstr "" - -#: ipaserver/plugins/baseuser.py:401 ipaserver/plugins/baseuser.py:846 -#: ipaserver/plugins/certmap.py:606 ipaserver/plugins/idviews.py:1056 -msgid "Base-64 encoded user certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:406 ipaserver/plugins/baseuser.py:407 -#: ipaserver/plugins/internal.py:721 -msgid "Certificate mapping data" -msgstr "" - -#: ipaserver/plugins/baseuser.py:412 -msgid "SMB logon script path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:417 -msgid "SMB profile path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:422 -msgid "SMB Home Directory" -msgstr "" - -#: ipaserver/plugins/baseuser.py:427 -msgid "SMB Home Directory Drive" -msgstr "" - -#: ipaserver/plugins/baseuser.py:451 ipaserver/plugins/baseuser.py:455 -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#: ipaserver/plugins/baseuser.py:482 -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#: ipaserver/plugins/baseuser.py:574 ipaserver/plugins/host.py:692 -#: ipaserver/plugins/stageuser.py:329 ipaserver/plugins/stageuser.py:533 -#: ipaserver/plugins/user.py:562 -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#: ipaserver/plugins/baseuser.py:831 ipaserver/plugins/cert.py:425 -#: ipaserver/plugins/host.py:529 ipaserver/plugins/internal.py:726 -#: ipaserver/plugins/service.py:536 -msgid "Issuer" -msgstr "" - -#: ipaserver/plugins/baseuser.py:832 -msgid "Issuer of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:838 ipaserver/plugins/cert.py:365 -#: ipaserver/plugins/cert.py:1502 ipaserver/plugins/host.py:517 -#: ipaserver/plugins/internal.py:653 ipaserver/plugins/internal.py:729 -#: ipaserver/plugins/service.py:524 -msgid "Subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:839 -msgid "Subject of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:884 -msgid "cannot have an empty subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:924 -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:928 -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#: ipaserver/plugins/baseuser.py:952 ipaserver/plugins/user.py:1310 -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#: ipaserver/plugins/baseuser.py:953 -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/baseuser.py:971 ipaserver/plugins/user.py:1315 -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#: ipaserver/plugins/baseuser.py:972 -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/batch.py:35 -msgid "" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" "\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -#: ipaserver/plugins/batch.py:71 -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -#: ipaserver/plugins/batch.py:122 -msgid "must contain a tuple (list, dict)" -msgstr "" - -#: ipaserver/plugins/ca.py:20 -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -#: ipaserver/plugins/ca.py:22 -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:25 -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:28 -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:32 -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:37 -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -#: ipaserver/plugins/ca.py:43 -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:47 -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:51 -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:68 ipaserver/plugins/ca.py:78 -msgid "Certificate Authority" -msgstr "" - -#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:77 -msgid "Certificate Authorities" -msgstr "" - -#: ipaserver/plugins/ca.py:84 ipaserver/plugins/schema.py:48 -#: ipaserver/plugins/trust.py:1418 -msgid "Name" -msgstr "" - -#: ipaserver/plugins/ca.py:85 -msgid "Name for referencing the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:90 -msgid "Description of the purpose of the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:94 -msgid "Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:95 -msgid "Dogtag Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:100 ipaserver/plugins/ca.py:286 -msgid "Subject DN" -msgstr "" - -#: ipaserver/plugins/ca.py:101 -msgid "Subject Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:106 ipaserver/plugins/cert.py:426 -msgid "Issuer DN" -msgstr "" - -#: ipaserver/plugins/ca.py:107 -msgid "Issuer Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:113 ipaserver/plugins/cert.py:354 -msgid "Base-64 encoded certificate." -msgstr "" - -#: ipaserver/plugins/ca.py:118 ipaserver/plugins/cert.py:359 -msgid "Certificate chain" -msgstr "" - -#: ipaserver/plugins/ca.py:119 ipaserver/plugins/cert.py:360 -msgid "X.509 certificate chain" -msgstr "" - -#: ipaserver/plugins/ca.py:218 -msgid "Search for CAs." -msgstr "" - -#: ipaserver/plugins/ca.py:220 -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/ca.py:237 ipaserver/plugins/cert.py:599 -msgid "Include certificate chain in output" -msgstr "" - -#: ipaserver/plugins/ca.py:243 -msgid "Display the properties of a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:260 -msgid "Create a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:261 -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:271 -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#: ipaserver/plugins/ca.py:287 -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/ca.py:302 -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -#: ipaserver/plugins/ca.py:326 -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#: ipaserver/plugins/ca.py:328 -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:337 -msgid "Insufficient privilege to delete a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:341 ipaserver/plugins/ca.py:350 -#: ipaserver/plugins/ca.py:369 ipaserver/plugins/ca.py:409 -#: ipaserver/plugins/internal.py:636 -msgid "CA" -msgstr "" - -#: ipaserver/plugins/ca.py:343 -msgid "IPA CA cannot be deleted" -msgstr "" - -#: ipaserver/plugins/ca.py:352 -msgid "Must be disabled first" -msgstr "" - -#: ipaserver/plugins/ca.py:360 -msgid "Modify CA configuration." -msgstr "" - -#: ipaserver/plugins/ca.py:361 -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:387 -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:403 -msgid "Disable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:404 -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:411 -msgid "IPA CA cannot be disabled" -msgstr "" - -#: ipaserver/plugins/ca.py:421 -msgid "Enable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:422 -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:21 -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" "\n" "EXAMPLES:\n" "\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#: ipaserver/plugins/caacl.py:87 ipaserver/plugins/caacl.py:165 -#: ipaserver/plugins/caacl.py:263 -msgid "CA ACL" -msgstr "" - -#: ipaserver/plugins/caacl.py:88 ipaserver/plugins/caacl.py:164 -msgid "CA ACLs" -msgstr "" - -#: ipaserver/plugins/caacl.py:183 -msgid "CA category" -msgstr "" - -#: ipaserver/plugins/caacl.py:184 -msgid "CA category the ACL applies to" -msgstr "" - -#: ipaserver/plugins/caacl.py:212 -msgid "CAs" -msgstr "" - -#: ipaserver/plugins/caacl.py:246 -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:258 -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:265 -msgid "default CA ACL can be only disabled" -msgstr "" - -#: ipaserver/plugins/caacl.py:273 -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:285 -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -#: ipaserver/plugins/caacl.py:290 -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -#: ipaserver/plugins/caacl.py:294 ipaserver/plugins/hbacrule.py:345 -#: ipaserver/plugins/netgroup.py:321 -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -#: ipaserver/plugins/caacl.py:298 ipaserver/plugins/hbacrule.py:350 -#: ipaserver/plugins/netgroup.py:326 -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#: ipaserver/plugins/caacl.py:302 ipaserver/plugins/hbacrule.py:356 -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#: ipaserver/plugins/caacl.py:312 -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/caacl.py:325 -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:354 -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:385 -#, python-format -msgid "%i user or group added." -msgstr "" - -#: ipaserver/plugins/caacl.py:386 -#, python-format -msgid "%i users or groups added." -msgstr "" - -#: ipaserver/plugins/caacl.py:397 ipaserver/plugins/hbacrule.py:518 -#: ipaserver/plugins/selinuxusermap.py:572 ipaserver/plugins/sudorule.py:598 -msgid "users cannot be added when user category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:407 -#, python-format -msgid "%i user or group removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:408 -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:417 -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#: ipaserver/plugins/caacl.py:418 -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#: ipaserver/plugins/caacl.py:429 ipaserver/plugins/hbacrule.py:549 -#: ipaserver/plugins/selinuxusermap.py:605 ipaserver/plugins/sudorule.py:701 -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:439 -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:440 -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:448 -#, python-format -msgid "%i service added." -msgstr "" - -#: ipaserver/plugins/caacl.py:448 -#, python-format -msgid "%i services added." -msgstr "" - -#: ipaserver/plugins/caacl.py:459 ipaserver/plugins/hbacrule.py:606 -msgid "services cannot be added when service category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:468 -#, python-format -msgid "%i service removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:468 -#, python-format -msgid "%i services removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:488 -#, python-format -msgid "%i profile added." -msgstr "" - -#: ipaserver/plugins/caacl.py:488 -#, python-format -msgid "%i profiles added." -msgstr "" - -#: ipaserver/plugins/caacl.py:499 -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:510 -#, python-format -msgid "%i profile removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:510 -#, python-format -msgid "%i profiles removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:515 -msgid "Add CAs to a CA ACL." -msgstr "" - -#: ipaserver/plugins/caacl.py:520 -#, python-format -msgid "%i CA added." -msgstr "" - -#: ipaserver/plugins/caacl.py:520 -#, python-format -msgid "%i CAs added." -msgstr "" - -#: ipaserver/plugins/caacl.py:531 -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:537 -msgid "Remove CAs from a CA ACL." -msgstr "" - -#: ipaserver/plugins/caacl.py:542 -#, python-format -msgid "%i CA removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:542 -#, python-format -msgid "%i CAs removed." -msgstr "" - -#: ipaserver/plugins/cert.py:64 ipaserver/plugins/hbactest.py:39 -msgid "pyhbac is not installed." -msgstr "" - -#: ipaserver/plugins/cert.py:69 -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -#: ipaserver/plugins/cert.py:71 -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:73 -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:76 -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:79 -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:82 -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:84 -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -#: ipaserver/plugins/cert.py:87 -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:89 -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:92 -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:95 -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:97 -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:101 -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#: ipaserver/plugins/cert.py:104 -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:107 -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:110 -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:113 -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -#: ipaserver/plugins/cert.py:116 -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#: ipaserver/plugins/cert.py:119 -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -#: ipaserver/plugins/cert.py:122 -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -#: ipaserver/plugins/cert.py:125 -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:128 -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -#: ipaserver/plugins/cert.py:131 -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:134 -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:138 -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:141 -msgid " * 0 - unspecified\n" -msgstr "" - -#: ipaserver/plugins/cert.py:142 -msgid " * 1 - keyCompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:143 -msgid " * 2 - cACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:144 -msgid " * 3 - affiliationChanged\n" -msgstr "" - -#: ipaserver/plugins/cert.py:145 -msgid " * 4 - superseded\n" -msgstr "" - -#: ipaserver/plugins/cert.py:146 -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#: ipaserver/plugins/cert.py:147 -msgid " * 6 - certificateHold\n" -msgstr "" - -#: ipaserver/plugins/cert.py:148 -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#: ipaserver/plugins/cert.py:149 -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -#: ipaserver/plugins/cert.py:150 -msgid " * 10 - aACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:151 -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:153 -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:283 ipaserver/plugins/certprofile.py:86 -msgid "CA is not configured" -msgstr "" - -#: ipaserver/plugins/cert.py:289 -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -#: ipaserver/plugins/cert.py:309 -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#: ipaserver/plugins/cert.py:313 -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -#: ipaserver/plugins/cert.py:347 -msgid "Issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:348 -msgid "Name of issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:370 -msgid "Subject email address" -msgstr "" - -#: ipaserver/plugins/cert.py:375 -msgid "Subject DNS name" -msgstr "" - -#: ipaserver/plugins/cert.py:380 -msgid "Subject X.400 address" -msgstr "" - -#: ipaserver/plugins/cert.py:385 -msgid "Subject directory name" -msgstr "" - -#: ipaserver/plugins/cert.py:390 -msgid "Subject EDI Party name" -msgstr "" - -#: ipaserver/plugins/cert.py:395 -msgid "Subject URI" -msgstr "" - -#: ipaserver/plugins/cert.py:400 -msgid "Subject IP Address" -msgstr "" - -#: ipaserver/plugins/cert.py:405 -msgid "Subject OID" -msgstr "" - -#: ipaserver/plugins/cert.py:410 -msgid "Subject UPN" -msgstr "" - -#: ipaserver/plugins/cert.py:415 -msgid "Subject Kerberos principal name" -msgstr "" - -#: ipaserver/plugins/cert.py:420 -msgid "Subject Other Name" -msgstr "" - -#: ipaserver/plugins/cert.py:431 ipaserver/plugins/host.py:533 -#: ipaserver/plugins/service.py:540 -msgid "Not Before" -msgstr "" - -#: ipaserver/plugins/cert.py:436 ipaserver/plugins/host.py:537 -#: ipaserver/plugins/service.py:544 -msgid "Not After" -msgstr "" - -#: ipaserver/plugins/cert.py:441 ipaserver/plugins/host.py:541 -#: ipaserver/plugins/service.py:548 -msgid "Fingerprint (SHA1)" -msgstr "" - -#: ipaserver/plugins/cert.py:446 ipaserver/plugins/host.py:545 -#: ipaserver/plugins/service.py:552 -msgid "Fingerprint (SHA256)" -msgstr "" - -#: ipaserver/plugins/cert.py:458 -msgid "Serial number (hex)" -msgstr "" - -#: ipaserver/plugins/cert.py:584 -msgid "Request status" -msgstr "" - -#: ipaserver/plugins/cert.py:630 -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#: ipaserver/plugins/cert.py:679 -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -#: ipaserver/plugins/cert.py:731 -msgid "No Common Name was found in subject of request." -msgstr "" - -#: ipaserver/plugins/cert.py:739 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#: ipaserver/plugins/cert.py:745 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -#: ipaserver/plugins/cert.py:754 -msgid "DN commonName does not match user's login" -msgstr "" - -#: ipaserver/plugins/cert.py:768 -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#: ipaserver/plugins/cert.py:777 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/cert.py:798 ipaserver/plugins/cert.py:916 -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#: ipaserver/plugins/cert.py:843 -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#: ipaserver/plugins/cert.py:874 -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#: ipaserver/plugins/cert.py:892 -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -#: ipaserver/plugins/cert.py:901 -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#: ipaserver/plugins/cert.py:908 -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#: ipaserver/plugins/cert.py:925 -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#: ipaserver/plugins/cert.py:943 -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#: ipaserver/plugins/cert.py:1030 -msgid "'add' option" -msgstr "" - -#: ipaserver/plugins/cert.py:1034 -msgid "The principal for this request doesn't exist." -msgstr "" - -#: ipaserver/plugins/cert.py:1150 -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#: ipaserver/plugins/cert.py:1167 -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#: ipaserver/plugins/cert.py:1179 -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -#: ipaserver/plugins/cert.py:1273 ipaserver/plugins/internal.py:700 -#: ipaserver/plugins/internal.py:1030 ipaserver/plugins/internal.py:1333 -#: ipaserver/plugins/internal.py:1936 -msgid "Status" -msgstr "" - -#: ipaserver/plugins/cert.py:1278 -msgid "Revoked" -msgstr "" - -#: ipaserver/plugins/cert.py:1283 ipaserver/plugins/host.py:549 -#: ipaserver/plugins/internal.py:650 ipaserver/plugins/internal.py:691 -#: ipaserver/plugins/service.py:556 -msgid "Revocation reason" -msgstr "" - -#: ipaserver/plugins/cert.py:1284 -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#: ipaserver/plugins/cert.py:1306 -#, python-format -msgid "Owner %s" -msgstr "" - -#: ipaserver/plugins/cert.py:1393 -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#: ipaserver/plugins/cert.py:1462 -msgid "7 is not a valid revocation reason" -msgstr "" - -#: ipaserver/plugins/cert.py:1564 -msgid "Status of the certificate" -msgstr "" - -#: ipaserver/plugins/cert.py:1570 -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#: ipaserver/plugins/cert.py:1586 -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/cert.py:1608 -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#: ipaserver/plugins/cert.py:1619 -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -#: ipaserver/plugins/certmap.py:50 -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:52 -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:54 -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:62 -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:65 -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:68 -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:71 -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:74 -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:77 -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:80 -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:83 -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:86 -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:141 ipaserver/plugins/certmap.py:148 -#: ipaserver/plugins/certmap.py:175 ipaserver/plugins/trust.py:848 -msgid "domain" -msgstr "" - -#: ipaserver/plugins/certmap.py:142 -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -#: ipaserver/plugins/certmap.py:149 -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:176 -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#: ipaserver/plugins/certmap.py:186 -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -#: ipaserver/plugins/certmap.py:191 ipaserver/plugins/certmap.py:192 -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -#: ipaserver/plugins/certmap.py:198 -msgid "Prompt for the username" -msgstr "" - -#: ipaserver/plugins/certmap.py:199 -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#: ipaserver/plugins/certmap.py:229 -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -#: ipaserver/plugins/certmap.py:234 -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -#: ipaserver/plugins/certmap.py:243 ipaserver/plugins/certmap.py:247 -msgid "Certificate Identity Mapping Rules" -msgstr "" - -#: ipaserver/plugins/certmap.py:244 ipaserver/plugins/certmap.py:246 -msgid "Certificate Identity Mapping Rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:274 -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -#: ipaserver/plugins/certmap.py:280 -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -#: ipaserver/plugins/certmap.py:285 -msgid "Mapping rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:286 -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -#: ipaserver/plugins/certmap.py:291 -msgid "Matching rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:292 -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -#: ipaserver/plugins/certmap.py:299 -msgid "Domain where the user entry will be searched" -msgstr "" - -#: ipaserver/plugins/certmap.py:305 -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -#: ipaserver/plugins/certmap.py:356 -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:358 -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:369 -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:371 -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:392 -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#: ipaserver/plugins/certmap.py:395 -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certmap.py:402 -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:408 -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:410 -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:415 -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:417 -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:444 -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:446 -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:500 -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/certmap.py:554 -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/certmap.py:571 -msgid "User logins" -msgstr "" - -#: ipaserver/plugins/certmap.py:579 -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#: ipaserver/plugins/certmap.py:587 -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certprofile.py:21 -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:95 -msgid "invalid Profile ID" -msgstr "" - -#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 -msgid "Certificate Profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 -msgid "Certificate Profiles" -msgstr "" - -#: ipaserver/plugins/certprofile.py:126 -msgid "Profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:190 -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certprofile.py:222 -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:247 -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#: ipaserver/plugins/certprofile.py:255 -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#: ipaserver/plugins/certprofile.py:282 -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:289 -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/certprofile.py:305 -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:322 -msgid "Certificate profiles cannot be renamed" -msgstr "" - -#: ipaserver/plugins/certprofile.py:327 -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#: ipaserver/plugins/config.py:50 -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#: ipaserver/plugins/config.py:116 -msgid "must be at least 10" -msgstr "" - -#: ipaserver/plugins/config.py:124 -msgid "configuration options" -msgstr "" - -#: ipaserver/plugins/config.py:160 ipaserver/plugins/config.py:161 -msgid "Configuration" -msgstr "" - -#: ipaserver/plugins/config.py:172 -msgid "Maximum hostname length" -msgstr "" - -#: ipaserver/plugins/config.py:276 ipaserver/plugins/config.py:277 -msgid "Enable adding subids to new users" -msgstr "" - -#: ipaserver/plugins/config.py:281 -msgid "IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:282 -msgid "List of all IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:287 -msgid "Hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:288 -msgid "List of all hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:293 -msgid "IPA master capable of PKINIT" -msgstr "" - -#: ipaserver/plugins/config.py:294 -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#: ipaserver/plugins/config.py:299 -msgid "IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:300 -msgid "IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:305 -msgid "Hidden IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:306 -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:311 -msgid "IPA CA renewal master" -msgstr "" - -#: ipaserver/plugins/config.py:312 -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:317 ipaserver/plugins/vault.py:978 -msgid "IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/config.py:318 -msgid "IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:323 -msgid "Hidden IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/config.py:324 -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:330 ipaserver/plugins/idviews.py:159 -msgid "Domain resolution order" -msgstr "" - -#: ipaserver/plugins/config.py:331 ipaserver/plugins/idviews.py:160 -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#: ipaserver/plugins/config.py:336 ipaserver/plugins/dns.py:4147 -msgid "IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:337 -msgid "IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:342 -msgid "Hidden IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:343 -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:348 ipaserver/plugins/dns.py:4153 -msgid "IPA DNSSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:349 -msgid "DNSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:354 -msgid "Setup SID configuration" -msgstr "" - -#: ipaserver/plugins/config.py:355 -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#: ipaserver/plugins/config.py:360 -msgid "Add SIDs" -msgstr "" - -#: ipaserver/plugins/config.py:361 -msgid "Add SIDs for existing users and groups" -msgstr "" - -#: ipaserver/plugins/config.py:366 ipaserver/plugins/config.py:367 -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#: ipaserver/plugins/config.py:444 -msgid "Empty domain is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:452 -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#: ipaserver/plugins/config.py:457 -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#: ipaserver/plugins/config.py:464 -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:514 -msgid "not allowed to enable SID generation" -msgstr "" - -#: ipaserver/plugins/config.py:522 -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#: ipaserver/plugins/config.py:550 -msgid "Failed to call DBus" -msgstr "" - -#: ipaserver/plugins/config.py:560 -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#: ipaserver/plugins/config.py:570 -msgid "The group doesn't exist" -msgstr "" - -#: ipaserver/plugins/config.py:588 -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:608 -msgid "May not be empty" -msgstr "" - -#: ipaserver/plugins/config.py:627 -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -#: ipaserver/plugins/config.py:659 -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#: ipaserver/plugins/config.py:663 -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -#: ipaserver/plugins/config.py:675 -msgid "SELinux user map default user not in order list" -msgstr "" - -#: ipaserver/plugins/config.py:694 -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -#: ipaserver/plugins/delegation.py:67 -msgid "delegation" -msgstr "" - -#: ipaserver/plugins/delegation.py:68 -msgid "delegations" -msgstr "" - -#: ipaserver/plugins/delegation.py:69 -msgid "Delegations" -msgstr "" - -#: ipaserver/plugins/delegation.py:70 -msgid "Delegation" -msgstr "" - -#: ipaserver/plugins/delegation.py:132 -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:153 -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:170 -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:189 -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/dns.py:100 -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -#: ipaserver/plugins/dns.py:102 -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:104 -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:110 -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -#: ipaserver/plugins/dns.py:112 -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:118 -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:126 -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -#: ipaserver/plugins/dns.py:135 -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -#: ipaserver/plugins/dns.py:138 -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:141 -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:144 -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -#: ipaserver/plugins/dns.py:147 -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:151 -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -#: ipaserver/plugins/dns.py:154 -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -#: ipaserver/plugins/dns.py:157 -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:160 -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:163 -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -#: ipaserver/plugins/dns.py:166 -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:179 -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:182 -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:185 -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -#: ipaserver/plugins/dns.py:190 -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:193 -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:200 -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:217 -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:220 -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -#: ipaserver/plugins/dns.py:233 -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:236 -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -#: ipaserver/plugins/dns.py:239 -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:242 -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -#: ipaserver/plugins/dns.py:245 -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:248 -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:252 -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:255 -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:259 -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:270 -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:277 -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -#: ipaserver/plugins/dns.py:280 -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:284 -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -#: ipaserver/plugins/dns.py:290 -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -#: ipaserver/plugins/dns.py:293 -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:296 -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -#: ipaserver/plugins/dns.py:299 -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:302 -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:307 -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -#: ipaserver/plugins/dns.py:310 -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -#: ipaserver/plugins/dns.py:315 -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -#: ipaserver/plugins/dns.py:318 -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -#: ipaserver/plugins/dns.py:406 -msgid "invalid IP network format" -msgstr "" - -#: ipaserver/plugins/dns.py:415 -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -#: ipaserver/plugins/dns.py:431 -msgid "invalid address format" -msgstr "" - -#: ipaserver/plugins/dns.py:475 -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -#: ipaserver/plugins/dns.py:484 -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -#: ipaserver/plugins/dns.py:487 -msgid "flags value: allowed interval 0-255" -msgstr "" - -#: ipaserver/plugins/dns.py:490 -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#: ipaserver/plugins/dns.py:498 -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#: ipaserver/plugins/dns.py:505 -msgid "invalid domain-name: not fully qualified" -msgstr "" - -#: ipaserver/plugins/dns.py:514 -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#: ipaserver/plugins/dns.py:555 -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#: ipaserver/plugins/dns.py:561 -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#: ipaserver/plugins/dns.py:571 -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#: ipaserver/plugins/dns.py:588 -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#: ipaserver/plugins/dns.py:603 -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#: ipaserver/plugins/dns.py:613 -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#: ipaserver/plugins/dns.py:688 -#, python-format -msgid "%s record" -msgstr "" - -#: ipaserver/plugins/dns.py:690 -#, python-format -msgid "Raw %s records" -msgstr "" - -#: ipaserver/plugins/dns.py:691 -#, python-format -msgid "%s Record" -msgstr "" - -#: ipaserver/plugins/dns.py:692 -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#: ipaserver/plugins/dns.py:754 -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -#: ipaserver/plugins/dns.py:761 -msgid "Invalid number of parts!" -msgstr "" - -#: ipaserver/plugins/dns.py:813 -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#: ipaserver/plugins/dns.py:829 -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -#: ipaserver/plugins/dns.py:904 -msgid "Create reverse" -msgstr "" - -#: ipaserver/plugins/dns.py:940 -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -#: ipaserver/plugins/dns.py:1115 ipaserver/plugins/dns.py:1272 -msgid "Exchanger" -msgstr "" - -#: ipaserver/plugins/dns.py:1190 -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#: ipaserver/plugins/dns.py:1244 -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -#: ipaserver/plugins/dns.py:1299 -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#: ipaserver/plugins/dns.py:1360 ipaserver/plugins/dns.py:1490 -msgid "Priority (order)" -msgstr "" - -#: ipaserver/plugins/dns.py:1361 -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -#: ipaserver/plugins/dns.py:1369 ipaserver/plugins/dns.py:1499 -msgid "Relative weight for entries with the same priority." -msgstr "" - -#: ipaserver/plugins/dns.py:1389 -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -#: ipaserver/plugins/dns.py:1491 -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -#: ipaserver/plugins/dns.py:1504 -msgid "Target Uniform Resource Identifier" -msgstr "" - -#: ipaserver/plugins/dns.py:1505 -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#: ipaserver/plugins/dns.py:1587 -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#: ipaserver/plugins/dns.py:2056 -msgid "Managedby permission" -msgstr "" - -#: ipaserver/plugins/dns.py:2063 ipaserver/plugins/dns.py:2237 -#: ipaserver/plugins/dns.py:3210 ipaserver/plugins/dns.py:4191 -#: ipaserver/plugins/dnsserver.py:148 -msgid "DNS is not configured" -msgstr "" - -#: ipaserver/plugins/dns.py:2157 -msgid "cannot be used when a zone is specified" -msgstr "" - -#: ipaserver/plugins/dns.py:2169 -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#: ipaserver/plugins/dns.py:2312 -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2342 -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#: ipaserver/plugins/dns.py:2370 -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2406 -msgid "DNS zone" -msgstr "" - -#: ipaserver/plugins/dns.py:2407 -msgid "DNS zones" -msgstr "" - -#: ipaserver/plugins/dns.py:2415 -msgid "DNS Zones" -msgstr "" - -#: ipaserver/plugins/dns.py:2416 -msgid "DNS Zone" -msgstr "" - -#: ipaserver/plugins/dns.py:2490 -msgid "Default time to live" -msgstr "" - -#: ipaserver/plugins/dns.py:2491 -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -#: ipaserver/plugins/dns.py:2706 -msgid "setting Authoritative nameserver" -msgstr "" - -#: ipaserver/plugins/dns.py:2707 -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -#: ipaserver/plugins/dns.py:2709 -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -#: ipaserver/plugins/dns.py:2744 -msgid "" -msgstr "" - -#: ipaserver/plugins/dns.py:2808 -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#: ipaserver/plugins/dns.py:2863 -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2926 -msgid "is required" -msgstr "" - -#: ipaserver/plugins/dns.py:3008 -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3019 -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3044 -msgid "DNS resource record" -msgstr "" - -#: ipaserver/plugins/dns.py:3045 -msgid "DNS resource records" -msgstr "" - -#: ipaserver/plugins/dns.py:3052 -msgid "DNS Resource Records" -msgstr "" - -#: ipaserver/plugins/dns.py:3053 -msgid "DNS Resource Record" -msgstr "" - -#: ipaserver/plugins/dns.py:3088 -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3105 -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#: ipaserver/plugins/dns.py:3116 -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3161 -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -#: ipaserver/plugins/dns.py:3203 -msgid "only master zones can contain records" -msgstr "" - -#: ipaserver/plugins/dns.py:3301 -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +#: ipaserver/plugins/whoami.py:77 +msgid "Describe currently authenticated identity." +msgstr "" + +#: ipaserver/plugins/whoami.py:82 ipaserver/plugins/whoami.py:88 +msgid "Object class name" +msgstr "" + +#: ipaserver/plugins/whoami.py:83 ipaserver/plugins/whoami.py:89 +msgid "Function to get details" +msgstr "" + +#: ipaserver/plugins/whoami.py:84 ipaserver/plugins/whoami.py:91 +msgid "Arguments to details function" +msgstr "" + +#: ipaserver/plugins/whoami.py:111 +msgid "Cannot query Directory Manager with API" msgstr "" -#: ipaserver/plugins/dns.py:3307 -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -#: ipaserver/plugins/dns.py:3315 -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3331 -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -#: ipaserver/plugins/dns.py:3347 -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3628 -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -#: ipaserver/plugins/dns.py:3754 -msgid "DNS zone root record cannot be renamed" -msgstr "" - -#: ipaserver/plugins/dns.py:3772 -msgid "DNS records can be only updated one at a time" -msgstr "" - -#: ipaserver/plugins/dns.py:3865 -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3958 -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/dns.py:4060 -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#: ipaserver/plugins/dns.py:4075 -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -#: ipaserver/plugins/dns.py:4106 -msgid "DNS configuration options" -msgstr "" - -#: ipaserver/plugins/dns.py:4111 ipaserver/plugins/dns.py:4112 -msgid "DNS Global Configuration" -msgstr "" - -#: ipaserver/plugins/dns.py:4143 -msgid "IPA DNS version" -msgstr "" - -#: ipaserver/plugins/dns.py:4148 -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -#: ipaserver/plugins/dns.py:4154 -msgid "IPA server configured as DNSSec key master" -msgstr "" - -#: ipaserver/plugins/dns.py:4205 -msgid "Global DNS configuration is empty" -msgstr "" - -#: ipaserver/plugins/dns.py:4286 -msgid "DNS forward zone" -msgstr "" - -#: ipaserver/plugins/dns.py:4287 -msgid "DNS forward zones" -msgstr "" - -#: ipaserver/plugins/dns.py:4289 -msgid "DNS Forward Zones" -msgstr "" - -#: ipaserver/plugins/dns.py:4290 -msgid "DNS Forward Zone" -msgstr "" - -#: ipaserver/plugins/dns.py:4397 ipaserver/plugins/dns.py:4447 -msgid "Please specify forwarders." -msgstr "" - -#: ipaserver/plugins/dns.py:4416 -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4473 -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4479 -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4502 -msgid "IPA DNS records" -msgstr "" - -#: ipaserver/plugins/dns.py:4506 -msgid "IPA location records" -msgstr "" - -#: ipaserver/plugins/dns.py:4513 -msgid "Update location and IPA server DNS records" -msgstr "" - -#: ipaserver/plugins/dns.py:4524 -msgid "Result of the command" -msgstr "" - -#: ipaserver/plugins/dns.py:4531 -msgid "Dry run" -msgstr "" - -#: ipaserver/plugins/dns.py:4532 -msgid "Do not update records only return expected records" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:35 -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:37 -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:41 -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:44 -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:62 -msgid "DNS server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:63 -msgid "DNS servers" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:71 -msgid "DNS Servers" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:72 -msgid "DNS Server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:113 -msgid "DNS Server name" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:119 -msgid "SOA mname override" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:120 -msgid "SOA mname (authoritative server) override" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:126 -msgid "Forwarders" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:128 -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:138 -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:154 -msgid "Modify DNS server configuration" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:157 -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:162 -msgid "Search for DNS servers." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:166 -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/dnsserver.py:176 -msgid "IPA DNS Server is not installed" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:183 -msgid "Display configuration of a DNS server." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:193 -msgid "Add a new DNS server." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:196 -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:205 -msgid "Delete a DNS server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:208 -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1251 -msgid "REST API is not logged in." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1273 -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1299 -msgid "Unable to communicate with CMS" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1490 ipaserver/plugins/dogtag.py:1576 -#: ipaserver/plugins/dogtag.py:2083 ipaserver/plugins/dogtag.py:2093 -msgid "Response from CA was not valid JSON" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:69 -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:112 -msgid "Server does not support domain level functionality" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:147 -msgid "Domain Level cannot be lowered." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:155 -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -#: ipaserver/plugins/group.py:62 -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#: ipaserver/plugins/group.py:195 -msgid "groups" -msgstr "" - -#: ipaserver/plugins/group.py:328 -msgid "User Group" -msgstr "" - -#: ipaserver/plugins/group.py:360 -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:383 -msgid "gid cannot be set for external group" -msgstr "" - -#: ipaserver/plugins/group.py:395 -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#: ipaserver/plugins/group.py:404 -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:418 -msgid "privileged group" -msgstr "" - -#: ipaserver/plugins/group.py:451 -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:526 -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/group.py:629 ipaserver/plugins/group.py:686 -#: ipaserver/plugins/hbactest.py:402 -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/group.py:634 ipaserver/plugins/group.py:691 -#: ipaserver/plugins/trust.py:873 -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/group.py:725 -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:750 -msgid "not allowed to modify user entries" -msgstr "" - -#: ipaserver/plugins/group.py:761 -msgid "not allowed to modify group entries" -msgstr "" - -#: ipaserver/plugins/group.py:781 -msgid "Not a managed group" -msgstr "" - -#: ipaserver/plugins/group.py:803 -msgid "Add users that can manage members of this group." -msgstr "" - -#: ipaserver/plugins/group.py:811 -msgid "Remove users that can manage members of this group." -msgstr "" - -#: ipaserver/plugins/hbac.py:7 -msgid "Host-based access control commands" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:108 -msgid "The deny type has been deprecated." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:131 -msgid "HBAC rules" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:201 -msgid "HBAC Rules" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:286 ipaserver/plugins/hbacsvc.py:95 -msgid "HBAC Services" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:290 ipaserver/plugins/hbacsvcgroup.py:108 -msgid "HBAC Service Groups" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:302 -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:316 -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:333 -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:368 -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hbacrule.py:383 -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:413 -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:447 ipaserver/plugins/hbacrule.py:478 -msgid "Access time" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:565 -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:28 -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:62 -msgid "HBAC services" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:96 -msgid "HBAC Service" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:119 -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:127 -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:135 -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:144 -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hbacsvcgroup.py:64 -msgid "HBAC service group" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:65 -msgid "HBAC service groups" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:109 -msgid "HBAC Service Group" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:131 -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:139 -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:147 -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:156 -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/hbactest.py:45 msgid "" "\n" @@ -18017,6 +16557,13 @@ msgstr "" msgid "Unresolved rules in --rules" msgstr "" +#: ipaserver/plugins/hbactest.py:402 ipaserver/plugins/group.py:629 +#: ipaserver/plugins/group.py:686 +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + #: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 msgid "" "Cannot search in trusted domains without own domain configured. Make sure " @@ -18028,216 +16575,6 @@ msgstr "" msgid "Access granted: %s" msgstr "" -#: ipaserver/plugins/host.py:74 -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -#: ipaserver/plugins/host.py:82 -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -#: ipaserver/plugins/host.py:94 -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -#: ipaserver/plugins/host.py:106 -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/host.py:109 -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:112 -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:115 -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:118 -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:121 -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:124 -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:127 -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -#: ipaserver/plugins/host.py:130 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/host.py:462 ipaserver/plugins/internal.py:1161 -#: ipaserver/plugins/internal.py:1283 -msgid "Host" -msgstr "" - -#: ipaserver/plugins/host.py:514 -msgid "Base-64 encoded host certificate" -msgstr "" - -#: ipaserver/plugins/host.py:521 ipaserver/plugins/internal.py:696 -#: ipaserver/plugins/service.py:528 -msgid "Serial Number" -msgstr "" - -#: ipaserver/plugins/host.py:525 ipaserver/plugins/internal.py:697 -#: ipaserver/plugins/service.py:532 -msgid "Serial Number (hex)" -msgstr "" - -#: ipaserver/plugins/host.py:597 ipaserver/plugins/service.py:570 -msgid "Authentication Indicators" -msgstr "" - -#: ipaserver/plugins/host.py:598 ipaserver/plugins/service.py:571 -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#: ipaserver/plugins/host.py:668 -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:792 -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:797 -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -#: ipaserver/plugins/host.py:869 -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#: ipaserver/plugins/host.py:885 -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:906 -msgid "Password cannot be set on enrolled host." -msgstr "" - -#: ipaserver/plugins/host.py:910 -msgid "cn is immutable" -msgstr "" - -#: ipaserver/plugins/host.py:1035 -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/host.py:1190 -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1359 -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1366 -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1382 -msgid "Add new principal alias to host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1383 -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1394 -msgid "Remove principal alias from a host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1395 -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - #: ipaserver/plugins/hostgroup.py:35 msgid "" "\n" @@ -18330,589 +16667,6 @@ msgstr "" msgid "Remove users that can manage members of this hostgroup." msgstr "" -#: ipaserver/plugins/idrange.py:43 -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:57 -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:202 -msgid "ID Ranges" -msgstr "" - -#: ipaserver/plugins/idrange.py:203 -msgid "ID Range" -msgstr "" - -#: ipaserver/plugins/idrange.py:207 -msgid "local domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:210 ipaserver/plugins/trust.py:674 -msgid "Active Directory domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:211 ipaserver/plugins/trust.py:675 -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -#: ipaserver/plugins/idrange.py:255 -msgid "ID range type, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:260 ipaserver/plugins/internal.py:1239 -msgid "Auto private groups" -msgstr "" - -#: ipaserver/plugins/idrange.py:262 -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:336 -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#: ipaserver/plugins/idrange.py:341 -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/idrange.py:348 -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/idrange.py:360 -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:397 -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:423 -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:435 ipaserver/plugins/idrange.py:698 -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:446 -msgid "Specified trusted domain name could not be found." -msgstr "" - -#: ipaserver/plugins/idrange.py:461 -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:468 ipaserver/plugins/idrange.py:733 -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -#: ipaserver/plugins/idrange.py:475 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:481 -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:500 -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -#: ipaserver/plugins/idrange.py:510 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:517 ipaserver/plugins/idrange.py:752 -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:527 ipaserver/plugins/idrange.py:775 -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -#: ipaserver/plugins/idrange.py:539 -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#: ipaserver/plugins/idrange.py:558 -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:607 -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idrange.py:643 -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:647 -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:682 -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -#: ipaserver/plugins/idrange.py:710 -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -#: ipaserver/plugins/idrange.py:717 -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:724 -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idviews.py:72 ipaserver/plugins/idviews.py:123 -#: ipaserver/plugins/idviews.py:131 ipaserver/plugins/idviews.py:351 -#: ipaserver/plugins/idviews.py:838 -msgid "ID View" -msgstr "" - -#: ipaserver/plugins/idviews.py:74 -msgid "system ID View" -msgstr "" - -#: ipaserver/plugins/idviews.py:124 ipaserver/plugins/idviews.py:130 -msgid "ID Views" -msgstr "" - -#: ipaserver/plugins/idviews.py:145 -msgid "User object overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:149 -msgid "Group object overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:153 -msgid "Hosts the view applies to" -msgstr "" - -#: ipaserver/plugins/idviews.py:196 -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:213 -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:226 -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:242 -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:352 -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#: ipaserver/plugins/idviews.py:380 ipaserver/plugins/idviews.py:413 -msgid "not found" -msgstr "" - -#: ipaserver/plugins/idviews.py:394 -msgid "ID View cannot be applied to IPA master" -msgstr "" - -#: ipaserver/plugins/idviews.py:411 -msgid "ID View already applied" -msgstr "" - -#: ipaserver/plugins/idviews.py:431 -msgid "value" -msgstr "" - -#: ipaserver/plugins/idviews.py:444 -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#: ipaserver/plugins/idviews.py:445 -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#: ipaserver/plugins/idviews.py:487 -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#: ipaserver/plugins/idviews.py:488 -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -#: ipaserver/plugins/idviews.py:556 -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -#: ipaserver/plugins/idviews.py:594 -msgid "IPA object" -msgstr "" - -#: ipaserver/plugins/idviews.py:595 -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#: ipaserver/plugins/idviews.py:689 -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -#: ipaserver/plugins/idviews.py:839 -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#: ipaserver/plugins/idviews.py:883 -msgid "Add a new ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:884 -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:899 -msgid "Delete an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:900 -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:923 -msgid "Modify an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:924 -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:931 -msgid "ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:932 -msgid "ID overrides cannot be renamed" -msgstr "" - -#: ipaserver/plugins/idviews.py:944 -msgid "Search for an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:945 -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:957 -msgid "Display information about an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:969 ipaserver/plugins/idviews.py:973 -msgid "User ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:970 ipaserver/plugins/idviews.py:972 -msgid "User ID overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:1092 ipaserver/plugins/idviews.py:1096 -msgid "Group ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:1093 ipaserver/plugins/idviews.py:1095 -msgid "Group ID overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:1137 -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#: ipaserver/plugins/idviews.py:1138 -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1160 -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#: ipaserver/plugins/idviews.py:1161 -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1185 -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1210 -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1216 -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1248 -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:1284 -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1290 -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1296 -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1302 -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/internal.py:151 msgid "Internationalization messages" msgstr "" @@ -19032,10 +16786,6 @@ msgstr "" msgid "RADIUS" msgstr "" -#: ipaserver/plugins/internal.py:192 ipaserver/plugins/pkinit.py:41 -msgid "PKINIT" -msgstr "" - #: ipaserver/plugins/internal.py:193 msgid "Hardened Password (by SPAKE or FAST)" msgstr "" @@ -20301,6 +18051,16 @@ msgstr "" msgid "REVOKED" msgstr "" +#: ipaserver/plugins/internal.py:696 ipaserver/plugins/service.py:528 +#: ipaserver/plugins/host.py:521 +msgid "Serial Number" +msgstr "" + +#: ipaserver/plugins/internal.py:697 ipaserver/plugins/service.py:532 +#: ipaserver/plugins/host.py:525 +msgid "Serial Number (hex)" +msgstr "" + #: ipaserver/plugins/internal.py:698 msgid "SHA1 Fingerprint" msgstr "" @@ -20370,6 +18130,11 @@ msgstr "" msgid "Add certificate mapping data" msgstr "" +#: ipaserver/plugins/internal.py:721 ipaserver/plugins/baseuser.py:406 +#: ipaserver/plugins/baseuser.py:407 +msgid "Certificate mapping data" +msgstr "" + #: ipaserver/plugins/internal.py:723 msgid "Configuration string" msgstr "" @@ -21315,6 +19080,11 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" +#: ipaserver/plugins/internal.py:1161 ipaserver/plugins/internal.py:1283 +#: ipaserver/plugins/host.py:462 +msgid "Host" +msgstr "" + #: ipaserver/plugins/internal.py:1164 msgid "Netgroup Settings" msgstr "" @@ -21468,10 +19238,6 @@ msgstr "" msgid "Add password policy" msgstr "" -#: ipaserver/plugins/internal.py:1233 ipaserver/plugins/pwpolicy.py:298 -msgid "Password Policy" -msgstr "" - #: ipaserver/plugins/internal.py:1234 msgid "Remove password policies" msgstr "" @@ -21508,6 +19274,10 @@ msgstr "" msgid "Remove ID ranges" msgstr "" +#: ipaserver/plugins/internal.py:1247 ipaserver/dcerpc_common.py:37 +msgid "Active Directory domain" +msgstr "" + #: ipaserver/plugins/internal.py:1248 msgid "Active Directory domain with POSIX attributes" msgstr "" @@ -22736,11 +20506,6 @@ msgstr "" msgid "Identity" msgstr "" -#: ipaserver/plugins/internal.py:1948 ipaserver/plugins/location.py:157 -#: ipaserver/plugins/server.py:71 -msgid "IPA Server" -msgstr "" - #: ipaserver/plugins/internal.py:1949 msgid "Network Services" msgstr "" @@ -22899,92 +20664,625 @@ msgstr "" msgid "Unsupported value" msgstr "" -#: ipaserver/plugins/join.py:125 +#: ipaserver/plugins/session.py:12 +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +#: ipaserver/plugins/topology.py:24 +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:28 +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +#: ipaserver/plugins/topology.py:33 +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:39 +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:43 +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +#: ipaserver/plugins/topology.py:47 +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +#: ipaserver/plugins/topology.py:52 +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +#: ipaserver/plugins/topology.py:55 +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +#: ipaserver/plugins/topology.py:58 +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +#: ipaserver/plugins/topology.py:61 +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +#: ipaserver/plugins/topology.py:64 +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +#: ipaserver/plugins/topology.py:67 +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +#: ipaserver/plugins/topology.py:70 +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +#: ipaserver/plugins/topology.py:73 +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +#: ipaserver/plugins/topology.py:76 +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#: ipaserver/plugins/topology.py:92 +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +#: ipaserver/plugins/topology.py:104 +msgid "segment" +msgstr "" + +#: ipaserver/plugins/topology.py:105 +msgid "segments" +msgstr "" + +#: ipaserver/plugins/topology.py:119 +msgid "Topology Segments" +msgstr "" + +#: ipaserver/plugins/topology.py:120 +msgid "Topology Segment" +msgstr "" + +#: ipaserver/plugins/topology.py:226 +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#: ipaserver/plugins/topology.py:233 +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +#: ipaserver/plugins/topology.py:250 +msgid "left node and right node must not be the same" +msgstr "" + +#: ipaserver/plugins/topology.py:261 +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#: ipaserver/plugins/topology.py:269 +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#: ipaserver/plugins/topology.py:280 +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:289 +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:302 +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:314 +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:329 +#, python-format +msgid "%(value)s" +msgstr "" + +#: ipaserver/plugins/topology.py:365 +msgid "left or right node has to be specified" +msgstr "" + +#: ipaserver/plugins/topology.py:370 +msgid "only one node can be specified" +msgstr "" + +#: ipaserver/plugins/topology.py:374 +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#: ipaserver/plugins/topology.py:377 +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#: ipaserver/plugins/topology.py:408 +msgid "suffixes" +msgstr "" + +#: ipaserver/plugins/topology.py:412 +msgid "Topology suffixes" +msgstr "" + +#: ipaserver/plugins/topology.py:413 +msgid "Topology suffix" +msgstr "" + +#: ipaserver/plugins/topology.py:435 +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:446 +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:460 +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:474 +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:489 +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#: ipaserver/plugins/baseldap.py:101 +msgid "Member service groups" +msgstr "" + +#: ipaserver/plugins/baseldap.py:110 +msgid "Member HBAC service groups" +msgstr "" + +#: ipaserver/plugins/baseldap.py:127 +msgid "Member ID user overrides" +msgstr "" + +#: ipaserver/plugins/baseldap.py:129 +msgid "Indirect Member ID user overrides" +msgstr "" + +#: ipaserver/plugins/baseldap.py:146 +msgid "Indirect Member permissions" +msgstr "" + +#: ipaserver/plugins/baseldap.py:149 +msgid "Indirect Member HBAC service" +msgstr "" + +#: ipaserver/plugins/baseldap.py:152 +msgid "Indirect Member HBAC service group" +msgstr "" + +#: ipaserver/plugins/baseldap.py:213 +msgid "Invalid format. Should be name=value" +msgstr "" + +#: ipaserver/plugins/baseldap.py:584 +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +#: ipaserver/plugins/baseldap.py:615 +msgid "entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:616 +msgid "entries" +msgstr "" + +#: ipaserver/plugins/baseldap.py:654 ipaserver/plugins/baseldap.py:655 +msgid "Entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:658 +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:659 +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:660 ipaserver/plugins/schema.py:257 +#: ipaserver/plugins/schema.py:333 ipaserver/plugins/schema.py:424 +#: ipaserver/plugins/schema.py:661 ipaserver/plugins/schema.py:754 +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:661 +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#: ipaserver/plugins/baseldap.py:954 ipaserver/plugins/baseldap.py:962 +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#: ipaserver/plugins/baseldap.py:967 +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1025 +msgid "attribute is not configurable" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1128 +msgid "No such attribute on this entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1484 +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1582 ipaserver/plugins/baseldap.py:2490 +msgid "the entry was deleted while being modified" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1715 ipaserver/plugins/baseldap.py:2217 +#, python-format +msgid "%s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1758 ipaserver/plugins/baseldap.py:2241 +#, python-format +msgid "%s to add" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1857 ipaserver/plugins/baseldap.py:2340 +#, python-format +msgid "%s to remove" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1957 ipaserver/plugins/schema.py:122 +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1965 #, python-format msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -#: ipaserver/plugins/krbtpolicy.py:86 -msgid "kerberos ticket policy settings" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:152 -msgid "OTP max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:153 -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:157 -msgid "OTP max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:158 -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:162 -msgid "RADIUS max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:163 -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:167 -msgid "RADIUS max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:168 -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:172 -msgid "PKINIT max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:173 -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:177 -msgid "PKINIT max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:178 -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:182 -msgid "Hardened max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:183 -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:187 -msgid "Hardened max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:188 -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:272 +#: ipaserver/plugins/baseldap.py:1966 #, python-format -msgid "Ticket policy for %s could not be read" +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." msgstr "" -#: ipaserver/plugins/krbtpolicy.py:292 -msgid "Default ticket policy could not be read" +#: ipaserver/plugins/baseldap.py:2521 +#, python-format +msgid "added attribute value to entry %(value)s" msgstr "" -#: ipaserver/plugins/ldap2.py:277 -msgid "Could not read UPG Definition originfilter. Check your permissions." +#: ipaserver/plugins/baseldap.py:2535 +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:2544 +msgid "one or more values to remove" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:34 +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:85 +msgid "Realm domains" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:134 +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#: ipaserver/plugins/realmdomains.py:177 +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:203 +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:218 +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +#: ipaserver/plugins/realmdomains.py:241 +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +#: ipaserver/plugins/realmdomains.py:252 +msgid "IPA server domain cannot be omitted" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:274 +msgid "IPA server domain cannot be deleted" +msgstr "" + +#: ipaserver/plugins/certprofile.py:21 +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/certprofile.py:95 +msgid "invalid Profile ID" +msgstr "" + +#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 +msgid "Certificate Profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 +msgid "Certificate Profiles" +msgstr "" + +#: ipaserver/plugins/certprofile.py:126 +msgid "Profile configuration" +msgstr "" + +#: ipaserver/plugins/certprofile.py:190 +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/certprofile.py:222 +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:247 +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#: ipaserver/plugins/certprofile.py:255 +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#: ipaserver/plugins/certprofile.py:282 +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:289 +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#: ipaserver/plugins/certprofile.py:305 +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:322 +msgid "Certificate profiles cannot be renamed" +msgstr "" + +#: ipaserver/plugins/certprofile.py:327 +msgid "Insufficient privilege to modify a certificate profile." msgstr "" #: ipaserver/plugins/location.py:33 @@ -23117,6 +21415,278 @@ msgstr "" msgid "Servers in location" msgstr "" +#: ipaserver/plugins/config.py:50 +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#: ipaserver/plugins/config.py:116 +msgid "must be at least 10" +msgstr "" + +#: ipaserver/plugins/config.py:124 +msgid "configuration options" +msgstr "" + +#: ipaserver/plugins/config.py:160 ipaserver/plugins/config.py:161 +msgid "Configuration" +msgstr "" + +#: ipaserver/plugins/config.py:172 +msgid "Maximum hostname length" +msgstr "" + +#: ipaserver/plugins/config.py:276 ipaserver/plugins/config.py:277 +msgid "Enable adding subids to new users" +msgstr "" + +#: ipaserver/plugins/config.py:281 +msgid "IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:282 +msgid "List of all IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:287 +msgid "Hidden IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:288 +msgid "List of all hidden IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:293 +msgid "IPA master capable of PKINIT" +msgstr "" + +#: ipaserver/plugins/config.py:294 +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#: ipaserver/plugins/config.py:299 +msgid "IPA CA servers" +msgstr "" + +#: ipaserver/plugins/config.py:300 +msgid "IPA servers configured as certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:305 +msgid "Hidden IPA CA servers" +msgstr "" + +#: ipaserver/plugins/config.py:306 +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:311 +msgid "IPA CA renewal master" +msgstr "" + +#: ipaserver/plugins/config.py:312 +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:317 ipaserver/plugins/vault.py:978 +msgid "IPA KRA servers" +msgstr "" + +#: ipaserver/plugins/config.py:318 +msgid "IPA servers configured as key recovery agent" +msgstr "" + +#: ipaserver/plugins/config.py:323 +msgid "Hidden IPA KRA servers" +msgstr "" + +#: ipaserver/plugins/config.py:324 +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +#: ipaserver/plugins/config.py:330 ipaserver/plugins/idviews.py:159 +msgid "Domain resolution order" +msgstr "" + +#: ipaserver/plugins/config.py:331 ipaserver/plugins/idviews.py:160 +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#: ipaserver/plugins/config.py:336 ipaserver/plugins/dns.py:4147 +msgid "IPA DNS servers" +msgstr "" + +#: ipaserver/plugins/config.py:337 +msgid "IPA servers configured as domain name server" +msgstr "" + +#: ipaserver/plugins/config.py:342 +msgid "Hidden IPA DNS servers" +msgstr "" + +#: ipaserver/plugins/config.py:343 +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +#: ipaserver/plugins/config.py:348 ipaserver/plugins/dns.py:4153 +msgid "IPA DNSSec key master" +msgstr "" + +#: ipaserver/plugins/config.py:349 +msgid "DNSec key master" +msgstr "" + +#: ipaserver/plugins/config.py:354 +msgid "Setup SID configuration" +msgstr "" + +#: ipaserver/plugins/config.py:355 +msgid "New users and groups automatically get a SID assigned" +msgstr "" + +#: ipaserver/plugins/config.py:360 +msgid "Add SIDs" +msgstr "" + +#: ipaserver/plugins/config.py:361 +msgid "Add SIDs for existing users and groups" +msgstr "" + +#: ipaserver/plugins/config.py:366 ipaserver/plugins/config.py:367 +msgid "NetBIOS name of the IPA domain" +msgstr "" + +#: ipaserver/plugins/config.py:444 +msgid "Empty domain is not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:452 +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#: ipaserver/plugins/config.py:457 +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#: ipaserver/plugins/config.py:464 +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:514 +msgid "not allowed to enable SID generation" +msgstr "" + +#: ipaserver/plugins/config.py:522 +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" + +#: ipaserver/plugins/config.py:550 +msgid "Failed to call DBus" +msgstr "" + +#: ipaserver/plugins/config.py:560 +msgid "Configuration of SID failed. See details in the error log" +msgstr "" + +#: ipaserver/plugins/config.py:570 +msgid "The group doesn't exist" +msgstr "" + +#: ipaserver/plugins/config.py:588 +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:608 +msgid "May not be empty" +msgstr "" + +#: ipaserver/plugins/config.py:627 +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +#: ipaserver/plugins/config.py:659 +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#: ipaserver/plugins/config.py:663 +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +#: ipaserver/plugins/config.py:675 +msgid "SELinux user map default user not in order list" +msgstr "" + +#: ipaserver/plugins/config.py:694 +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "" + +#: ipaserver/plugins/ldap2.py:277 +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + #: ipaserver/plugins/migration.py:46 msgid "" "\n" @@ -23280,55 +21850,6 @@ msgstr "" msgid "Default group for new users not found" msgstr "" -#: ipaserver/plugins/netgroup.py:103 -msgid "netgroups" -msgstr "" - -#: ipaserver/plugins/netgroup.py:197 -msgid "Netgroup" -msgstr "" - -#: ipaserver/plugins/netgroup.py:266 -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:268 -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#: ipaserver/plugins/netgroup.py:301 -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:310 -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:339 -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/otp.py:7 -msgid "One time password commands" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:57 -msgid "OTP configuration options" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:80 ipaserver/plugins/otpconfig.py:81 -msgid "OTP Configuration" -msgstr "" - #: ipaserver/plugins/otptoken.py:42 msgid "" "\n" @@ -23423,6 +21944,1412 @@ msgid_plural "%(count)d OTP tokens matched" msgstr[0] "" msgstr[1] "" +#: ipaserver/plugins/schema.py:24 +msgid "" +"\n" +"API Schema\n" +msgstr "" + +#: ipaserver/plugins/schema.py:26 +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +#: ipaserver/plugins/schema.py:30 +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +#: ipaserver/plugins/schema.py:33 +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#: ipaserver/plugins/schema.py:54 +msgid "Documentation" +msgstr "" + +#: ipaserver/plugins/schema.py:59 +msgid "Exclude from" +msgstr "" + +#: ipaserver/plugins/schema.py:64 +msgid "Include in" +msgstr "" + +#: ipaserver/plugins/schema.py:135 +msgid "Help topic" +msgstr "" + +#: ipaserver/plugins/schema.py:172 +msgid "Parameters" +msgstr "" + +#: ipaserver/plugins/schema.py:207 +msgid "Method of" +msgstr "" + +#: ipaserver/plugins/schema.py:212 +msgid "Method name" +msgstr "" + +#: ipaserver/plugins/schema.py:270 +msgid "Display information about a command." +msgstr "" + +#: ipaserver/plugins/schema.py:275 +msgid "Search for commands." +msgstr "" + +#: ipaserver/plugins/schema.py:280 +msgid "Return command defaults" +msgstr "" + +#: ipaserver/plugins/schema.py:291 +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "" + +#: ipaserver/plugins/schema.py:344 +msgid "Display information about a class." +msgstr "" + +#: ipaserver/plugins/schema.py:349 +msgid "Search for classes." +msgstr "" + +#: ipaserver/plugins/schema.py:436 +msgid "Display information about a help topic." +msgstr "" + +#: ipaserver/plugins/schema.py:441 +msgid "Search for help topics." +msgstr "" + +#: ipaserver/plugins/schema.py:453 +msgid "Required" +msgstr "" + +#: ipaserver/plugins/schema.py:458 +msgid "Multi-value" +msgstr "" + +#: ipaserver/plugins/schema.py:508 +msgid "Always ask" +msgstr "" + +#: ipaserver/plugins/schema.py:513 +msgid "CLI metavar" +msgstr "" + +#: ipaserver/plugins/schema.py:518 +msgid "CLI name" +msgstr "" + +#: ipaserver/plugins/schema.py:523 +msgid "Confirm (password)" +msgstr "" + +#: ipaserver/plugins/schema.py:528 +msgid "Default" +msgstr "" + +#: ipaserver/plugins/schema.py:533 +msgid "Default from" +msgstr "" + +#: ipaserver/plugins/schema.py:538 +msgid "Label" +msgstr "" + +#: ipaserver/plugins/schema.py:543 +msgid "Convert on server" +msgstr "" + +#: ipaserver/plugins/schema.py:548 +msgid "Option group" +msgstr "" + +#: ipaserver/plugins/schema.py:553 +msgid "Sensitive" +msgstr "" + +#: ipaserver/plugins/schema.py:558 +msgid "Positional argument" +msgstr "" + +#: ipaserver/plugins/schema.py:643 +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/schema.py:682 +msgid "Display information about a command parameter." +msgstr "" + +#: ipaserver/plugins/schema.py:687 +msgid "Search command parameters." +msgstr "" + +#: ipaserver/plugins/schema.py:744 +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/schema.py:769 +msgid "Display information about a command output." +msgstr "" + +#: ipaserver/plugins/schema.py:774 +msgid "Search for command outputs." +msgstr "" + +#: ipaserver/plugins/schema.py:779 +msgid "Store and provide schema for commands and topics" +msgstr "" + +#: ipaserver/plugins/schema.py:785 +msgid "Fingerprint of schema cached by client" +msgstr "" + +#: ipaserver/plugins/privilege.py:76 +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:149 +msgid "Privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:169 +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:176 +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:183 +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:191 +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/group.py:62 +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#: ipaserver/plugins/group.py:195 +msgid "groups" +msgstr "" + +#: ipaserver/plugins/group.py:328 +msgid "User Group" +msgstr "" + +#: ipaserver/plugins/group.py:360 +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:383 +msgid "gid cannot be set for external group" +msgstr "" + +#: ipaserver/plugins/group.py:395 +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "" + +#: ipaserver/plugins/group.py:404 +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:418 +msgid "privileged group" +msgstr "" + +#: ipaserver/plugins/group.py:451 +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:526 +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/group.py:634 ipaserver/plugins/group.py:691 +#: ipaserver/plugins/trust.py:873 +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/group.py:725 +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/group.py:750 +msgid "not allowed to modify user entries" +msgstr "" + +#: ipaserver/plugins/group.py:761 +msgid "not allowed to modify group entries" +msgstr "" + +#: ipaserver/plugins/group.py:781 +msgid "Not a managed group" +msgstr "" + +#: ipaserver/plugins/group.py:803 +msgid "Add users that can manage members of this group." +msgstr "" + +#: ipaserver/plugins/group.py:811 +msgid "Remove users that can manage members of this group." +msgstr "" + +#: ipaserver/plugins/hbacrule.py:108 +msgid "The deny type has been deprecated." +msgstr "" + +#: ipaserver/plugins/hbacrule.py:131 +msgid "HBAC rules" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:201 +msgid "HBAC Rules" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:286 ipaserver/plugins/hbacsvc.py:95 +msgid "HBAC Services" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:302 +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:316 +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:333 +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:345 ipaserver/plugins/caacl.py:294 +#: ipaserver/plugins/netgroup.py:321 +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:350 ipaserver/plugins/caacl.py:298 +#: ipaserver/plugins/netgroup.py:326 +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:356 ipaserver/plugins/caacl.py:302 +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:368 +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/hbacrule.py:383 +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:413 +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:447 ipaserver/plugins/hbacrule.py:478 +msgid "Access time" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:518 ipaserver/plugins/selinuxusermap.py:572 +#: ipaserver/plugins/caacl.py:397 ipaserver/plugins/sudorule.py:598 +msgid "users cannot be added when user category='all'" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:549 ipaserver/plugins/selinuxusermap.py:605 +#: ipaserver/plugins/caacl.py:429 ipaserver/plugins/sudorule.py:701 +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:565 +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +#: ipaserver/plugins/hbacrule.py:606 ipaserver/plugins/caacl.py:459 +msgid "services cannot be added when service category='all'" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:89 +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:128 +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:142 +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:147 +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:161 +msgid "SELinux user map list not found in configuration" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:166 +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:176 +msgid "SELinux User Map rule" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:177 +msgid "SELinux User Map rules" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:233 +msgid "SELinux User Maps" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:234 +msgid "SELinux User Map" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:309 +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:330 +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:368 +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:376 +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:449 +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/selinuxusermap.py:499 +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:529 +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:86 +msgid "kerberos ticket policy settings" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:152 +msgid "OTP max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:153 +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:157 +msgid "OTP max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:158 +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:162 +msgid "RADIUS max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:163 +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:167 +msgid "RADIUS max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:168 +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:172 +msgid "PKINIT max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:173 +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:177 +msgid "PKINIT max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:178 +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:182 +msgid "Hardened max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:183 +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:187 +msgid "Hardened max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:188 +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:272 +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:292 +msgid "Default ticket policy could not be read" +msgstr "" + +#: ipaserver/plugins/subid.py:29 +msgid "" +"\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" +msgstr "" + +#: ipaserver/plugins/subid.py:59 ipaserver/plugins/subid.py:62 +msgid "Subordinate id" +msgstr "" + +#: ipaserver/plugins/subid.py:60 ipaserver/plugins/subid.py:61 +msgid "Subordinate ids" +msgstr "" + +#: ipaserver/plugins/subid.py:144 +msgid "Subordinate id description" +msgstr "" + +#: ipaserver/plugins/subid.py:150 ipaserver/plugins/subid.py:468 +msgid "Owning user of subordinate id entry" +msgstr "" + +#: ipaserver/plugins/subid.py:157 +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" + +#: ipaserver/plugins/subid.py:166 +msgid "Subordinate user ID count" +msgstr "" + +#: ipaserver/plugins/subid.py:175 +msgid "Start value for subordinate group ID (subgid) range" +msgstr "" + +#: ipaserver/plugins/subid.py:184 +msgid "Subordinate group ID count" +msgstr "" + +#: ipaserver/plugins/subid.py:213 +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "" + +#: ipaserver/plugins/subid.py:246 +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "" + +#: ipaserver/plugins/subid.py:278 +msgid "subgidnumber must be equal to subuidnumber" +msgstr "" + +#: ipaserver/plugins/subid.py:351 +msgid "Add a new subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:352 +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/subid.py:384 +msgid "Delete a subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:385 +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/subid.py:393 +msgid "Modify a subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:394 +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/subid.py:405 +msgid "Search for subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:407 +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/subid.py:440 +msgid "Display information about a subordinate id." +msgstr "" + +#: ipaserver/plugins/subid.py:458 +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" + +#: ipaserver/plugins/subid.py:493 +msgid "Match users by any subordinate uid in their range" +msgstr "" + +#: ipaserver/plugins/subid.py:500 +msgid "SubUID match" +msgstr "" + +#: ipaserver/plugins/subid.py:501 +msgid "Match value for subordinate user ID" +msgstr "" + +#: ipaserver/plugins/subid.py:542 +msgid "Subordinate id statistics" +msgstr "" + +#: ipaserver/plugins/subid.py:586 +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "" + +#: ipaserver/plugins/automount.py:218 +msgid "automount location" +msgstr "" + +#: ipaserver/plugins/automount.py:219 +msgid "automount locations" +msgstr "" + +#: ipaserver/plugins/automount.py:222 +msgid "Automount Locations" +msgstr "" + +#: ipaserver/plugins/automount.py:223 +msgid "Automount Location" +msgstr "" + +#: ipaserver/plugins/automount.py:263 +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:283 +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:296 +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:349 +msgid "automount map" +msgstr "" + +#: ipaserver/plugins/automount.py:350 +msgid "automount maps" +msgstr "" + +#: ipaserver/plugins/automount.py:393 +msgid "Automount Maps" +msgstr "" + +#: ipaserver/plugins/automount.py:394 +msgid "Automount Map" +msgstr "" + +#: ipaserver/plugins/automount.py:401 +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:408 +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:428 +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:436 +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:448 +msgid "Automount key object." +msgstr "" + +#: ipaserver/plugins/automount.py:452 +msgid "automount key" +msgstr "" + +#: ipaserver/plugins/automount.py:453 +msgid "automount keys" +msgstr "" + +#: ipaserver/plugins/automount.py:512 +msgid "Automount Keys" +msgstr "" + +#: ipaserver/plugins/automount.py:513 +msgid "Automount Key" +msgstr "" + +#: ipaserver/plugins/automount.py:514 +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#: ipaserver/plugins/automount.py:515 +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#: ipaserver/plugins/automount.py:516 +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#: ipaserver/plugins/automount.py:566 +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#: ipaserver/plugins/automount.py:625 +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:654 +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:678 +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#: ipaserver/plugins/automount.py:707 +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:748 +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:807 +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:72 ipaserver/plugins/idviews.py:123 +#: ipaserver/plugins/idviews.py:131 ipaserver/plugins/idviews.py:351 +#: ipaserver/plugins/idviews.py:838 +msgid "ID View" +msgstr "" + +#: ipaserver/plugins/idviews.py:74 +msgid "system ID View" +msgstr "" + +#: ipaserver/plugins/idviews.py:124 ipaserver/plugins/idviews.py:130 +msgid "ID Views" +msgstr "" + +#: ipaserver/plugins/idviews.py:145 +msgid "User object overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:149 +msgid "Group object overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:153 +msgid "Hosts the view applies to" +msgstr "" + +#: ipaserver/plugins/idviews.py:196 +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:213 +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:226 +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:242 +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:352 +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#: ipaserver/plugins/idviews.py:380 ipaserver/plugins/idviews.py:413 +msgid "not found" +msgstr "" + +#: ipaserver/plugins/idviews.py:394 +msgid "ID View cannot be applied to IPA master" +msgstr "" + +#: ipaserver/plugins/idviews.py:411 +msgid "ID View already applied" +msgstr "" + +#: ipaserver/plugins/idviews.py:431 +msgid "value" +msgstr "" + +#: ipaserver/plugins/idviews.py:444 +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#: ipaserver/plugins/idviews.py:445 +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#: ipaserver/plugins/idviews.py:487 +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#: ipaserver/plugins/idviews.py:488 +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +#: ipaserver/plugins/idviews.py:556 +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +#: ipaserver/plugins/idviews.py:594 +msgid "IPA object" +msgstr "" + +#: ipaserver/plugins/idviews.py:595 +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#: ipaserver/plugins/idviews.py:689 +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +#: ipaserver/plugins/idviews.py:839 +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#: ipaserver/plugins/idviews.py:883 +msgid "Add a new ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:884 +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:899 +msgid "Delete an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:900 +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:923 +msgid "Modify an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:924 +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:931 +msgid "ID override" +msgstr "" + +#: ipaserver/plugins/idviews.py:932 +msgid "ID overrides cannot be renamed" +msgstr "" + +#: ipaserver/plugins/idviews.py:944 +msgid "Search for an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:945 +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:957 +msgid "Display information about an ID override." +msgstr "" + +#: ipaserver/plugins/idviews.py:969 ipaserver/plugins/idviews.py:973 +msgid "User ID override" +msgstr "" + +#: ipaserver/plugins/idviews.py:970 ipaserver/plugins/idviews.py:972 +msgid "User ID overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:1056 ipaserver/plugins/baseuser.py:401 +#: ipaserver/plugins/baseuser.py:846 ipaserver/plugins/certmap.py:606 +msgid "Base-64 encoded user certificate" +msgstr "" + +#: ipaserver/plugins/idviews.py:1092 ipaserver/plugins/idviews.py:1096 +msgid "Group ID override" +msgstr "" + +#: ipaserver/plugins/idviews.py:1093 ipaserver/plugins/idviews.py:1095 +msgid "Group ID overrides" +msgstr "" + +#: ipaserver/plugins/idviews.py:1137 +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#: ipaserver/plugins/idviews.py:1138 +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1160 +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#: ipaserver/plugins/idviews.py:1161 +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1185 +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1210 +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1216 +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1248 +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idviews.py:1284 +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1290 +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1296 +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idviews.py:1302 +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/caacl.py:21 +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#: ipaserver/plugins/caacl.py:87 ipaserver/plugins/caacl.py:165 +#: ipaserver/plugins/caacl.py:263 +msgid "CA ACL" +msgstr "" + +#: ipaserver/plugins/caacl.py:88 ipaserver/plugins/caacl.py:164 +msgid "CA ACLs" +msgstr "" + +#: ipaserver/plugins/caacl.py:183 +msgid "CA category" +msgstr "" + +#: ipaserver/plugins/caacl.py:184 +msgid "CA category the ACL applies to" +msgstr "" + +#: ipaserver/plugins/caacl.py:212 +msgid "CAs" +msgstr "" + +#: ipaserver/plugins/caacl.py:246 +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/caacl.py:258 +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/caacl.py:265 +msgid "default CA ACL can be only disabled" +msgstr "" + +#: ipaserver/plugins/caacl.py:273 +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/caacl.py:285 +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +#: ipaserver/plugins/caacl.py:290 +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +#: ipaserver/plugins/caacl.py:312 +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/caacl.py:325 +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/caacl.py:354 +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/caacl.py:385 +#, python-format +msgid "%i user or group added." +msgstr "" + +#: ipaserver/plugins/caacl.py:386 +#, python-format +msgid "%i users or groups added." +msgstr "" + +#: ipaserver/plugins/caacl.py:407 +#, python-format +msgid "%i user or group removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:408 +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:417 +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#: ipaserver/plugins/caacl.py:418 +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +#: ipaserver/plugins/caacl.py:439 +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:440 +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:448 +#, python-format +msgid "%i service added." +msgstr "" + +#: ipaserver/plugins/caacl.py:448 +#, python-format +msgid "%i services added." +msgstr "" + +#: ipaserver/plugins/caacl.py:468 +#, python-format +msgid "%i service removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:468 +#, python-format +msgid "%i services removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:488 +#, python-format +msgid "%i profile added." +msgstr "" + +#: ipaserver/plugins/caacl.py:488 +#, python-format +msgid "%i profiles added." +msgstr "" + +#: ipaserver/plugins/caacl.py:499 +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#: ipaserver/plugins/caacl.py:510 +#, python-format +msgid "%i profile removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:510 +#, python-format +msgid "%i profiles removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:515 +msgid "Add CAs to a CA ACL." +msgstr "" + +#: ipaserver/plugins/caacl.py:520 +#, python-format +msgid "%i CA added." +msgstr "" + +#: ipaserver/plugins/caacl.py:520 +#, python-format +msgid "%i CAs added." +msgstr "" + +#: ipaserver/plugins/caacl.py:531 +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +#: ipaserver/plugins/caacl.py:537 +msgid "Remove CAs from a CA ACL." +msgstr "" + +#: ipaserver/plugins/caacl.py:542 +#, python-format +msgid "%i CA removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:542 +#, python-format +msgid "%i CAs removed." +msgstr "" + #: ipaserver/plugins/passwd.py:40 msgid "" "\n" @@ -23460,6 +23387,2418 @@ msgstr "" msgid "Changed password for \"%(value)s\"" msgstr "" +#: ipaserver/plugins/dnsserver.py:35 +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:37 +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:41 +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:44 +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:62 +msgid "DNS server" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:63 +msgid "DNS servers" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:71 +msgid "DNS Servers" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:72 +msgid "DNS Server" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:113 +msgid "DNS Server name" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:119 +msgid "SOA mname override" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:120 +msgid "SOA mname (authoritative server) override" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:126 +msgid "Forwarders" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:128 +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:138 +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#: ipaserver/plugins/dnsserver.py:148 ipaserver/plugins/dns.py:2063 +#: ipaserver/plugins/dns.py:2237 ipaserver/plugins/dns.py:3210 +#: ipaserver/plugins/dns.py:4191 +msgid "DNS is not configured" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:154 +msgid "Modify DNS server configuration" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:157 +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:162 +msgid "Search for DNS servers." +msgstr "" + +#: ipaserver/plugins/dnsserver.py:166 +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/dnsserver.py:176 +msgid "IPA DNS Server is not installed" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:183 +msgid "Display configuration of a DNS server." +msgstr "" + +#: ipaserver/plugins/dnsserver.py:193 +msgid "Add a new DNS server." +msgstr "" + +#: ipaserver/plugins/dnsserver.py:196 +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:205 +msgid "Delete a DNS server" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:208 +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:28 +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:62 +msgid "HBAC services" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:96 +msgid "HBAC Service" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:119 +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:127 +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:135 +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:144 +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/trust.py:83 +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#: ipaserver/plugins/trust.py:226 +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +#: ipaserver/plugins/trust.py:239 ipaserver/plugins/trust.py:871 +#: ipaserver/plugins/trust.py:887 ipaserver/plugins/trust.py:908 +#: ipaserver/plugins/trust.py:918 ipaserver/plugins/trust.py:1071 +#: ipaserver/plugins/trust.py:1106 +msgid "AD Trust setup" +msgstr "" + +#: ipaserver/plugins/trust.py:250 +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +#: ipaserver/plugins/trust.py:260 +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +#: ipaserver/plugins/trust.py:474 +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#: ipaserver/plugins/trust.py:487 +msgid "trust" +msgstr "" + +#: ipaserver/plugins/trust.py:488 +msgid "trusts" +msgstr "" + +#: ipaserver/plugins/trust.py:531 +msgid "Trust" +msgstr "" + +#: ipaserver/plugins/trust.py:549 +msgid "SID blocklist incoming" +msgstr "" + +#: ipaserver/plugins/trust.py:553 +msgid "SID blocklist outgoing" +msgstr "" + +#: ipaserver/plugins/trust.py:569 +msgid "UPN suffixes" +msgstr "" + +#: ipaserver/plugins/trust.py:586 +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +#: ipaserver/plugins/trust.py:654 +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +#: ipaserver/plugins/trust.py:712 +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#: ipaserver/plugins/trust.py:724 +msgid "External trust" +msgstr "" + +#: ipaserver/plugins/trust.py:726 +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#: ipaserver/plugins/trust.py:732 +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:733 +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:829 +msgid "missing base_id" +msgstr "" + +#: ipaserver/plugins/trust.py:831 +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#: ipaserver/plugins/trust.py:841 +msgid "trust type" +msgstr "" + +#: ipaserver/plugins/trust.py:842 +msgid "only \"ad\" is supported" +msgstr "" + +#: ipaserver/plugins/trust.py:848 ipaserver/plugins/certmap.py:141 +#: ipaserver/plugins/certmap.py:148 ipaserver/plugins/certmap.py:175 +msgid "domain" +msgstr "" + +#: ipaserver/plugins/trust.py:849 +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +#: ipaserver/plugins/trust.py:862 +msgid "Realm-domain mismatch" +msgstr "" + +#: ipaserver/plugins/trust.py:863 +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#: ipaserver/plugins/trust.py:889 +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +#: ipaserver/plugins/trust.py:910 +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +#: ipaserver/plugins/trust.py:919 +msgid "Realm administrator password should be specified" +msgstr "" + +#: ipaserver/plugins/trust.py:940 +msgid "id range type" +msgstr "" + +#: ipaserver/plugins/trust.py:942 +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +#: ipaserver/plugins/trust.py:952 +msgid "id range" +msgstr "" + +#: ipaserver/plugins/trust.py:954 +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +#: ipaserver/plugins/trust.py:976 +msgid "range exists" +msgstr "" + +#: ipaserver/plugins/trust.py:978 +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +#: ipaserver/plugins/trust.py:986 +msgid "range type change" +msgstr "" + +#: ipaserver/plugins/trust.py:987 +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#: ipaserver/plugins/trust.py:1025 +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +#: ipaserver/plugins/trust.py:1039 +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#: ipaserver/plugins/trust.py:1045 +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#: ipaserver/plugins/trust.py:1057 +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +#: ipaserver/plugins/trust.py:1072 +msgid "Unable to verify write permissions to the AD" +msgstr "" + +#: ipaserver/plugins/trust.py:1107 +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#: ipaserver/plugins/trust.py:1115 +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1120 +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#: ipaserver/plugins/trust.py:1127 +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#: ipaserver/plugins/trust.py:1145 +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/trust.py:1234 +msgid "trust configuration" +msgstr "" + +#: ipaserver/plugins/trust.py:1240 ipaserver/plugins/trust.py:1241 +msgid "Global Trust Configuration" +msgstr "" + +#: ipaserver/plugins/trust.py:1266 +msgid "IPA AD trust agents" +msgstr "" + +#: ipaserver/plugins/trust.py:1267 +msgid "IPA servers configured as AD trust agents" +msgstr "" + +#: ipaserver/plugins/trust.py:1272 +msgid "IPA AD trust controllers" +msgstr "" + +#: ipaserver/plugins/trust.py:1273 +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#: ipaserver/plugins/trust.py:1287 +msgid "unsupported trust type" +msgstr "" + +#: ipaserver/plugins/trust.py:1354 +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#: ipaserver/plugins/trust.py:1419 +msgid "SID" +msgstr "" + +#: ipaserver/plugins/trust.py:1545 +msgid "sidgen_was_run" +msgstr "" + +#: ipaserver/plugins/trust.py:1547 +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +#: ipaserver/plugins/trust.py:1566 +msgid "trust domain" +msgstr "" + +#: ipaserver/plugins/trust.py:1567 +msgid "trust domains" +msgstr "" + +#: ipaserver/plugins/trust.py:1575 +msgid "Trusted domains" +msgstr "" + +#: ipaserver/plugins/trust.py:1576 +msgid "Trusted domain" +msgstr "" + +#: ipaserver/plugins/trust.py:1590 +msgid "Domain enabled" +msgstr "" + +#: ipaserver/plugins/trust.py:1662 +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1680 +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#: ipaserver/plugins/trust.py:1831 +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +#: ipaserver/plugins/trust.py:1839 +msgid "Configure this server as a trust agent." +msgstr "" + +#: ipaserver/plugins/trust.py:1855 +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#: ipaserver/plugins/trust.py:1871 +msgid "not allowed to remotely add agent" +msgstr "" + +#: ipaserver/plugins/trust.py:1907 +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1916 +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#: ipaserver/plugins/trust.py:1949 +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1958 +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#: ipaserver/plugins/netgroup.py:103 +msgid "netgroups" +msgstr "" + +#: ipaserver/plugins/netgroup.py:197 +msgid "Netgroup" +msgstr "" + +#: ipaserver/plugins/netgroup.py:266 +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/netgroup.py:268 +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#: ipaserver/plugins/netgroup.py:301 +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/netgroup.py:310 +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/netgroup.py:339 +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/selfservice.py:68 +msgid "self service permission" +msgstr "" + +#: ipaserver/plugins/selfservice.py:69 +msgid "self service permissions" +msgstr "" + +#: ipaserver/plugins/selfservice.py:70 +msgid "Self Service Permissions" +msgstr "" + +#: ipaserver/plugins/selfservice.py:71 +msgid "Self Service Permission" +msgstr "" + +#: ipaserver/plugins/selfservice.py:124 +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:146 +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:163 +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:185 +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/sudo.py:7 +msgid "commands for controlling sudo configuration" +msgstr "" + +#: ipaserver/plugins/service.py:60 +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +#: ipaserver/plugins/service.py:113 +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +#: ipaserver/plugins/service.py:116 +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +#: ipaserver/plugins/service.py:180 +msgid "Trusted to authenticate as user" +msgstr "" + +#: ipaserver/plugins/service.py:181 +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#: ipaserver/plugins/service.py:226 +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "" + +#: ipaserver/plugins/service.py:242 +msgid "Malformed principal" +msgstr "" + +#: ipaserver/plugins/service.py:321 +msgid "{} is required by the IPA master" +msgstr "" + +#: ipaserver/plugins/service.py:395 +msgid "service" +msgstr "" + +#: ipaserver/plugins/service.py:396 +msgid "services" +msgstr "" + +#: ipaserver/plugins/service.py:511 ipaserver/plugins/baseuser.py:259 +#: ipaserver/plugins/host.py:562 +msgid "Principal alias" +msgstr "" + +#: ipaserver/plugins/service.py:512 +msgid "Service principal alias" +msgstr "" + +#: ipaserver/plugins/service.py:520 +msgid "Base-64 encoded service certificate" +msgstr "" + +#: ipaserver/plugins/service.py:570 ipaserver/plugins/host.py:597 +msgid "Authentication Indicators" +msgstr "" + +#: ipaserver/plugins/service.py:571 ipaserver/plugins/host.py:598 +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#: ipaserver/plugins/service.py:596 +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#: ipaserver/plugins/service.py:648 +msgid "Add a new IPA service." +msgstr "" + +#: ipaserver/plugins/service.py:650 ipaserver/plugins/service.py:719 +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:656 +msgid "force principal name even if host not in DNS" +msgstr "" + +#: ipaserver/plugins/service.py:659 +msgid "Skip host check" +msgstr "" + +#: ipaserver/plugins/service.py:660 +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#: ipaserver/plugins/service.py:678 ipaserver/plugins/service.py:787 +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#: ipaserver/plugins/service.py:717 +msgid "Add a new SMB service." +msgstr "" + +#: ipaserver/plugins/service.py:733 +msgid "SMB service NetBIOS name" +msgstr "" + +#: ipaserver/plugins/service.py:847 +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:867 +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:918 +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/service.py:1117 +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:1158 +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:1165 +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:1181 +msgid "Add new principal alias to a service" +msgstr "" + +#: ipaserver/plugins/service.py:1182 +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/service.py:1193 +msgid "Remove principal alias from a service" +msgstr "" + +#: ipaserver/plugins/service.py:1194 +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/baseuser.py:57 +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#: ipaserver/plugins/baseuser.py:88 +msgid "must be TRUE or FALSE" +msgstr "" + +#: ipaserver/plugins/baseuser.py:145 +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#: ipaserver/plugins/baseuser.py:271 +msgid "User password expiration" +msgstr "" + +#: ipaserver/plugins/baseuser.py:355 ipaserver/plugins/host.py:581 +msgid "SSH public key fingerprint" +msgstr "" + +#: ipaserver/plugins/baseuser.py:412 +msgid "SMB logon script path" +msgstr "" + +#: ipaserver/plugins/baseuser.py:417 +msgid "SMB profile path" +msgstr "" + +#: ipaserver/plugins/baseuser.py:422 +msgid "SMB Home Directory" +msgstr "" + +#: ipaserver/plugins/baseuser.py:427 +msgid "SMB Home Directory Drive" +msgstr "" + +#: ipaserver/plugins/baseuser.py:451 ipaserver/plugins/baseuser.py:455 +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#: ipaserver/plugins/baseuser.py:482 +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#: ipaserver/plugins/baseuser.py:832 +msgid "Issuer of the certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:839 +msgid "Subject of the certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:884 +msgid "cannot have an empty subject" +msgstr "" + +#: ipaserver/plugins/baseuser.py:924 +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:928 +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#: ipaserver/plugins/baseuser.py:952 ipaserver/plugins/user.py:1310 +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#: ipaserver/plugins/baseuser.py:953 +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/baseuser.py:971 ipaserver/plugins/user.py:1315 +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#: ipaserver/plugins/baseuser.py:972 +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:50 +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:52 +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:54 +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:62 +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:65 +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:68 +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:71 +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:74 +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:77 +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:80 +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:83 +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:86 +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:142 +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +#: ipaserver/plugins/certmap.py:149 +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:176 +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#: ipaserver/plugins/certmap.py:186 +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +#: ipaserver/plugins/certmap.py:191 ipaserver/plugins/certmap.py:192 +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +#: ipaserver/plugins/certmap.py:198 +msgid "Prompt for the username" +msgstr "" + +#: ipaserver/plugins/certmap.py:199 +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#: ipaserver/plugins/certmap.py:229 +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +#: ipaserver/plugins/certmap.py:234 +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +#: ipaserver/plugins/certmap.py:243 ipaserver/plugins/certmap.py:247 +msgid "Certificate Identity Mapping Rules" +msgstr "" + +#: ipaserver/plugins/certmap.py:244 ipaserver/plugins/certmap.py:246 +msgid "Certificate Identity Mapping Rule" +msgstr "" + +#: ipaserver/plugins/certmap.py:274 +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +#: ipaserver/plugins/certmap.py:280 +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +#: ipaserver/plugins/certmap.py:285 +msgid "Mapping rule" +msgstr "" + +#: ipaserver/plugins/certmap.py:286 +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +#: ipaserver/plugins/certmap.py:291 +msgid "Matching rule" +msgstr "" + +#: ipaserver/plugins/certmap.py:292 +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +#: ipaserver/plugins/certmap.py:299 +msgid "Domain where the user entry will be searched" +msgstr "" + +#: ipaserver/plugins/certmap.py:305 +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +#: ipaserver/plugins/certmap.py:356 +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:358 +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:369 +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:371 +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:392 +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#: ipaserver/plugins/certmap.py:395 +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/certmap.py:402 +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:408 +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:410 +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:415 +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:417 +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:444 +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:446 +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:500 +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +#: ipaserver/plugins/certmap.py:554 +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#: ipaserver/plugins/certmap.py:571 +msgid "User logins" +msgstr "" + +#: ipaserver/plugins/certmap.py:579 +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#: ipaserver/plugins/certmap.py:587 +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/dns.py:100 +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +#: ipaserver/plugins/dns.py:102 +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:104 +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +#: ipaserver/plugins/dns.py:110 +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +#: ipaserver/plugins/dns.py:112 +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +#: ipaserver/plugins/dns.py:118 +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:126 +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +#: ipaserver/plugins/dns.py:135 +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +#: ipaserver/plugins/dns.py:138 +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:141 +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:144 +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +#: ipaserver/plugins/dns.py:147 +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:151 +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +#: ipaserver/plugins/dns.py:154 +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +#: ipaserver/plugins/dns.py:157 +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:160 +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:163 +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +#: ipaserver/plugins/dns.py:166 +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:179 +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:182 +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:185 +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +#: ipaserver/plugins/dns.py:190 +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:193 +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:200 +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:217 +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:220 +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +#: ipaserver/plugins/dns.py:233 +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:236 +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +#: ipaserver/plugins/dns.py:239 +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +#: ipaserver/plugins/dns.py:242 +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +#: ipaserver/plugins/dns.py:245 +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +#: ipaserver/plugins/dns.py:248 +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:252 +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:255 +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:259 +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:270 +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:277 +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +#: ipaserver/plugins/dns.py:280 +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +#: ipaserver/plugins/dns.py:284 +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +#: ipaserver/plugins/dns.py:290 +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +#: ipaserver/plugins/dns.py:293 +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:296 +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +#: ipaserver/plugins/dns.py:299 +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:302 +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +#: ipaserver/plugins/dns.py:307 +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +#: ipaserver/plugins/dns.py:310 +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +#: ipaserver/plugins/dns.py:315 +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +#: ipaserver/plugins/dns.py:318 +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +#: ipaserver/plugins/dns.py:406 +msgid "invalid IP network format" +msgstr "" + +#: ipaserver/plugins/dns.py:415 +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +#: ipaserver/plugins/dns.py:431 +msgid "invalid address format" +msgstr "" + +#: ipaserver/plugins/dns.py:475 +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +#: ipaserver/plugins/dns.py:484 +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +#: ipaserver/plugins/dns.py:487 +msgid "flags value: allowed interval 0-255" +msgstr "" + +#: ipaserver/plugins/dns.py:490 +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#: ipaserver/plugins/dns.py:498 +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +#: ipaserver/plugins/dns.py:505 +msgid "invalid domain-name: not fully qualified" +msgstr "" + +#: ipaserver/plugins/dns.py:514 +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#: ipaserver/plugins/dns.py:555 +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#: ipaserver/plugins/dns.py:561 +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#: ipaserver/plugins/dns.py:571 +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#: ipaserver/plugins/dns.py:588 +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#: ipaserver/plugins/dns.py:603 +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#: ipaserver/plugins/dns.py:613 +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#: ipaserver/plugins/dns.py:688 +#, python-format +msgid "%s record" +msgstr "" + +#: ipaserver/plugins/dns.py:690 +#, python-format +msgid "Raw %s records" +msgstr "" + +#: ipaserver/plugins/dns.py:691 +#, python-format +msgid "%s Record" +msgstr "" + +#: ipaserver/plugins/dns.py:692 +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#: ipaserver/plugins/dns.py:754 +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +#: ipaserver/plugins/dns.py:761 +msgid "Invalid number of parts!" +msgstr "" + +#: ipaserver/plugins/dns.py:813 +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#: ipaserver/plugins/dns.py:829 +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +#: ipaserver/plugins/dns.py:904 +msgid "Create reverse" +msgstr "" + +#: ipaserver/plugins/dns.py:940 +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +#: ipaserver/plugins/dns.py:1115 ipaserver/plugins/dns.py:1272 +msgid "Exchanger" +msgstr "" + +#: ipaserver/plugins/dns.py:1190 +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#: ipaserver/plugins/dns.py:1244 +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +#: ipaserver/plugins/dns.py:1299 +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#: ipaserver/plugins/dns.py:1360 ipaserver/plugins/dns.py:1490 +msgid "Priority (order)" +msgstr "" + +#: ipaserver/plugins/dns.py:1361 +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +#: ipaserver/plugins/dns.py:1369 ipaserver/plugins/dns.py:1499 +msgid "Relative weight for entries with the same priority." +msgstr "" + +#: ipaserver/plugins/dns.py:1389 +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +#: ipaserver/plugins/dns.py:1491 +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +#: ipaserver/plugins/dns.py:1504 +msgid "Target Uniform Resource Identifier" +msgstr "" + +#: ipaserver/plugins/dns.py:1505 +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#: ipaserver/plugins/dns.py:1587 +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +#: ipaserver/plugins/dns.py:2056 +msgid "Managedby permission" +msgstr "" + +#: ipaserver/plugins/dns.py:2157 +msgid "cannot be used when a zone is specified" +msgstr "" + +#: ipaserver/plugins/dns.py:2169 +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#: ipaserver/plugins/dns.py:2312 +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2342 +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#: ipaserver/plugins/dns.py:2370 +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2406 +msgid "DNS zone" +msgstr "" + +#: ipaserver/plugins/dns.py:2407 +msgid "DNS zones" +msgstr "" + +#: ipaserver/plugins/dns.py:2415 +msgid "DNS Zones" +msgstr "" + +#: ipaserver/plugins/dns.py:2416 +msgid "DNS Zone" +msgstr "" + +#: ipaserver/plugins/dns.py:2490 +msgid "Default time to live" +msgstr "" + +#: ipaserver/plugins/dns.py:2491 +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +#: ipaserver/plugins/dns.py:2706 +msgid "setting Authoritative nameserver" +msgstr "" + +#: ipaserver/plugins/dns.py:2707 +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +#: ipaserver/plugins/dns.py:2709 +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +#: ipaserver/plugins/dns.py:2744 +msgid "" +msgstr "" + +#: ipaserver/plugins/dns.py:2808 +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#: ipaserver/plugins/dns.py:2863 +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2926 +msgid "is required" +msgstr "" + +#: ipaserver/plugins/dns.py:3008 +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:3019 +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:3044 +msgid "DNS resource record" +msgstr "" + +#: ipaserver/plugins/dns.py:3045 +msgid "DNS resource records" +msgstr "" + +#: ipaserver/plugins/dns.py:3052 +msgid "DNS Resource Records" +msgstr "" + +#: ipaserver/plugins/dns.py:3053 +msgid "DNS Resource Record" +msgstr "" + +#: ipaserver/plugins/dns.py:3088 +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3105 +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#: ipaserver/plugins/dns.py:3116 +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3161 +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +#: ipaserver/plugins/dns.py:3203 +msgid "only master zones can contain records" +msgstr "" + +#: ipaserver/plugins/dns.py:3301 +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +#: ipaserver/plugins/dns.py:3307 +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +#: ipaserver/plugins/dns.py:3315 +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3331 +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +#: ipaserver/plugins/dns.py:3347 +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3628 +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +#: ipaserver/plugins/dns.py:3754 +msgid "DNS zone root record cannot be renamed" +msgstr "" + +#: ipaserver/plugins/dns.py:3772 +msgid "DNS records can be only updated one at a time" +msgstr "" + +#: ipaserver/plugins/dns.py:3865 +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:3958 +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#: ipaserver/plugins/dns.py:4060 +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#: ipaserver/plugins/dns.py:4075 +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +#: ipaserver/plugins/dns.py:4106 +msgid "DNS configuration options" +msgstr "" + +#: ipaserver/plugins/dns.py:4111 ipaserver/plugins/dns.py:4112 +msgid "DNS Global Configuration" +msgstr "" + +#: ipaserver/plugins/dns.py:4143 +msgid "IPA DNS version" +msgstr "" + +#: ipaserver/plugins/dns.py:4148 +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +#: ipaserver/plugins/dns.py:4154 +msgid "IPA server configured as DNSSec key master" +msgstr "" + +#: ipaserver/plugins/dns.py:4205 +msgid "Global DNS configuration is empty" +msgstr "" + +#: ipaserver/plugins/dns.py:4286 +msgid "DNS forward zone" +msgstr "" + +#: ipaserver/plugins/dns.py:4287 +msgid "DNS forward zones" +msgstr "" + +#: ipaserver/plugins/dns.py:4289 +msgid "DNS Forward Zones" +msgstr "" + +#: ipaserver/plugins/dns.py:4290 +msgid "DNS Forward Zone" +msgstr "" + +#: ipaserver/plugins/dns.py:4397 ipaserver/plugins/dns.py:4447 +msgid "Please specify forwarders." +msgstr "" + +#: ipaserver/plugins/dns.py:4416 +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:4473 +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:4479 +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:4502 +msgid "IPA DNS records" +msgstr "" + +#: ipaserver/plugins/dns.py:4506 +msgid "IPA location records" +msgstr "" + +#: ipaserver/plugins/dns.py:4513 +msgid "Update location and IPA server DNS records" +msgstr "" + +#: ipaserver/plugins/dns.py:4524 +msgid "Result of the command" +msgstr "" + +#: ipaserver/plugins/dns.py:4531 +msgid "Dry run" +msgstr "" + +#: ipaserver/plugins/dns.py:4532 +msgid "Do not update records only return expected records" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1251 +msgid "REST API is not logged in." +msgstr "" + +#: ipaserver/plugins/dogtag.py:1273 +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1299 +msgid "Unable to communicate with CMS" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1490 ipaserver/plugins/dogtag.py:1576 +#: ipaserver/plugins/dogtag.py:2083 ipaserver/plugins/dogtag.py:2093 +msgid "Response from CA was not valid JSON" +msgstr "" + +#: ipaserver/plugins/host.py:74 +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +#: ipaserver/plugins/host.py:82 +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +#: ipaserver/plugins/host.py:94 +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +#: ipaserver/plugins/host.py:106 +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +#: ipaserver/plugins/host.py:109 +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:112 +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:115 +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:118 +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:121 +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:124 +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:127 +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +#: ipaserver/plugins/host.py:130 +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#: ipaserver/plugins/host.py:514 +msgid "Base-64 encoded host certificate" +msgstr "" + +#: ipaserver/plugins/host.py:668 +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:792 +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:797 +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +#: ipaserver/plugins/host.py:869 +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#: ipaserver/plugins/host.py:885 +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:906 +msgid "Password cannot be set on enrolled host." +msgstr "" + +#: ipaserver/plugins/host.py:910 +msgid "cn is immutable" +msgstr "" + +#: ipaserver/plugins/host.py:1035 +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/host.py:1190 +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1359 +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1366 +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1382 +msgid "Add new principal alias to host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1383 +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1394 +msgid "Remove principal alias from a host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1395 +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + #: ipaserver/plugins/permission.py:40 msgid "" "\n" @@ -23723,695 +26062,11 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/pkinit.py:13 -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -#: ipaserver/plugins/pkinit.py:39 -msgid "pkinit" -msgstr "" - -#: ipaserver/plugins/pkinit.py:53 -msgid "PKINIT status" -msgstr "" - -#: ipaserver/plugins/pkinit.py:54 -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -#: ipaserver/plugins/pkinit.py:63 -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#: ipaserver/plugins/pkinit.py:65 -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/privilege.py:76 +#: ipaserver/plugins/join.py:125 #, python-format msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:149 -msgid "Privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:169 -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:176 -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:183 -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:191 -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/radiusproxy.py:35 -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:37 -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:39 -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:45 -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:48 -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:51 -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:54 -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:57 -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:68 -msgid "invalid attribute name" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:80 -msgid "invalid port number" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:98 -msgid "RADIUS proxy server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:99 -msgid "RADIUS proxy servers" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:106 -msgid "RADIUS Servers" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:107 -msgid "RADIUS Server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:172 -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:177 -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:182 -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:188 -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/realmdomains.py:34 -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:85 -msgid "Realm domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:134 -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#: ipaserver/plugins/realmdomains.py:177 -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:203 -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:218 -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:241 -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:252 -msgid "IPA server domain cannot be omitted" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:274 -msgid "IPA server domain cannot be deleted" -msgstr "" - -#: ipaserver/plugins/role.py:82 ipaserver/plugins/serverrole.py:186 -msgid "roles" -msgstr "" - -#: ipaserver/plugins/role.py:143 -msgid "Role" -msgstr "" - -#: ipaserver/plugins/role.py:164 -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:172 -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:180 -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:189 -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/schema.py:24 -msgid "" -"\n" -"API Schema\n" -msgstr "" - -#: ipaserver/plugins/schema.py:26 -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#: ipaserver/plugins/schema.py:30 -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -#: ipaserver/plugins/schema.py:33 -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#: ipaserver/plugins/schema.py:54 -msgid "Documentation" -msgstr "" - -#: ipaserver/plugins/schema.py:59 -msgid "Exclude from" -msgstr "" - -#: ipaserver/plugins/schema.py:64 -msgid "Include in" -msgstr "" - -#: ipaserver/plugins/schema.py:135 -msgid "Help topic" -msgstr "" - -#: ipaserver/plugins/schema.py:172 -msgid "Parameters" -msgstr "" - -#: ipaserver/plugins/schema.py:207 -msgid "Method of" -msgstr "" - -#: ipaserver/plugins/schema.py:212 -msgid "Method name" -msgstr "" - -#: ipaserver/plugins/schema.py:270 -msgid "Display information about a command." -msgstr "" - -#: ipaserver/plugins/schema.py:275 -msgid "Search for commands." -msgstr "" - -#: ipaserver/plugins/schema.py:280 -msgid "Return command defaults" -msgstr "" - -#: ipaserver/plugins/schema.py:291 -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -#: ipaserver/plugins/schema.py:344 -msgid "Display information about a class." -msgstr "" - -#: ipaserver/plugins/schema.py:349 -msgid "Search for classes." -msgstr "" - -#: ipaserver/plugins/schema.py:436 -msgid "Display information about a help topic." -msgstr "" - -#: ipaserver/plugins/schema.py:441 -msgid "Search for help topics." -msgstr "" - -#: ipaserver/plugins/schema.py:453 -msgid "Required" -msgstr "" - -#: ipaserver/plugins/schema.py:458 -msgid "Multi-value" -msgstr "" - -#: ipaserver/plugins/schema.py:508 -msgid "Always ask" -msgstr "" - -#: ipaserver/plugins/schema.py:513 -msgid "CLI metavar" -msgstr "" - -#: ipaserver/plugins/schema.py:518 -msgid "CLI name" -msgstr "" - -#: ipaserver/plugins/schema.py:523 -msgid "Confirm (password)" -msgstr "" - -#: ipaserver/plugins/schema.py:528 -msgid "Default" -msgstr "" - -#: ipaserver/plugins/schema.py:533 -msgid "Default from" -msgstr "" - -#: ipaserver/plugins/schema.py:538 -msgid "Label" -msgstr "" - -#: ipaserver/plugins/schema.py:543 -msgid "Convert on server" -msgstr "" - -#: ipaserver/plugins/schema.py:548 -msgid "Option group" -msgstr "" - -#: ipaserver/plugins/schema.py:553 -msgid "Sensitive" -msgstr "" - -#: ipaserver/plugins/schema.py:558 -msgid "Positional argument" -msgstr "" - -#: ipaserver/plugins/schema.py:643 -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/schema.py:682 -msgid "Display information about a command parameter." -msgstr "" - -#: ipaserver/plugins/schema.py:687 -msgid "Search command parameters." -msgstr "" - -#: ipaserver/plugins/schema.py:744 -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/schema.py:769 -msgid "Display information about a command output." -msgstr "" - -#: ipaserver/plugins/schema.py:774 -msgid "Search for command outputs." -msgstr "" - -#: ipaserver/plugins/schema.py:779 -msgid "Store and provide schema for commands and topics" -msgstr "" - -#: ipaserver/plugins/schema.py:785 -msgid "Fingerprint of schema cached by client" -msgstr "" - -#: ipaserver/plugins/selfservice.py:68 -msgid "self service permission" -msgstr "" - -#: ipaserver/plugins/selfservice.py:69 -msgid "self service permissions" -msgstr "" - -#: ipaserver/plugins/selfservice.py:70 -msgid "Self Service Permissions" -msgstr "" - -#: ipaserver/plugins/selfservice.py:71 -msgid "Self Service Permission" -msgstr "" - -#: ipaserver/plugins/selfservice.py:124 -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:146 -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:163 -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:185 -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/selinuxusermap.py:89 -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:128 -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:142 -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:147 -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:161 -msgid "SELinux user map list not found in configuration" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:166 -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:176 -msgid "SELinux User Map rule" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:177 -msgid "SELinux User Map rules" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:233 -msgid "SELinux User Maps" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:234 -msgid "SELinux User Map" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:309 -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:330 -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:368 -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:376 -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:449 -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/selinuxusermap.py:499 -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:529 -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/serverrole.py:13 -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:15 -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:17 -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:21 -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:24 -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:27 -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:30 -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:46 -msgid "server role" -msgstr "" - -#: ipaserver/plugins/serverrole.py:47 -msgid "server roles" -msgstr "" - -#: ipaserver/plugins/serverrole.py:51 -msgid "IPA Server Roles" -msgstr "" - -#: ipaserver/plugins/serverrole.py:52 -msgid "IPA Server Role" -msgstr "" - -#: ipaserver/plugins/serverrole.py:65 -msgid "IPA server role name" -msgstr "" - -#: ipaserver/plugins/serverrole.py:71 -msgid "Role status" -msgstr "" - -#: ipaserver/plugins/serverrole.py:72 -msgid "Status of the role" -msgstr "" - -#: ipaserver/plugins/serverrole.py:89 -msgid "Show role status on a server" -msgstr "" - -#: ipaserver/plugins/serverrole.py:113 -msgid "Find a server role on a server(s)" -msgstr "" - -#: ipaserver/plugins/serverrole.py:118 -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/serverrole.py:139 -msgid "Include IPA master entries" -msgstr "" - -#: ipaserver/plugins/serverrole.py:192 -msgid "IPA role name" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" #: ipaserver/plugins/serverroles.py:84 @@ -24424,1692 +26079,6 @@ msgstr "" msgid "{attr}: no such attribute" msgstr "" -#: ipaserver/plugins/service.py:60 -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -#: ipaserver/plugins/service.py:113 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/service.py:116 -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -#: ipaserver/plugins/service.py:180 -msgid "Trusted to authenticate as user" -msgstr "" - -#: ipaserver/plugins/service.py:181 -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#: ipaserver/plugins/service.py:226 -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#: ipaserver/plugins/service.py:242 -msgid "Malformed principal" -msgstr "" - -#: ipaserver/plugins/service.py:321 -msgid "{} is required by the IPA master" -msgstr "" - -#: ipaserver/plugins/service.py:395 -msgid "service" -msgstr "" - -#: ipaserver/plugins/service.py:396 -msgid "services" -msgstr "" - -#: ipaserver/plugins/service.py:512 -msgid "Service principal alias" -msgstr "" - -#: ipaserver/plugins/service.py:520 -msgid "Base-64 encoded service certificate" -msgstr "" - -#: ipaserver/plugins/service.py:596 -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -#: ipaserver/plugins/service.py:648 -msgid "Add a new IPA service." -msgstr "" - -#: ipaserver/plugins/service.py:650 ipaserver/plugins/service.py:719 -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:656 -msgid "force principal name even if host not in DNS" -msgstr "" - -#: ipaserver/plugins/service.py:659 -msgid "Skip host check" -msgstr "" - -#: ipaserver/plugins/service.py:660 -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#: ipaserver/plugins/service.py:678 ipaserver/plugins/service.py:787 -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#: ipaserver/plugins/service.py:717 -msgid "Add a new SMB service." -msgstr "" - -#: ipaserver/plugins/service.py:733 -msgid "SMB service NetBIOS name" -msgstr "" - -#: ipaserver/plugins/service.py:847 -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:867 -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:918 -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/service.py:1117 -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1158 -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1165 -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1181 -msgid "Add new principal alias to a service" -msgstr "" - -#: ipaserver/plugins/service.py:1182 -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1193 -msgid "Remove principal alias from a service" -msgstr "" - -#: ipaserver/plugins/service.py:1194 -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:26 -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:172 -msgid "Allowed to Impersonate" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:177 -msgid "Member principals" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:189 -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:199 -msgid "Add target to a named service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:287 -msgid "Remove member from a named service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:378 -#: ipaserver/plugins/servicedelegation.py:411 -msgid "service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:379 -msgid "service delegation rules" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:390 -msgid "Service delegation rules" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:391 -msgid "Service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:398 -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:405 -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:413 -msgid "privileged service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:423 -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/servicedelegation.py:471 -#: ipaserver/plugins/servicedelegation.py:500 -msgid "service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:472 -msgid "service delegation targets" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:479 -msgid "Service delegation targets" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:480 -msgid "Service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:487 -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:494 -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:502 -msgid "privileged service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:512 -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/session.py:12 -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -#: ipaserver/plugins/stageuser.py:65 -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#: ipaserver/plugins/stageuser.py:128 -msgid "Stage Users" -msgstr "" - -#: ipaserver/plugins/stageuser.py:129 -msgid "Stage User" -msgstr "" - -#: ipaserver/plugins/stageuser.py:130 -msgid "stage user" -msgstr "" - -#: ipaserver/plugins/stageuser.py:131 -msgid "stage users" -msgstr "" - -#: ipaserver/plugins/stageuser.py:278 -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:297 -msgid "givenname is required" -msgstr "" - -#: ipaserver/plugins/stageuser.py:300 -msgid "sn is required" -msgstr "" - -#: ipaserver/plugins/stageuser.py:418 -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:424 -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:471 ipaserver/plugins/user.py:871 -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/stageuser.py:495 -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:508 -msgid "Entry RDN is not 'uid'" -msgstr "" - -#: ipaserver/plugins/stageuser.py:514 -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#: ipaserver/plugins/stageuser.py:690 -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#: ipaserver/plugins/stageuser.py:754 -#, python-format -msgid "Stage user %s activated" -msgstr "" - -#: ipaserver/plugins/stageuser.py:771 -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:772 -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:777 -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:778 -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:783 -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:784 -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:789 -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:790 -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:795 -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -#: ipaserver/plugins/stageuser.py:801 -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#: ipaserver/plugins/subid.py:29 -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -#: ipaserver/plugins/subid.py:59 ipaserver/plugins/subid.py:62 -msgid "Subordinate id" -msgstr "" - -#: ipaserver/plugins/subid.py:60 ipaserver/plugins/subid.py:61 -msgid "Subordinate ids" -msgstr "" - -#: ipaserver/plugins/subid.py:144 -msgid "Subordinate id description" -msgstr "" - -#: ipaserver/plugins/subid.py:150 ipaserver/plugins/subid.py:468 -msgid "Owning user of subordinate id entry" -msgstr "" - -#: ipaserver/plugins/subid.py:157 -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#: ipaserver/plugins/subid.py:166 -msgid "Subordinate user ID count" -msgstr "" - -#: ipaserver/plugins/subid.py:175 -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#: ipaserver/plugins/subid.py:184 -msgid "Subordinate group ID count" -msgstr "" - -#: ipaserver/plugins/subid.py:213 -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#: ipaserver/plugins/subid.py:246 -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -#: ipaserver/plugins/subid.py:278 -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#: ipaserver/plugins/subid.py:351 -msgid "Add a new subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:352 -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:384 -msgid "Delete a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:385 -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:393 -msgid "Modify a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:394 -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:405 -msgid "Search for subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:407 -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/subid.py:440 -msgid "Display information about a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:458 -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -#: ipaserver/plugins/subid.py:493 -msgid "Match users by any subordinate uid in their range" -msgstr "" - -#: ipaserver/plugins/subid.py:500 -msgid "SubUID match" -msgstr "" - -#: ipaserver/plugins/subid.py:501 -msgid "Match value for subordinate user ID" -msgstr "" - -#: ipaserver/plugins/subid.py:542 -msgid "Subordinate id statistics" -msgstr "" - -#: ipaserver/plugins/subid.py:586 -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -#: ipaserver/plugins/sudo.py:7 -msgid "commands for controlling sudo configuration" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:33 -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:55 -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:64 -msgid "sudo command" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:65 -msgid "sudo commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:117 -msgid "Sudo Commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:154 -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:160 -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:193 -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:201 -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/sudocmdgroup.py:34 -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:67 -msgid "sudo command group" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:68 -msgid "sudo command groups" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:149 -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:157 -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:165 -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:174 -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:24 -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:28 -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -#: ipaserver/plugins/topology.py:33 -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:39 -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:43 -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -#: ipaserver/plugins/topology.py:47 -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:52 -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:55 -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:58 -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:61 -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:64 -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:67 -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:70 -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:73 -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:76 -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:92 -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -#: ipaserver/plugins/topology.py:104 -msgid "segment" -msgstr "" - -#: ipaserver/plugins/topology.py:105 -msgid "segments" -msgstr "" - -#: ipaserver/plugins/topology.py:119 -msgid "Topology Segments" -msgstr "" - -#: ipaserver/plugins/topology.py:120 -msgid "Topology Segment" -msgstr "" - -#: ipaserver/plugins/topology.py:226 -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:233 -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:250 -msgid "left node and right node must not be the same" -msgstr "" - -#: ipaserver/plugins/topology.py:261 -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:269 -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:280 -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:289 -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:302 -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:314 -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:329 -#, python-format -msgid "%(value)s" -msgstr "" - -#: ipaserver/plugins/topology.py:365 -msgid "left or right node has to be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:370 -msgid "only one node can be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:374 -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:377 -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:408 -msgid "suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:412 -msgid "Topology suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:413 -msgid "Topology suffix" -msgstr "" - -#: ipaserver/plugins/topology.py:435 -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:446 -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:460 -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:474 -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:489 -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#: ipaserver/plugins/trust.py:83 -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#: ipaserver/plugins/trust.py:226 -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#: ipaserver/plugins/trust.py:239 ipaserver/plugins/trust.py:871 -#: ipaserver/plugins/trust.py:887 ipaserver/plugins/trust.py:908 -#: ipaserver/plugins/trust.py:918 ipaserver/plugins/trust.py:1071 -#: ipaserver/plugins/trust.py:1106 -msgid "AD Trust setup" -msgstr "" - -#: ipaserver/plugins/trust.py:250 -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -#: ipaserver/plugins/trust.py:260 -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -#: ipaserver/plugins/trust.py:474 -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/trust.py:487 -msgid "trust" -msgstr "" - -#: ipaserver/plugins/trust.py:488 -msgid "trusts" -msgstr "" - -#: ipaserver/plugins/trust.py:531 -msgid "Trust" -msgstr "" - -#: ipaserver/plugins/trust.py:549 -msgid "SID blocklist incoming" -msgstr "" - -#: ipaserver/plugins/trust.py:553 -msgid "SID blocklist outgoing" -msgstr "" - -#: ipaserver/plugins/trust.py:569 -msgid "UPN suffixes" -msgstr "" - -#: ipaserver/plugins/trust.py:586 -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -#: ipaserver/plugins/trust.py:654 -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:712 -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#: ipaserver/plugins/trust.py:724 -msgid "External trust" -msgstr "" - -#: ipaserver/plugins/trust.py:726 -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#: ipaserver/plugins/trust.py:732 -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:733 -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:829 -msgid "missing base_id" -msgstr "" - -#: ipaserver/plugins/trust.py:831 -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#: ipaserver/plugins/trust.py:841 -msgid "trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:842 -msgid "only \"ad\" is supported" -msgstr "" - -#: ipaserver/plugins/trust.py:849 -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -#: ipaserver/plugins/trust.py:862 -msgid "Realm-domain mismatch" -msgstr "" - -#: ipaserver/plugins/trust.py:863 -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#: ipaserver/plugins/trust.py:889 -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -#: ipaserver/plugins/trust.py:910 -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -#: ipaserver/plugins/trust.py:919 -msgid "Realm administrator password should be specified" -msgstr "" - -#: ipaserver/plugins/trust.py:940 -msgid "id range type" -msgstr "" - -#: ipaserver/plugins/trust.py:942 -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -#: ipaserver/plugins/trust.py:952 -msgid "id range" -msgstr "" - -#: ipaserver/plugins/trust.py:954 -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -#: ipaserver/plugins/trust.py:976 -msgid "range exists" -msgstr "" - -#: ipaserver/plugins/trust.py:978 -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -#: ipaserver/plugins/trust.py:986 -msgid "range type change" -msgstr "" - -#: ipaserver/plugins/trust.py:987 -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#: ipaserver/plugins/trust.py:1025 -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -#: ipaserver/plugins/trust.py:1039 -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#: ipaserver/plugins/trust.py:1045 -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#: ipaserver/plugins/trust.py:1057 -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -#: ipaserver/plugins/trust.py:1072 -msgid "Unable to verify write permissions to the AD" -msgstr "" - -#: ipaserver/plugins/trust.py:1107 -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#: ipaserver/plugins/trust.py:1115 -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1120 -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:1127 -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#: ipaserver/plugins/trust.py:1145 -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/trust.py:1234 -msgid "trust configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1240 ipaserver/plugins/trust.py:1241 -msgid "Global Trust Configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1266 -msgid "IPA AD trust agents" -msgstr "" - -#: ipaserver/plugins/trust.py:1267 -msgid "IPA servers configured as AD trust agents" -msgstr "" - -#: ipaserver/plugins/trust.py:1272 -msgid "IPA AD trust controllers" -msgstr "" - -#: ipaserver/plugins/trust.py:1273 -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#: ipaserver/plugins/trust.py:1287 -msgid "unsupported trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:1354 -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1419 -msgid "SID" -msgstr "" - -#: ipaserver/plugins/trust.py:1545 -msgid "sidgen_was_run" -msgstr "" - -#: ipaserver/plugins/trust.py:1547 -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -#: ipaserver/plugins/trust.py:1566 -msgid "trust domain" -msgstr "" - -#: ipaserver/plugins/trust.py:1567 -msgid "trust domains" -msgstr "" - -#: ipaserver/plugins/trust.py:1575 -msgid "Trusted domains" -msgstr "" - -#: ipaserver/plugins/trust.py:1576 -msgid "Trusted domain" -msgstr "" - -#: ipaserver/plugins/trust.py:1590 -msgid "Domain enabled" -msgstr "" - -#: ipaserver/plugins/trust.py:1662 -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1680 -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#: ipaserver/plugins/trust.py:1831 -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -#: ipaserver/plugins/trust.py:1839 -msgid "Configure this server as a trust agent." -msgstr "" - -#: ipaserver/plugins/trust.py:1855 -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#: ipaserver/plugins/trust.py:1865 ipaserver/plugins/server.py:927 -#, python-format -msgid "must be \"%s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1871 -msgid "not allowed to remotely add agent" -msgstr "" - -#: ipaserver/plugins/trust.py:1907 -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1916 -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#: ipaserver/plugins/trust.py:1949 -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1958 -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#: ipaserver/plugins/user.py:164 ipaserver/plugins/sudorule.py:433 -msgid "users" -msgstr "" - -#: ipaserver/plugins/user.py:496 -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:595 -msgid "Default group for new users is not POSIX" -msgstr "" - -#: ipaserver/plugins/user.py:695 -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:713 -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#: ipaserver/plugins/user.py:835 -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:949 -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:963 -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#: ipaserver/plugins/user.py:994 -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1089 -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1111 -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1128 -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#: ipaserver/plugins/user.py:1137 -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1169 -msgid "Failed logins" -msgstr "" - -#: ipaserver/plugins/user.py:1173 -msgid "Last successful authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1177 -msgid "Last failed authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1181 -msgid "Time now" -msgstr "" - -#: ipaserver/plugins/user.py:1189 -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#: ipaserver/plugins/user.py:1243 -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#: ipaserver/plugins/user.py:1281 -#, python-format -msgid "%(host)s failed" -msgstr "" - -#: ipaserver/plugins/user.py:1291 -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#: ipaserver/plugins/user.py:1299 -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1305 -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1330 -msgid "Add new principal alias to the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1331 -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1336 -msgid "Remove principal alias from the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1337 -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - #: ipaserver/plugins/vault.py:54 msgid "" "\n" @@ -26529,409 +26498,6 @@ msgstr "" msgid "No such virtual command" msgstr "" -#: ipaserver/plugins/whoami.py:15 -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -#: ipaserver/plugins/whoami.py:77 -msgid "Describe currently authenticated identity." -msgstr "" - -#: ipaserver/plugins/whoami.py:82 ipaserver/plugins/whoami.py:88 -msgid "Object class name" -msgstr "" - -#: ipaserver/plugins/whoami.py:83 ipaserver/plugins/whoami.py:89 -msgid "Function to get details" -msgstr "" - -#: ipaserver/plugins/whoami.py:84 ipaserver/plugins/whoami.py:91 -msgid "Arguments to details function" -msgstr "" - -#: ipaserver/plugins/whoami.py:111 -msgid "Cannot query Directory Manager with API" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:92 -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:143 -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:171 -msgid "Add Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:194 -msgid "Delete Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:200 -msgid "Modify Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:218 -msgid "Display Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:224 -msgid "Search for Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:237 -msgid "password policy" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:238 -msgid "password policies" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:297 -msgid "Password Policies" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:370 -msgid "Max repeat" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:371 -msgid "Maximum number of same consecutive characters" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:379 -msgid "Max sequence" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:380 -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:388 -msgid "Dictionary check" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:389 -msgid "Check if the password is a dictionary word" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:395 -msgid "User check" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:396 -msgid "Check if the password contains the username" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:469 -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:495 -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:554 -msgid "cannot delete global password policy" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:588 -msgid "priority cannot be set on global policy" -msgstr "" - -#: ipaserver/plugins/server.py:36 -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -#: ipaserver/plugins/server.py:38 -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#: ipaserver/plugins/server.py:42 -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/server.py:45 -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/server.py:61 -msgid "server" -msgstr "" - -#: ipaserver/plugins/server.py:62 -msgid "servers" -msgstr "" - -#: ipaserver/plugins/server.py:70 -msgid "IPA Servers" -msgstr "" - -#: ipaserver/plugins/server.py:133 -msgid "Server location" -msgstr "" - -#: ipaserver/plugins/server.py:140 -msgid "Service weight" -msgstr "" - -#: ipaserver/plugins/server.py:141 -msgid "Weight for server services" -msgstr "" - -#: ipaserver/plugins/server.py:148 -msgid "Service relative weight" -msgstr "" - -#: ipaserver/plugins/server.py:149 -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#: ipaserver/plugins/server.py:154 -msgid "Enabled server roles" -msgstr "" - -#: ipaserver/plugins/server.py:155 -msgid "List of enabled roles" -msgstr "" - -#: ipaserver/plugins/server.py:222 -msgid "Modify information about an IPA server." -msgstr "" - -#: ipaserver/plugins/server.py:224 -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:306 -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/server.py:444 -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:449 -msgid "Ignore topology errors" -msgstr "" - -#: ipaserver/plugins/server.py:450 -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -#: ipaserver/plugins/server.py:455 -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -#: ipaserver/plugins/server.py:456 -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -#: ipaserver/plugins/server.py:462 -msgid "Force server removal" -msgstr "" - -#: ipaserver/plugins/server.py:463 -msgid "Force server removal even if it does not exist" -msgstr "" - -#: ipaserver/plugins/server.py:500 -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -#: ipaserver/plugins/server.py:506 -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -#: ipaserver/plugins/server.py:520 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -#: ipaserver/plugins/server.py:530 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -#: ipaserver/plugins/server.py:545 -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#: ipaserver/plugins/server.py:595 -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:616 -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:637 -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:663 -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:701 -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:717 -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:722 -msgid "You may need to manually remove them from the tree" -msgstr "" - -#: ipaserver/plugins/server.py:737 -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -#: ipaserver/plugins/server.py:747 -msgid "Ignoring topology connectivity errors." -msgstr "" - -#: ipaserver/plugins/server.py:766 -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -#: ipaserver/plugins/server.py:793 -msgid "Server has already been deleted" -msgstr "" - -#: ipaserver/plugins/server.py:843 -msgid "Agreements deleted" -msgstr "" - -#: ipaserver/plugins/server.py:854 -msgid "Following segments were not deleted:" -msgstr "" - -#: ipaserver/plugins/server.py:939 -msgid "not allowed to perform server connection check" -msgstr "" - -#: ipaserver/plugins/server.py:965 -msgid "Set enabled/hidden state of a server." -msgstr "" - -#: ipaserver/plugins/server.py:971 -msgid "State" -msgstr "" - -#: ipaserver/plugins/server.py:972 -msgid "Server state" -msgstr "" - -#: ipaserver/plugins/server.py:977 -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -#: ipaserver/plugins/server.py:986 -msgid "Cannot hide CA renewal master." -msgstr "" - -#: ipaserver/plugins/server.py:988 -msgid "Cannot hide DNSSec key master." -msgstr "" - -#: ipaserver/plugins/server.py:1000 -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - #: ipaserver/plugins/sudorule.py:43 msgid "" "\n" @@ -26981,9 +26547,9 @@ msgstr "" msgid "" "\n" "To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" msgstr "" #: ipaserver/plugins/sudorule.py:73 @@ -27079,6 +26645,10 @@ msgid "" "%(type)s category cannot be set to 'all' while there are allowed %(objects)s" msgstr "" +#: ipaserver/plugins/sudorule.py:433 ipaserver/plugins/user.py:164 +msgid "users" +msgstr "" + #: ipaserver/plugins/sudorule.py:443 msgid "command" msgstr "" @@ -27133,32 +26703,443 @@ msgstr "" msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" -#: ipaserver/rpcserver.py:556 -msgid "Request must be a dict" +#: ipaserver/plugins/aci.py:165 +msgid "A list of ACI values" msgstr "" -#: ipaserver/rpcserver.py:558 -msgid "Request is missing \"method\"" +#: ipaserver/plugins/aci.py:229 +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -#: ipaserver/rpcserver.py:560 -msgid "Request is missing \"params\"" +#: ipaserver/plugins/aci.py:232 +msgid "ACI prefix is required" msgstr "" -#: ipaserver/rpcserver.py:565 -msgid "params must be a list" +#: ipaserver/plugins/aci.py:235 +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" msgstr "" -#: ipaserver/rpcserver.py:567 -msgid "params must contain [args, options]" +#: ipaserver/plugins/aci.py:238 +msgid "filter and memberof are mutually exclusive" msgstr "" -#: ipaserver/rpcserver.py:570 -msgid "params[0] (aka args) must be a list" +#: ipaserver/plugins/aci.py:244 +msgid "group, permission and self are mutually exclusive" msgstr "" -#: ipaserver/rpcserver.py:573 -msgid "params[1] (aka options) must be a dict" +#: ipaserver/plugins/aci.py:246 +msgid "One of group, permission or self is required" +msgstr "" + +#: ipaserver/plugins/aci.py:269 +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +#: ipaserver/plugins/aci.py:295 +msgid "empty filter" +msgstr "" + +#: ipaserver/plugins/aci.py:316 +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#: ipaserver/plugins/aci.py:361 +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#: ipaserver/plugins/aci.py:408 +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +#: ipaserver/plugins/aci.py:437 +msgid "ACI object." +msgstr "" + +#: ipaserver/plugins/aci.py:440 +msgid "ACIs" +msgstr "" + +#: ipaserver/plugins/aci.py:524 +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/aci.py:577 +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/aci.py:620 +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/aci.py:694 +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/aci.py:929 +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/batch.py:35 +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +#: ipaserver/plugins/batch.py:71 +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +#: ipaserver/plugins/batch.py:122 +msgid "must contain a tuple (list, dict)" +msgstr "" + +#: ipaserver/plugins/domainlevel.py:69 +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +#: ipaserver/plugins/domainlevel.py:112 +msgid "Server does not support domain level functionality" +msgstr "" + +#: ipaserver/plugins/domainlevel.py:147 +msgid "Domain Level cannot be lowered." +msgstr "" + +#: ipaserver/plugins/domainlevel.py:155 +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +#: ipaserver/plugins/serverrole.py:13 +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:15 +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:17 +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:21 +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:24 +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:27 +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:30 +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#: ipaserver/plugins/serverrole.py:46 +msgid "server role" +msgstr "" + +#: ipaserver/plugins/serverrole.py:47 +msgid "server roles" +msgstr "" + +#: ipaserver/plugins/serverrole.py:51 +msgid "IPA Server Roles" +msgstr "" + +#: ipaserver/plugins/serverrole.py:52 +msgid "IPA Server Role" +msgstr "" + +#: ipaserver/plugins/serverrole.py:65 +msgid "IPA server role name" +msgstr "" + +#: ipaserver/plugins/serverrole.py:71 +msgid "Role status" +msgstr "" + +#: ipaserver/plugins/serverrole.py:72 +msgid "Status of the role" +msgstr "" + +#: ipaserver/plugins/serverrole.py:89 +msgid "Show role status on a server" +msgstr "" + +#: ipaserver/plugins/serverrole.py:113 +msgid "Find a server role on a server(s)" +msgstr "" + +#: ipaserver/plugins/serverrole.py:118 +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/serverrole.py:139 +msgid "Include IPA master entries" +msgstr "" + +#: ipaserver/plugins/serverrole.py:192 +msgid "IPA role name" +msgstr "" + +#: ipaserver/plugins/user.py:496 +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:595 +msgid "Default group for new users is not POSIX" +msgstr "" + +#: ipaserver/plugins/user.py:695 +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:713 +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#: ipaserver/plugins/user.py:835 +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:949 +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:963 +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#: ipaserver/plugins/user.py:994 +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1089 +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1111 +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1128 +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#: ipaserver/plugins/user.py:1137 +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1169 +msgid "Failed logins" +msgstr "" + +#: ipaserver/plugins/user.py:1173 +msgid "Last successful authentication" +msgstr "" + +#: ipaserver/plugins/user.py:1177 +msgid "Last failed authentication" +msgstr "" + +#: ipaserver/plugins/user.py:1181 +msgid "Time now" +msgstr "" + +#: ipaserver/plugins/user.py:1189 +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#: ipaserver/plugins/user.py:1243 +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#: ipaserver/plugins/user.py:1281 +#, python-format +msgid "%(host)s failed" +msgstr "" + +#: ipaserver/plugins/user.py:1291 +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#: ipaserver/plugins/user.py:1299 +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1305 +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1330 +msgid "Add new principal alias to the user entry" +msgstr "" + +#: ipaserver/plugins/user.py:1331 +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1336 +msgid "Remove principal alias from the user entry" +msgstr "" + +#: ipaserver/plugins/user.py:1337 +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#: ipaserver/dcerpc_common.py:20 +msgid "Trusting forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:21 +msgid "Trusted forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:26 +msgid "Established and verified" +msgstr "" + +#: ipaserver/dcerpc_common.py:27 +msgid "Waiting for confirmation by remote side" +msgstr "" + +#: ipaserver/dcerpc_common.py:30 +msgid "Unknown" +msgstr "" + +#: ipaserver/dcerpc_common.py:36 +msgid "Non-Active Directory domain" +msgstr "" + +#: ipaserver/dcerpc_common.py:38 +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +#: ipaserver/dcerpc_common.py:39 +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:41 +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" #: ipaserver/servroles.py:296 @@ -27197,6 +27178,34 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" +#: ipaserver/rpcserver.py:556 +msgid "Request must be a dict" +msgstr "" + +#: ipaserver/rpcserver.py:558 +msgid "Request is missing \"method\"" +msgstr "" + +#: ipaserver/rpcserver.py:560 +msgid "Request is missing \"params\"" +msgstr "" + +#: ipaserver/rpcserver.py:565 +msgid "params must be a list" +msgstr "" + +#: ipaserver/rpcserver.py:567 +msgid "params must contain [args, options]" +msgstr "" + +#: ipaserver/rpcserver.py:570 +msgid "params[0] (aka args) must be a list" +msgstr "" + +#: ipaserver/rpcserver.py:573 +msgid "params[1] (aka options) must be a dict" +msgstr "" + #: ipaserver/dcerpc.py:87 msgid "" "\n" @@ -27401,6 +27410,41 @@ msgstr "" msgid "must be at least 1" msgstr "" +#: util/ipa_ldap.c:79 +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +#: util/ipa_ldap.c:89 +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +#: util/ipa_ldap.c:97 +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +#: util/ipa_ldap.c:126 +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +#: util/ipa_ldap.c:133 +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +#: util/ipa_ldap.c:140 +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +#: util/ipa_ldap.c:147 +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +#: util/ipa_ldap.c:156 +msgid "Unable to initialize STARTTLS session\n" +msgstr "" + #: util/ipa_krb5.c:813 util/ipa_krb5.c:828 msgid "Out of memory\n" msgstr "" @@ -27437,38 +27481,3 @@ msgstr "" #: util/ipa_krb5.c:1069 msgid "Bad or unsupported salt type.\n" msgstr "" - -#: util/ipa_ldap.c:79 -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -#: util/ipa_ldap.c:89 -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -#: util/ipa_ldap.c:97 -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -#: util/ipa_ldap.c:126 -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -#: util/ipa_ldap.c:133 -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -#: util/ipa_ldap.c:140 -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -#: util/ipa_ldap.c:147 -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#: util/ipa_ldap.c:156 -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/ru.po b/po/ru.po index 4d1b3b9e3..8646b4238 100644 --- a/po/ru.po +++ b/po/ru.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-11-25 18:48+0100\n" +"POT-Creation-Date: 2022-02-07 10:43+0200\n" "PO-Revision-Date: 2019-11-12 12:31+0000\n" "Last-Translator: Olesya Gerasimenko \n" "Language-Team: Russian\n" @@ -13654,196 +13654,6 @@ msgstr "" "\n" "Правила Sudo\n" -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -"Правила Sudo\n" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать новое правило:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Добавить объект команды Sudo и добавить его в правило в качестве " -"разрешённой команды:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Добавить узел в правило:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Добавить пользователя в правило:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Добавить специальное правило Sudo для конфигурации сервера Sudo по " -"умолчанию:\n" -" ipa sudorule-add defaults\n" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" -"\n" -"Правила Sudo\n" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"Дополнительные сведения приведены в документации IPA по Sudo.\n" - msgid "" "\n" "Symmetric vault is similar to the standard vault, but it\n" @@ -13939,19 +13749,6 @@ msgstr "" "Этот код является расширением подключаемого модуля otptoken и предоставляет " "поддержку прямого чтения или записи токенов YubiKey.\n" -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - msgid "" "\n" "To verify that no server is disconnected in the topology of the given " @@ -29989,6 +29786,209 @@ msgstr "{role}: роль не найдена" #~ "Процедуры по созданию запросов на подпись сертификатов с помощью данных " #~ "IPA и сохранённых шаблонов.\n" +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Create a new rule:\n" +#~ " ipa sudorule-add readfiles\n" +#~ "\n" +#~ " Add sudo command object and add it as allowed command in the rule:\n" +#~ " ipa sudocmd-add /usr/bin/less\n" +#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +#~ "\n" +#~ " Add a host to the rule:\n" +#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" +#~ "\n" +#~ " Add a user to the rule:\n" +#~ " ipa sudorule-add-user readfiles --users jsmith\n" +#~ "\n" +#~ " Add a special Sudo rule for default Sudo server configuration:\n" +#~ " ipa sudorule-add defaults\n" +#~ "\n" +#~ " Set a default Sudo option:\n" +#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +#~ msgstr "" +#~ "\n" +#~ "Правила Sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") позволяет системному администратору делегировать " +#~ "полномочия, чтобы дать определённым пользователям (или группам " +#~ "пользователей) возможность выполнять некоторые (или все) команды от имени " +#~ "пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +#~ "журнал аудита команд и их аргументов.\n" +#~ "\n" +#~ "IPA предоставляет возможности настройки различных аспектов Sudo:\n" +#~ " Users: пользователь (пользователи) или группа (группы), которые могут " +#~ "вызывать Sudo.\n" +#~ " Hosts: узел (узлы) или группа (группы) узлов, пользователи которых " +#~ "могут вызывать Sudo.\n" +#~ " Allow Command: конкретная команда (команды), которые разрешены для " +#~ "выполнения с помощью Sudo. \n" +#~ " Deny Command: конкретная команда (команды), которые запрещены для " +#~ "выполнения с помощью Sudo.\n" +#~ " RunAsUser: пользователь (пользователи) или группа (группы) " +#~ "пользователей, от имени которых Sudo будет выполнять команды.\n" +#~ " RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +#~ "команды.\n" +#~ " Options: различные параметры sudoers (участники Sudo), которые могут " +#~ "изменить поведение Sudo.\n" +#~ "\n" +#~ "Правилу Sudo можно добавить порядок, который будет руководить порядком " +#~ "обработки записей (если такой порядок предусмотрен на клиентской " +#~ "стороне). Порядок определяется числовым индексом (целое число), который " +#~ "не должен повторяться.\n" +#~ "\n" +#~ "IPA предусматривает специальную привязку DN (binddn) для использования с " +#~ "Sudo:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "ПРИМЕРЫ:\n" +#~ "\n" +#~ " Создать новое правило:\n" +#~ " ipa sudorule-add readfiles\n" +#~ "\n" +#~ " Добавить объект команды Sudo и добавить его в правило в качестве " +#~ "разрешённой команды:\n" +#~ " ipa sudocmd-add /usr/bin/less\n" +#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +#~ "\n" +#~ " Добавить узел в правило:\n" +#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" +#~ "\n" +#~ " Добавить пользователя в правило:\n" +#~ " ipa sudorule-add-user readfiles --users jsmith\n" +#~ "\n" +#~ " Добавить специальное правило Sudo для конфигурации сервера Sudo по " +#~ "умолчанию:\n" +#~ " ipa sudorule-add defaults\n" +#~ "\n" +#~ " Указать параметр Sudo по умолчанию:\n" +#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "For more information, see the IPA Documentation to Sudo.\n" +#~ msgstr "" +#~ "\n" +#~ "Правила Sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") позволяет системному администратору делегировать " +#~ "полномочия, чтобы дать определённым пользователям (или группам " +#~ "пользователей) возможность выполнять некоторые (или все) команды от имени " +#~ "пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +#~ "журнал аудита команд и их аргументов.\n" +#~ "\n" +#~ "IPA предоставляет возможности настройки различных аспектов Sudo:\n" +#~ " Users: пользователь (пользователи) или группа (группы), которые могут " +#~ "вызывать Sudo.\n" +#~ " Hosts: узел (узлы) или группа (группы) узлов, пользователи которых " +#~ "могут вызывать Sudo.\n" +#~ " Allow Command: конкретная команда (команды), которые разрешены для " +#~ "выполнения с помощью Sudo. \n" +#~ " Deny Command: конкретная команда (команды), которые запрещены для " +#~ "выполнения с помощью Sudo.\n" +#~ " RunAsUser: пользователь (пользователи) или группа (группы) " +#~ "пользователей, от имени которых Sudo будет выполнять команды.\n" +#~ " RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +#~ "команды.\n" +#~ " Options: различные параметры sudoers (участники Sudo), которые могут " +#~ "изменить поведение Sudo.\n" +#~ "\n" +#~ "Правилу Sudo можно добавить порядок, который будет руководить порядком " +#~ "обработки записей (если такой порядок предусмотрен на клиентской " +#~ "стороне). Порядок определяется числовым индексом (целое число), который " +#~ "не должен повторяться.\n" +#~ "\n" +#~ "IPA предусматривает специальную привязку DN (binddn) для использования с " +#~ "Sudo:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "Дополнительные сведения приведены в документации IPA по Sudo.\n" + +#~ msgid "" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ msgstr "" +#~ "\n" +#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" + #~ msgid "CSR Generation Profile to use" #~ msgstr "Профиль создания CSR, который следует использовать" diff --git a/po/uk.po b/po/uk.po index 9617d0569..449b8bed8 100644 --- a/po/uk.po +++ b/po/uk.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-11-25 18:48+0100\n" +"POT-Creation-Date: 2022-02-07 10:43+0200\n" "PO-Revision-Date: 2020-12-22 11:44+0000\n" "Last-Translator: Yuri Chornoivan \n" "Language-Team: Ukrainian